Expert View

September 8, 2004
Pointsec offers trusted solution for automatic data encryption

Geetanjali Wadhwa & Pradeep Chakraborty

SWEDEN AND FINLAND -- Pointsec Mobile Technologies AB is said to be the global de facto standard for mobile device security - with the most customers deployed, highest level of certification, and more complete device coverage than any other firm. It delivers a trusted solution for automatic data encryption that guarantees proven protection at the most vulnerable point where sensitive enterprise data is stored. By securing sensitive information stored on laptops, PDAs, smartphones, and removable media, enterprises and government organizations can protect and enhance their images, minimize risk, shield confidential data, guard information assets, and strengthen public and shareholder confidence.

Pointsec's customers include blue chip companies and government organizations around the world. Founded in 1988, it is a wholly owned subsidiary of Protect Data AB, publicly traded (PROT) on the Stockholm stock exchange. The company has four offices in the United States and 11 in the EMEA.

Recently, Nokia and Pointsec jointly developed a solution that is designed to protect enterprise customers' data in mobile devices. The new Pointsec file encryption solution enables the encryption of any user data such as email, SMS and MMS, calendar and contacts, as well as memory card data. The solution will be available for Nokia series 60 and series 80 devices, starting with the Nokia 9500 Communicator.

Peter Larsson, president and CEO, Pointsec, expressed delight at co-operating with Nokia and extending Pointsec's mobile data protection solutions to include the Nokia product range. The Pointsec for Symbian offers powerful, real-time data encryption as well as a unique PicturePIN user authentication that ensures data will not be accessed by unauthorized individuals.

Pointsec for Symbian OS includes central management of security profiles, secure remote help and advanced data recovery in addition to third-party device management support. Pointsec for Symbian OS supporting the Nokia 9500 will be available in Q3-04. The solution will be available through Pointsec's VAR and system integration channels.

Convergence*plus recently met up with Sascha Beyer, Managing Director, Mobile Technologies Dubai, UAE, Pointsec to learn more about its global activities, device security solutions and success stories in the Asia Pacific region, and its plans for the Indian market. Excerpts from an interview:

Convergence*plus: Please update us on Pointsec's global activities.
Sascha Beyer: Pointsec Mobile Technologies have recently established offices in Paris, France, and Dubai. In September, Pointsec's subsidiary in Sydney will be in full operation, and a Japanese subsidiary based in Tokyo will soon follow. These are to be added to the list of Pointsec companies in the Nordic countries, Germany, United Kingdom and the United States.

Pointsec is very actively working to establish partnerships with leading players in different lines of businesses and regions. A recent strategic partnership agreement with Nokia has been signed, resulting in an extension of Pointsec's mobile data protection solutions to also include the Nokia product range. A recent technology partnership has been made with RSA Security as well, when Pointsec completed the RSA Secured Partner Program Certification.

Recent deals include:

• A world-leading player in the financial industry in Germany.
• First deliveries to attractive customers in the Australian government administration.
• Pointsec's Japanese business partners continue to report successful sales.
• In the US, an order for Pointsec for PC was received from a well-known company in the insurance industry.
• Another important order was received from a customer in the federal sector. This was for a security solution for handheld PCs based on Microsoft's PocketPC platform and provides an important confirmation of Pointsec's strategy of offering solutions for all common mobile IT platforms.

New enterprise contracts include:

• A contract was signed with Nordea for Pointsec for PC, which will now become a part of Nordea's standard platform for IT workstations.
• Another was a general purchase agreement with Hansel Oy, the central purchasing body for the Finish government administration.
• An improved version of Pointsec for Symbian OS launched at the end of May 2004 provides strong and smooth mobile data protection for users of SonyEricsson's P800 and P900 smartphones, with the same high level of security as offered for Windows and other mobile platforms.
• Another product was an encryption system for Microsoft's Windows Mobile 2003 platform for handhelds.

The Pointsec Media Encryption protects sensitive data stored on removable storage devices, such as removable hard disks, diskettes and memory sticks with USB connectors, as well as during e-mail transfers.

In June 2004, Pointsec received the FIPS 140-2 certification for the cryptographic module used in Pointsec for Pocket PC and Pointsec Media Encryption from the US Commerce Department's National Institute of Standards & Technology (NIST). Pointsec for Pocket PC was the first and only data protection solution to achieve FIPS 140-2 for the Microsoft Windows Mobile 2003 Platform.

This February, Pointsec for PC was awarded the Evaluation Assurance Level 4 (EAL4) of the Common Criteria, the most demanding international IT security standard. Pointsec for PC achieved the FIPS 140-1 certification in 2002.

CP: How does the Pointsec file encryption solution protect any user data?

SB: Pointsec Media Encryption offers users transparent, real-time encryption of sensitive data on all available removable media types, including memory cards, storage media and floppy disks. Your data is automatically encrypted, without user intervention. Pointsec Media Encryption also enables creation of self-extracting, password-protected files for email: there is no need for the recipient to have Pointsec Media Encryption installed. Pointsec Media Encryption's standard-compliant file deletion ensures that your organization's vital information is secure during its lifespan and cannot be recovered once deleted.

CP: How does the Pointsec for Symbian safeguard confidential information?

SB: Pointsec for Symbian OS provides the same high level of security as offered for Windows and other mobile platforms. Pointsec for Symbian OS is a file encryption application that provides the strongest available protection for Symbian OS devices against unwanted information disclosure.

Using on-the fly, user-transparent encryption, Pointsec for Symbian OS automatically encrypts all files before they are stored on a device and automatically decrypts the files again when they are opened, without any need for user intervention. With a Pointsec for Symbian OS-protected device, you can be sure that confidential documents, calendar data, email messages and other personal files remain safe, even if the device falls into the wrong hands.

CP: What is so unique about the PicturePIN user authentication?

SB: Pointsec's patented PicturePIN authentication solution is an alternative to traditional alphanumeric login passwords. Picture-based login codes are much easier to remember and far more user-friendly for mobile devices with small screens and hard-to-use mini-keyboards. The customizable pictures randomly change places, in order to prevent scratches on the screen from giving any clues to the password.

CP: Who among the handset vendors and perhaps, carriers, are using your solutions?

SB: Most of our customers among handset manufacturers and vendors are not referable. However, Ericsson is a handset manufacturer that uses the Pointsec solutions. Among carriers, we have Telenor and Telia.

CP: How are your solutions useful for laptops? Who are your major customers in this area?

SB: Pointsec for PC combines enforceable mandatory access control and strong encryption to create an advanced enterprise security solution. User credentials and confidential data remain private, enabling organizations and agencies to take advantage of today's mobile technology without compromising security. Pointsec for PC enables the enterprise to enforce its security policy, while providing a security solution that is easy for employees to use, and which does not impede either the users' or PCs' performance. Pointsec for PC is easily managed and completely scalable, whether implementing 500, 5,000, or even 50,000 units.

Some of our major referable customers for the PC product are Key Bank, AstraZeneca, Nordea, Volvo, the US Department of Defense and the US Department of Justice.

CP: Has Pointsec ventured into the Asia Pacific region? Have there been any success stories, especially in China?

SB: The Pointsec products have been available on the Japanese market since 1988. Pointsec Mobile Technologies' partners in Japan, Metro Inc. and NEC have successfully presented the concept of Pointsec and significant deployments have recently been carried out. In late 2004, Pointsec will establish a subsidiary in Tokyo. This September, Pointsec will establish a new subsidiary in Sydney, Australia, with operations covering the Asia Pacific region.

CP: How do you estimate the Indian wireless segment and what sort of opportunities are available?

SB: When it comes to technology developments, India is probably the most dynamic country in the world. Pointsec's newly established sales office in Dubai, UAE, will also cover the Indian market.

CP: Where are your development activities carried out? Has Pointsec tapped the potential of the Indian software industry?

SB: The Pointsec solutions were created in Sweden and continued development work is mainly carried out in Sweden. As a result of Pointsec's acquisition of F-Secure's encryption solutions, a partner in Russia has recently performed some development.

Contact:
Pointsec Mobile Technologies AB
Tel: +46-8-459-5446
christine.blinke@pointsec.com
www.pointsec.com