EMERGING/STRATEGIC TECHNOLOGIES FROM CARAHSOFT ^TM

SecretAgent Document Access Servlet (DAS)

Complementing SecretAgent 5.9 DAS allows sensitive documents to be securely shared among the frequently changing members of one or more Communities of Interest (CoIs).

Regardless of where it's stored, when a user attempts to decrypt an archive owned by a particular CoI, their SecretAgent client automatically establishes a TLS-secured session with the appropriate DAS webserver. DAS accepts a decryption request from the client and applies one of several configurable authentication mechanisms to check the user's membership in that CoI.

SecretAgent DAS provides a web-based administrative interface for all system configuration, key management and CoI maintenance tasks. Administrators can easily grant or deny users access to large numbers of sensitive files using centrally-managed CoI membership rosters based on DAS' own integrated certificate database, an organization's existing LDAP repository, or on any authentication mechanism provided by a third party.

SecretAgent DAS provides a solution to a mission critical problem encountered by a wide range of organizations. Once sensitive files have been encrypted for a group, DAS ensures those files can only be decrypted by current members of the group. Use of such a server-mediated decryption process means that no wholesale re-keying of documents is required each time a group membership roster changes.