The Secure Universal Data Container . zip meets x.509

1. The Secure Universal Data Container.zip meets x.509 Paul Chandler. Regional Sales Director PKWARE, Inc.

2. The Leading Provider of Enterprise ZIP Solutions • Enterprise Market Leader • 58 of the Fortune 100 use our server and mainframe products • 12 of the 14 top US financial services companies • 50 percent of the top telecom, retail, and manufacturing companies • 20 percent of mainframe computers worldwide • Over 12,000 developers have embedded PKWARE technology • Technology Innovator • Creator and continuing innovator of the ZIP standard • Products range from desktop to mainframe • Patent-pending Secure ZIP™ technology • RSA Strategic Technology Partner

3. The Leading Provider of Enterprise ZIP Solutions • Enterprise Market Leader in Europe • Over 350 major European organisations use our server and mainframe products • 35+ European banking organisations • ABN Amro • BNP • Credit Lyonnais • Barclays • 20 of Europe’s largest retailers • Sainsbury • Virgin Retail • Monoprix • Airlines and top manufacturing companies • Lufthansa • BMW • Volvo

4. PKZIP in the Federal Government Some Recent Example Accounts • FAA • EPA • USDA • USPS • US Army • Robbins AFB • Defense Enterprise Computing Center

5. What is a Secure Universal Container? a standard secure method of storing and transporting any type of cargo flexible enough for all types of transport (by air, by sea, by rail, by road) widely used throughout all parts of the world In commerce:

6. Why a Secure Universal Data Container? • Common Criteria (ISO-15408) • an internationally recognized system for defining security requirements for computer and network products and evaluating whether a particular product meets those requirements. • EU Data Protection Legislation • regulates when and how companies can collect personal data, how it can be used and how long it can be retained • Basel II • regulates the protection and use of information necessary for qualification for credit • HIPAA: Health Insurance Portability and Accountability Act • addresses the security and privacy of electronic healthcare transactions • Sarbanes-Oxley Act of 2002 • protects investors by improving the accuracy and reliability of corporate disclosures made pursuant to the securities laws. • GLBA: Gramm Leach Bliley Act • regulates the sharing of personal information about individuals who obtain financial products or services from financial institutions

7. Creating a Secure Universal Data Container .zip – a familiar, ubiquitous de-facto standard container for compressed data + x.509 – an international standard defining the structure, content and syntax of digital certificates enabling strong encryption and digital signature support= Secure Desktop

8. Compression & Encryption “... go together like peanut butter and jelly (nutella).” – Scott Schnell Sr. VP, RSA • Complimentary Core Technologies • ROSI: improved security benefits of compression & encryption • ROI: increase performance, reduce storage, reduce bandwidth, save transmission time

9. The Secure Universal Data Container– SecureZIP™ The Secure Universal Data Container • Compression • Security • Interoperability • A fast, secure method of storing and transferring data • Provides security, compression and interoperability in a container that can be used for any data type, application, or mode of transfer • Is universally available on every platform and every desktop, server and mainframe • Provides a range of security options from highest to lowest • Is easily implemented, non-disruptive technology

10. Why Use SecureZIP? The Secure Universal Data Container • Compression • Security • Interoperability • Reduces risk and cost of data storage, exchange and transfer • Simplifies secure and efficient collaboration with suppliers, customers and partners • Provides easily implemented compliance with government privacy & security regulations

11. ERPApplications Collaborative Applications Content Mgmt The Secure Universal Data Container Supply Chain Mgmt Digital Rights Mgmt* Enterprise Integration & BPM The Secure Universal Data Container– Widespread Applicability • Any application that relies on secure, efficient data transfer & storage • Any organization that stores, transports or exchanges large amounts of sensitive data • Any organization subject to government data privacy & security regulations with greatest need in • Financial services • Healthcare • Government • Retail * e.g. - Microsoft Trustworthy Computing Framework

12. SecureZIP Technology at Work • Enterprise platform support • Windows • Unix • Linux • iSeries/OS400 • zSeries/MVS • Smart Card support offers certificate portability and two-factor authentication • RSA Passage • ActivCard Gold

13. PKZIP Enables Efficient and Secure Collaboration across Platforms and Organizations

14. SecureZIP within the Enterprise ...and Beyond • SecureZIP bridges the gap between PKI “haves” and “have-nots” • within the enterprise, users can share high-value data with complete security • high-value data can also be shared with the extended enterprise • customers • suppliers • other business partners

15. SecureZIP and PKZIP Reader • PKZIP Reader • Enables any Windows recipient to open Secure ZIP files • Compatible with all PKWARE Enterprise ZIP products • Free download from the PKZIP web site • PKZIP Reader Partner Program • Corporate distribution licenses for extending Reader to partners, suppliers, customers • Custom co-branded site for Reader download • Eliminates barriers to secure communications for the extended enterprise

16. Fiducia • Profile: • One of Germany’s largest IT service providers to more than 2,500 customers in the banking and finance sector, most notably the Genossenschaft Banken • Fiducia offers an array of IT services including call center support, EDP services, logisitics support, telephone banking, telephone marketing, electronic funds transfer services. • Needs: • Interoperable data file compression across their affiliated companies’ 60 Unix servers and 7 MVS mainframes serving over 115,000 end users. • File security in compliance with EU regulatory requirements. • Solution: • PKZIP for MVS with Strong Security • PKZIP for Unix with Strong Security

17. Profile: • New Orleans-based insurance services firm • Gilsbar offers an array of professional and employee policies to more than 250,000 participants in over 20 states. The company ranks among the oldest and largest providers of administrative and support services to professional associations and employer groups in the Southern US. • Needs: • File interoperability with customers’ disparate computing platforms, ranging from PCs to mainframe computers. • HIPAA compliant approach to securing file transmissions and storage – that could be easily adopted by their client base • Solution: • PKZIP Secure Desktop • PKZIP for MVS w/ Strong Security • PKZIP for OS/400 w/ Strong Security • PKZIP Reader Partners Program

18. Features Multiple UI’s GUI w/drag & drop Command line interface Right click in Explorer Advanced compression features Integration with Outlook Automatic compression & encryption of attachments Enables secure delivery of attachments to non-S/MIME clients Secure Desktop powered by RSA BSAFE Supports password and certificate-based encryption Includes support for AES 256-bit encryption Cross-platform interoperable with PKZIP on Unix, Linux, OS400 and MVS Benefits Easy to implement and easy to use Reduces storage required for archived data Minimizes encryption overhead Improves encryption performance Reduces bandwidth required for secure file transmission Meets regulatory compliance requirements Leverages the value of X.509 PKI certificates Supports enterprise-wide implementations Interoperable within PKI and non-PKI environments alike Enables enterprise-wide deployment RSA SureFile powered by PKZIP

19. Bottom Line: What’s In It For You? • RSA SureFile is a PKE solution that’s: • easy to sell • an opportunity to sell more product into existing accounts • small incremental cost per desktop (compare to PGP) • Comes with PKZIP Secure Desktop references • Sell into existing PKZIP for MVS accounts • access to PKWARE technical & sales support references • easy to use • intuitive, award-winning Windows GUI • easy to implement • hit aggressive implementation deadlines • RSA SureFile leverages value of digital certificates • RSA SureFile drives incremental sales through integration with other RSA products (i.e., Keon, ClearTrust, SecurID, Passage, BSAFE, ….) • RSA SureFile sales qualify for full quota & commission credit

20. Thank you!