Next® Encrypted Storage
New functionality for those in need of encrypted storage for their documents.
Next® Encrypted Storage, impose strong encryption on all data stored in Next®.
From design, Next® already supports strong encryption of 'data in transit' using Transport Layer Security (TLS). With Next® Encrypted Storage, you gain the same level of encryption of the 'data at rest', without utilizing infrastructure encryption.
For the techie ones
For encryption of 'data at rest', we generally recommend using OS specific features such as DM-Crypt for Linux or BitLocker for Windows. Using infrastructure encryption provides the best possible performance and a minimum of inconveniences.
Next® Encrypted Storage, is for those who need strong encryption of data, and do not subscribe to the concept of infrastructure encryption. Among the benefits are the fact that backup copies of data are equally well protected. And that access to the infrastructure does not compromise the encryption. Drawbacks are primarily an increased risk of key-loss, and the inevitable performance penalty.
We use AES-128 GCM to obtain a strong encryption with a reasonable performance penalty. From theory, and backed by practical bench marking, you should expect a 20% performance penalty on systems that are CPU bound.
The architecture in Next® Encrypted Storage allows us to increase the strength of the encryption, should the need arise in the future.
Please refer to the online product guide for additional information on this feature, once it is released.
Commercial terms and conditions
This functionality is available as optional feature. Any consultancy assistance will be invoiced in addition to the license fee.
Despite our best efforts, we may be forced to change both content and expected delivery of future product updates without notice.
This feature awaits commercial approval.
For Next® as a Service, we are currently working with Microsoft to implement encryption with custom managed keys, in addition to the encryption already in place using platform managed keys. Azures encryption use 256-bit AES encryption, one of the strongest block ciphers available, and is FIPS 140-2 compliant.
Next® Encrypted Storage
New optional feature
Not yet allocated
Next® Bank Statements
Next® Enterprise Archive
Responsible product manager: