Transport Insurance

Examples

An example of MFT software is Policy Patrol MFT [10], which integrates fully into all popular email systems and classifies the attachments in outgoing messages according to defined policies. Another solution that uses MFT as its transmission technology is ShieldShare, by Swedish manufacturer BlockMaster [11]. An open source solution that uses MFT as its transmission technology, JADE (Job Scheduler Advanced Data Exchange, the successor to SOSFTP) [12], was developed by programmers from Germany (SOS GmbH), France (Paris SOS), and Switzerland (SOS AG). JADE offers private users a safe alternative to services like Dropbox. With JADE (Figure 1), the user can select from a range of technologies for transferring files, including WebDAV, UNC, and ZIP.

Figure 1: Schematic structure of JADE, the open source solution for MFT.

Other solutions integrate with email systems and extend the email user front end with appropriate buttons. The user must decide whether to classify attachments as confidential and then enable the appropriate function before transferring. If this function is overlooked, the attachments are sent unencrypted.

This solution is problematic in terms of data protection, and the company is liable for security breaches if the user does not follow instructions or misclassifies the attachment, and sensitive data gets into the wrong hands as a result.

Wherever businesses and individuals have primarily used FTP to transfer files, an MFT solution can be quite useful as a standalone application. These MFT systems often work just like email applications and try to duplicate their usability. A local client or a web application is used to send files; the sender must authenticate and then can send the recipient an encrypted message in the style of an email message, including attachments. Once the MFT system has become part of the user's daily grind, the overhead of duplicate administration of targets is something that speaks in favor of an integrated MFT system.

Collaboration and Sharing

MFT technology goes beyond secure data transfer in some of the solutions on offer today by unifying what are otherwise often parallel, isolated solutions, such as file sharing, e-collaboration, online storage, and secure data rooms. An overall solution that offers all of the MFT building blocks is not always useful and also not desired by each administrator. The software available on the market thus usually only provides partial solutions. Usability is often crucial for businesses. If MFT is not ergonomically integrated into standard applications, the extra overhead often causes users to work around the software or simply not use it.

In addition to MFT features for secure file sharing and secure data rooms is online storage that differs significantly from free services like Dropbox, in that all data are encrypted for storage. Because these services are hosted by the company itself, they offer the option of saving files in a private cloud. They also consist of a system for data encryption, as well as access and rights management. If the user data is stored locally in a container, editing is also possible without an Internet connection. When a connection becomes available later, the data is then synchronized and possibly versioned accordingly.

Conclusions

Overall, MFT is capable of exchanging large volumes of encrypted data over insecure public networks. Additional management features enable comprehensive reporting and auditing, as well as proof of successful delivery. To ensure compliance with national and international laws and regulations, it must not be possible to bypass or manipulate the system or for a user to forget to employ the feature. Classification of the files to be sent should not be left to the user; rather, it should be handled automatically by policies. High usability and integration into existing workflows or standard applications like email also increase acceptance. File sharing, e-collaboration, and secure data rooms all use the basic functions of MFT, but each must be optimized for the application in question.