Security Standards

Ensuring reliable security

Santéon uses industry open standards and emerging standards for secure and reliable transactions.

WS-Security

SOAP Message Security for implementing security functions such as integrity and confidentiality in messages implementing higher-level Web services applications. Santéon BPM platform accommodates a wide variety of security models and encryption technologies to enable organization compliance with security standards and mandatory regulation.

Encryption and EDI Communication

XIP supports a wide range of encryption methods and protocols including symmetric (secret key) and asymmetric (public/private key) cryptography. XIP supports RSA algorithm for asymmetric encryption and DES, 3DES and RC2 for symmetric encryption.

S/MIME

Secure Multipurpose Mail Extensions (S/MIME)a version of the MIME protocol that supports encryption of messages. S/MIME is based on RSA's public-key encryption technology.

SFTP

Secure File Transfer Program (SFTP) is an interactive file transfer program that uses features such as compression and public key authentication.

HTTPS

Hypertext Transfer Protocol over Secure Socket Layer, or HTTP over SSL (HTTPS) is a Web protocol that encrypts and decrypts user page requests as well as the pages that are returned by the Web server.

MSMQ Security

XIP depends heavily on Message Oriented Middleware (MOM) and asynchronous messaging concepts. XIP uses Microsoft Message Queuing (MSMQ) technology as the infrastructure for Santéon's MOM infrastructure. MSMQ takes advantage of various built in security features in Windows operating systems:

Access Control to restrict user access to Message Queuing objects
Authentication implemented through any authentication method supported by Windows 2000 including public key certificates, Kerberos or NTLM
Encryption through both asymmetric (public/private keys) or symmetric (secret key) cryptography is used to encrypt messages sent between Message Queuing components
Auditing to record which users attempt to access Message Queuing objects in Active Directory

For more information, see how Santéon handles security and reliability of transactions or contact us at info@santeon.com.

Santéon will continue to support the use of open standards for interoperability.