Security of the Wireless Sync Enterprise Server

Mobile security has been flying below radar level for many corporate IT departments. Due to the popularity of Smartphones, end-users have been driving adoption and using desktop solutions to access corporate data. With the rapid proliferation of both devices and data access solutions, it has become critical that IT departments reign in end-users and take back control over the corporate data that is finding its way outside their corporate firewall.

Verizon Wireless understands the issues involved in providing data security and has implemented strong security in the Wireless Sync Enterprise Server (WSES). Wireless Sync delivers comprehensive security that offers the enterprise a flexible deployment architecture to meet stringent corporate security requirements.

The Wireless Sync Enterprise Server, secured behind the firewall, does not require inbound initiated connections to any segment of an enterprise network with the goal of maintaining a high state of security while syncing data no matter where the end- user is located.

The Wireless Sync Enterprise Server resides behind the corporate firewall. When a message arrives at the corporate email server, the Wireless Sync Enterprise Server synchronizes a copy of the message (encrypted and compressed) to the appropriate mobile device.

The Wireless Sync Enterprise Server offers enhanced security, direct control of all server configurations and device management capabilities. The solution requires dedicated server hardware that connects with a corporate groupware server. While there are several security options to consider and configure when implementing the Wireless Sync Enterprise Server, the benefits of achieving greater control and configurability make this solution extremely secure for synchronizing mission-critical data.

Each device used with Wireless Sync requires a Wireless Sync Client. The Wireless Sync Client manages secure communication of data to and from the Wireless Sync Server and the target data store on the device. The client software includes encryption libraries for the encryption and decryption of data sent over the air. An RSA public key that was generated during installation of the Wireless Sync Enterprise Server is stored on the device upon installation of the Wireless Sync Client. Each client is issued the server's RSA public key upon device setup and the server securely holds its own private key. Data encrypted with the server's public key can only be decrypted with the server's private key.

All data from a mobile device to the Wireless Sync Enterprise Server is secured with 128-bit AES (Advanced Encryption Standard) encryption and travels via HTTP or HTTPS over TCP/IP

Data sent to a device connecting to the Web Portal (for PIM and email access or account management) is protected using SSL (Secure Sockets Layer) encryption in the Wireless Sync model