Next® Encrypted Storage

New functionality for those in need of encrypted storage for their documents.

Next® Encrypted Storage, impose strong encryption on all data stored in Next®.

From design, Next® already supports strong encryption of 'data in transit' using Transport Layer Security (TLS). With Next® Encrypted Storage, you gain the same level of encryption of the 'data at rest', without utilizing infrastructure encryption. 

For the techie ones

For encryption of 'data at rest', we generally recommend using OS specific features such as DM-Crypt for Linux or BitLocker for Windows. Using infrastructure encryption provides the best possible performance and a minimum of inconveniences. 

Next® Encrypted Storage, is for those who need strong encryption of data, and do not subscribe to the concept of infrastructure encryption. Among the benefits are the fact that backup copies of data are equally well protected. And that access to the infrastructure does not compromise the encryption. Drawbacks are primarily an increased risk of key-loss, and the inevitable performance penalty. 

We use AES-128 GCM to obtain a strong encryption with a reasonable performance penalty. From theory, and backed by practical bench marking, you should expect a 20% performance penalty on systems that are CPU bound. 

The architecture in Next® Encrypted Storage allows us to increase the strength of the encryption, should the need arise in the future.

Additional information

Please refer to the online product guide for additional information on this feature, once it is released.

Commercial terms and conditions

This functionality is available as optional feature.  Any consultancy assistance will be invoiced in addition to the license fee.

Disclaimer

Despite our best efforts, we may be forced to change both content and expected delivery of future product updates without notice.

  

This feature awaits commercial approval.

For Next® as a Service, we are currently working with Microsoft to implement encryption with custom managed keys, in addition to the encryption already in place using platform managed keys.   Azures encryption use 256-bit AES encryption, one of the strongest block ciphers available, and is FIPS 140-2 compliant. 

  


Details

Title:

Next® Encrypted Storage

Type:

New optional feature

Status:

Planned 

Expected release:

Not yet allocated

Affected products:

Next® Bank Statements
Next® Contracts
Next® Emails
Next® Enterprise Archive
Next® ExCustody
Next® Invoices
Next® Mailroom
Next® Processes

Audience:

Architect
Admin

Classification:

Public

Responsible product manager:

Kim Hellum

Updated:

2.03.2021

By:

Kim Hellum