Product Infrastructure
Physical Security
The FoundationIP production ASP site is a state-of-the-art managed hosting environment that is one of the most secure in the world. The facility provides 24-hour physical security, with picture identification, redundant primary electrical and redundant backup electrical generation, redundant air conditioner, redundant data-pipes, and other back-up equipment designed to keep servers continually up and running.
Perimeter Defences
The perimeters of our production servers are protected by redundant firewalls and intrusion detection systems developed by leading security vendors. Our firewalls are maintained by experts who continuously monitor access and are trained to execute defensive manoeuvres against any unauthorised attempted access.
Operating System Security
FoundationIP enforces tight operating system-level security. All operating systems are hardened and access points minimised. All remaining system level accounts are protected by strong passwords. Our security experts continually monitor operating system patches for security and install them at the earliest possible moment.
Database Security
The database server is separated from our web server. Although our web server has never been successfully penetrated, if there were a break-in at that level, it would not compromise back-end data. Added levels of user authentication and other security measures protect the database.
Application Security
Secure Transmissions
FoundationIP leverages the strongest encryption products to protect data and communications. All communications occur over 128-bit SSL protocols – the same technology used by the World Bank. The lock icon in the browser indicates that data is fully shielded from access while in transit.
User Authentication
FoundationIP provides access only through valid username and password combinations. The login process also occurs through an encrypted session via SSL. Repeated failed login attempts from a source results in lock-out and redirects the user to a different page to determine his or her password. Option digital certificate-based authentication is also available.
Session Control
FoundationIP ensures that all access to any data is through a valid and authenticated session. The session controls ensure that the current security policies, roles, and authorisations are applied to determine the data that a user may access.
Encryption of Request Parameters
FoundationIP employs a robust security model that uses randomly-generated and frequently-changed keys to encrypt browser identifiers. This prevents one user from accessing another’s data by mimicking browser commands with calculated entity identifiers.
Role-based Access
FoundationIP uses a sophisticated role-based architecture for ensuring that authenticated users only have access to authorised data. You can define the access rules and rights to fit your business model.
Export Control
FoundationIP allows users to be fully export control compliant. You can grant non-citizens and foreign parties access to the system without violating export control laws.
