TeraCryption
Enterprise File Encryption System
TeraMessage Mobile — Secure Business Messaging
Controlled Enterprise Mobile Communications
Extend your organization's private communications environment to smartphones while maintaining control of sensitive messages and files.
-
TeraMessage Mobile is designed for organizations whose executives, employees and authorized personnel need to exchange confidential messages and files while away from their computers—with communication activity recorded for organizational tracking and oversight.
-
Consumer encrypted messaging applications can protect conversations. Enterprise information control requires more.
-
TeraMessage Mobile is designed for organizations that also need to control users, communication Groups, protected attachments, message retention, mobile endpoints, administrative revocation and security records.
Because encryption is only one part of enterprise information control.
One Private Communication Environment — Computer and Mobile
-
TeraMessage Mobile works with the browser-based TeraMail application to create a private communication environment managed by the organization.
-
An executive working at a computer or laptop can use TeraMail to send and receive protected messages and sensitive files.
-
That same executive away from the office can use TeraMessage Mobile on a smartphone.
-
Users licensed for both applications can be logged into TeraMail and TeraMessage Mobile simultaneously. The applications use separate licenses, allowing the user to work from both environments without creating a login conflict.
-
Messages and conversations are synchronized between TeraMail and TeraMessage Mobile.
-
If John sends Peter a message from TeraMessage Mobile, the new message can be announced in both Peter's TeraMail and TeraMessage Mobile conversations. Peter can read it from whichever application is convenient.
TeraMail and TeraMessage Mobile provide two synchronized interfaces into the same controlled enterprise conversation.
Control Who Communicates With Whom
TeraCryption Administrators create users and organize them into authorized communication Groups.
-
Groups can represent departments, projects, management teams, customers or other communities that need to communicate privately.
-
Users do not build the organization's secure directory by inviting arbitrary outside contacts. The organization controls membership.
-
TeraMessage Mobile does not need access to the smartphone user's personal Contacts or GPS to provide the organization's controlled communication directory. The existing product also does not require the user's telephone number to be programmed into TeraMessage.
This separates an employee's personal mobile contacts from the organization's private communication environment.
Protected Files Remain Under Organizational Control
TeraMessage Mobile can deliver more than protected text messages.
-
Authorized users can send sensitive files through TeraMail and TeraMessage Mobile. TeraKey-protected attachments retain their independent file-level protection as they enter the mobile communication workflow.
-
Receiving a message containing an attachment does not provide general access to the organization's protected file repository.
-
Instead, the attachment appears as a link associated with the conversation in which it was delivered.
The authorized recipient selects that link when the file is needed.
Protected mobile file access is message-specific and authorization-controlled.
View When Needed — Without Accumulating Decrypted Files
Protecting a file while it travels to a smartphone is only part of mobile information security. Another important question is: What remains on the smartphone after the authorized user finishes viewing the document? • TeraMessage distinguishes between information at rest and information in authorized use. • When an authorized user requests a protected attachment, the applicable authorization is verified and the file is decrypted as necessary for viewing. The protected-file lifecycle is: Encrypted File → Authorization Verification → Temporary Decryption → Authorized Viewing → Temporary File Destruction • When viewing ends, the temporary decrypted file is shredded rather than intentionally retained as another downloaded document on the smartphone. • But destroying the temporary copy does not mean losing access to the document. • The user can return to the message containing the attachment link and request the protected file again whenever it is needed. The applicable authorization and retrieval process is performed again. TeraMessage separates continuing access to information from permanent possession of a decrypted mobile copy.
Find It Again Without Keeping a Decrypted Copy on the Phone
TeraMessage users can scroll through messages remaining in their mobile conversation history and select previously received attachment links again. For longer-term correspondence, TeraMail provides a more extensive working interface to the user's retained communication history. A TeraMail user can: • Scroll through the 50 most recent messages in a conversation • Search messages by a selected date range • Filter the results to identify messages containing attachments • Search for words contained within message text • Return to attachment links associated with previous messages • Work with messages containing up to 500 words and as many as 10 attachment links TeraMail can provide authorized access to retained message history for up to three years, including the attachment links associated with those conversations. This means a mobile user does not have to keep a decrypted document on the smartphone simply because it may be needed again later. The conversation remains the controlled path back to the information.
Protect Messages After They Arrive
TeraMessage security does not end when a message reaches the recipient. Messages retained by TeraMessage are stored protected by encryption. The existing TeraMessage design also provides message-lifetime controls, access-code protection and Administrator-controlled removal of messages and credentials. Users and organizations can control how long sensitive communications remain available through capabilities including: • Programmable message lifetime with automatic deletion. • Individual conversation puring • Access-code protection for TeraMessage operations. • Administrator-initiated removal of TeraMessage programming, credentials and messages. • Message removal/shredding controls • Encrypted retention of conversations. The objective is not simply to protect information while it travels. It is also to reduce unnecessary persistence of sensitive information after its business purpose has ended.
Protect Messages After They Arrive
Knowing a valid username and password should not mean unlimited duplication of an organization's mobile communication endpoint. TeraMessage combines authenticated application access with organizational control of mobile use. A TeraMessage Mobile license is assigned for use on one smartphone at a time. If the same TeraMessage identity is programmed simultaneously on two phones, the devices do not simply become two independent delivery endpoints. The conflicting connections prevent normal PageRouter message delivery until the condition is resolved. This gives the organization control beyond simply authenticating the person.
