Penta Security - D’Amo Data Encryption Solution

D’Amo is a cloud encryption solution that provides excellent encryption performance in various cloud system environments, focusing on D’Amo KMS for Cloud, a cloud encryption key management solution.

D'Amo can be deployed on AWS Cloud to provide Data Encryption for servers and endpoints.

It provides a systematic and safe encryption key management system with D’Amo Control Center, a central integrated management system, and D’Amo KMS for Cloud consisting of KMS SC (S/W Container), based on domestic and international encryption standards.

It also supports Amazon RDS Custom environments as well as encryption solutions such as Oracle TDE and MS SQL and can be applied in varied cloud and hybrid environments.

By separating the permission of the security administrator and the DBA and providing access control based on various conditions for users accessing the DBMS, the DB administrator can access encryption keys and decrypt data only when being authorized by the security administrator.

1. D’Amo API Agent

It minimizes DBMS loads during en/decryption by performing encryption with an API installed on the application server, and then sending queries to the DBMS, and has excellent compatibility by supporting various OS and DBMS.

• Supports API-based D’Amo cryptographic module that operates at the application layer
• Provides various development language-based functions and libraries
• Performs encryption without DB server performance degradation
• Applicable to environments where encryption is difficult to apply, such as Amazon RDS

2. D’Amo Plug-in Agent

It installs agents on the DB server in the form of package, engine, DBMS API etc. to perform en/decryption, and provides integrated DB security through functions such as access control, audit records and permission separation.

• Plug-in type D’Amo cryptographic module optimized for Oracle and SQL Server
• Continued encryption without DB service interruption
• Selective encryption supported through column-level encryption
• No need to modify application sources by installing separate packages on the DB server
• Amazon RDS Custom applicable

3. D’Amo Kernel Agent

By installing agents at the OS kernel level, it provides structured/unstructured data security through functions such as encryption, access control, audit records and permission separation.

• D’Amo file encryption module at the kernel level only for Windows OS
• Encryption of various unstructured data such as videos, images, and video files
• Convenient installation through Installer without application source modification

4. SG-KMS SC

As encryption key management system, it manages the entire key life cycle systematically and safely from key generation to storage, distribution and disposal.

• Manages encryption key life cycle such as key generation, search and disposal
• Supports various encryption key backup methods
• Manages various external keys (ex. TDE key) through integration
• Provides REST API for encryption key management such as key addition and export

5. D’Amo Control Center

D’Amo Control Center enables you to manage various operation information such as the status of encryption products in diverse system layers, identification of error causes and system status/product license check, with one system.

• Integrated Server Management

– Provides D’Amo-related system status (product, version, group, license status etc.) according to server

– Grants user access permission by group

– Provides server search and integrated filtering functions

• Operation and Encryption Settings

– Supports D’Amo encryption settings such as key information, double encryption prevention and en/decryption permission

– Provides function operation test to verify the operation of encryption product

• Product Monitoring

– Provides a visualized dashboard to figure out the server status within the infrastructure

– Allows to check the number of installed D’Amo products and their status

– Enables to check the number of servers with errors and their status

• Log Management

– Provides logs of all servers registered in D’Amo Control Center

– Supports log search function by column

– Offers detailed log filtering functions with various conditions such as log level, category and period