RSA SafeProxy Architecture

RSA SafeProxy™ Architecture combines three layers of security, including encryption, tokenization and key management, to provide end-to-end data protection while data is in motion, during storage and during use. By using RSA SafeProxy Tokenization within the architecture, actual sensitive data such as payment card numbers, social security numbers, driver's license numbers or PIN numbers is substituted with a token value that cannot be linked back to the original data, but otherwise behaves like the actual number. This tokenized data can be used to meet important business capabilities. For example, with credit card data, the tokenized value can be used to track customer loyalty, manage refunds and returns, and to support customer analytics, all without disruption to the business or unnecessary risk of exposure.

The RSA SafeProxy Architecture provides a number of benefits to customers:

• Reduces costs by removing systems from PCI scope
• Reduces complexity and implementation burden by packaging industry leading products with experienced professional services
• Provides data with the best protection possible by combining relevant technologies

RSA SafeProxy architecture provides a flexible integration of RSA products and services including the RSA SafeProxy™ Tokenization Server, RSA® BSAFE encryption, and RSA® Key Manager, all packaged together by RSA Professional Services:

SafeProxy Tokenization Server: Enhances the protection of sensitive data with token-based data substitution. Instead of maintaining ciphertext and an associated key (ID) within the organization's data stores, a single tokenized value is stored and used as a pointer to the encrypted value. A secure, cross reference table is established to allow authorized look-up of the original value, using the token as the index.

RSA BSAFE: Encryption is used both to protect sensitive data in the event the Tokenization Server is unavailable, and also to encrypt the Tokenization Server database in the back end.

RSA Key Manager: Supports the SafeProxy Tokenization Server and the SafeProxy Architecture by simplifying the provisioning, distribution and management of encryption keys for applications. RSA Key Manager is a critical piece of any encryption or tokenization environment and greatly reduces ongoing operational costs while ensuring compliance.

RSA Professional Services: RSA Professional Services helps organizations define security strategies and implement solutions to mitigate risk, ensure compliance, and accelerate business objectives. A comprehensive set of services are available for the RSA SafeProxy architecture which help companies deliver services which leverage the RSA SafeProxy architecture to protect sensitive information while gaining the associated operational efficiencies and benefits.