Administrators Can Withdraw Mobile Access
A smartphone can be lost, replaced, reassigned—or the organization may simply decide that a user should no longer have access to TeraMessage Mobile. • The Administrator can issue a TeraMessage reset command to the user's mobile endpoint. • The reset removes the TeraMessage programming, credentials and messages from that endpoint. • If the smartphone is connected, the command can execute immediately. • If it is turned off or disconnected, the reset remains pending and executes when the device later reconnects. • The reset is specific to the TeraMessage environment. It does not erase the user's entire smartphone. The organization retains control of the TeraMessage mobile endpoint even after the smartphone has left the office.
TeraMail at the Computer. TeraMessage on the Move.
TeraMail and TeraMessage Mobile are not isolated messaging applications. They operate together as a synchronized private communication environment. Suppose Peter uses TeraMail on his computer to send John a protected file. • Peter's synchronized conversation with John also displays the attachment link that was sent. • John can request the attachment from his conversation, while Peter can independently select the same attachment link from his own conversation. • Neither user has to wait for the other. • Each authorized request follows the applicable protected-file retrieval and decryption process. This allows users to move between computer and smartphone communications while preserving the continuity of their business conversations. TeraMail when you are working at your computer. TeraMessage Mobile when business takes you somewhere else. One controlled enterprise communication environment.
Choose the Deployment That Fits Your Organization
TeraMail and TeraMessage Mobile can operate through the TeraCryption SaaS service or with PageRouter deployed on-premises, depending on the organization's requirements. ***** TeraCryption SaaS ***** TeraCryption SaaS provides the hosted service environment for TeraMail and TeraMessage Mobile. The service manages TeraCryption user authentication, communication Groups, protected messaging, file delivery, administrative controls and related security functions without requiring the organization to operate its own PageRouter server. This provides organizations with a controlled enterprise communication environment accessible to authorized computer and mobile users. ***** PageRouter On-Premises ***** Organizations that need their communications infrastructure within their own environment can deploy PageRouter on-premises. PageRouter provides the onsite communications server supporting TeraMail and TeraMessage Mobile and can operate within the organization's existing network infrastructure. For hospitals, PageRouter also provides an important integration point with existing paging, notification and nurse-call environments.
Controlled Mobile Communications for Hospitals
Hospitals already depend on major clinical, nurse-call, paging and communications systems. TeraMessage Mobile is not intended to require replacement of those investments. TeraMail, TeraMessage Mobile and PageRouter can provide a complementary communications layer that works alongside the hospital's existing environment. Authorized personnel can receive protected messages, sensitive files and urgent notifications on smartphones, while PageRouter can integrate mobile communications with onsite paging and notification workflows. This allows a hospital to use smartphones for controlled communications while maintaining organizational management, protected file delivery, logging and integration with existing systems. Keep the systems the hospital already depends on. Add controlled enterprise mobile communications where they are needed.
Controlled Mobile Communications for Sensitive Business Information
The same architecture applies well beyond healthcare. TeraMessage Mobile is designed for organizations whose executives and personnel need access to sensitive information while away from their computers. ***** Executives and Management ***** Confidential corporate, financial, acquisition and strategic communications. ***** Legal and Human Resources ***** Privileged, personnel, employment and other sensitive documents and discussions. ***** Financial and Insurance Organizations ***** Confidential customer, financial and business information. ***** Engineering and R&D ***** Proprietary designs, project information, reports, research and intellectual property. ***** Laboratories ***** Sensitive research, reports and technical information shared among authorized personnel. The common requirement is not simply encrypted messaging. It is maintaining organizational control when sensitive business information becomes mobile.
Mobile Communications with Security Records
Enterprise communications also require accountability. TeraMail and TeraMessage provide communication and file activity records that can support organizational tracking and oversight. For example, the TeraMail encryption tracking environment can collect file-decryption activity when TeraMessage Mobile users decrypt protected files. Message activity can also provide information such as delivery and reading events where supported by the workflow. This gives the organization visibility into protected communications without turning the smartphone into an uncontrolled repository for company information.
Designed for Secure Mobile Operation
TeraMessage Mobile automatically uses the smartphone's available Internet connection as the device moves between Wi-Fi and cellular service. The wireless connection provides the communications path. ***** It does not provide TeraCryption authorization. ***** • Users must authenticate to the controlled TeraCryption/PageRouter environment. • On Android, TeraMessage can maintain its communications connection with PageRouter and establish new connection-specific cryptographic material when a new connection is created. • On iPhone, the notification service alerts TeraMessage that information is waiting. The notification itself does not carry the protected TeraCryption message or attachment. TeraMessage then connects to PageRouter to retrieve the authorized information. Communications are additionally protected through TLS transport, while TeraKey-protected attachments retain their independent file-level cryptographic protection.
More Than Encrypted Messaging
Consumer encrypted messaging applications have made protected personal communications widely available. TeraMessage Mobile addresses a different requirement. TeraMessage Mobile is designed for organizations that need to control users, communication Groups, protected attachments, message retention, mobile endpoints, administrative revocation and security records. It combines mobile communications with the organizational controls needed when confidential business information leaves the desktop and follows personnel onto their smartphones.