Galea

What is Galea?

Personal information encryption solution.

Galea is an encryption solution that supports both structured and unstructured data.

Galea can improve the credibility of the company by securely managing the information assets of intruders and preventing the leakage of illegal information.

In addition, it may respond to various national and international information protection laws, including the Personal Information Protection Act.

NIS uses a cryptographic module whose security has been verified, supports national and international cryptographic algorithms, and has obtained EAL3 CC certification.

Role-based and rule-based access control can be applied selectively for efficient management of the decryption authority.

It is equipped with multiple high-availability architectures for secure key management and operational stability and supports operations tied to Warehouse Valley's database access control and personal information asset management solutions for effective and reasonable information security activities.

If you use WareValley Orange in a database management environment, you can easily check the encryption/decryption status and change the settings

Database encryption

Supports national and international standard encryption algorithms.

It is equipped with a password module that has been verified by the IT Security Certification Office.

It supports API suitable for application environment and database encryption through it.

Plug-in database encryption using the database view and trigger is supported.

It provides initial encryption through the web-based Galea GUI and various database restriction and index management functions.

Encryption of unstructured data (file)

It supports encryption of files of various formats such as documents, images, videos and recordings.

API support suitable for the application environment and encryption of unstructured data through it.

Supports a secure command-line interface (CLI) for easy-to-use encryption as operating system commands.

Target encryption files or directories can be managed with a policy, and scheduled encryption through scheduling is also supported.

Password authentication for file decryption control is supported.

Safety

Cryptographic module that has obtained the KCMVP certification.

It has been recognized for its safety by acquiring EAL3 CC certification, GS certification, and Tibero interoperability certification.

By not managing plaintext encryption keys in the database or on the file server, you can prevent the loss of encryption keys, even in the unlikely event.

Access logs for important personal information are stored and managed as a separate device (Galea KMS server).

Important access records are encrypted to prevent tampering.

The encryption key is managed as a separate device for secure management, applies redundant encryption, and supports redundancy.

You can select and apply encryption algorithms such as ARIA, AES, SEED, SHA, and RSAES.

Access control

Database encryption provides rules or role-based access control using IP address, MAC address, database account, application, date, day of the week, and time information.

In the case of unstructured data encryption, it provides access control using remote IP address, OS account, application, date, day of the week, and time information.

Defines user roles and provides decryption authority and access control based on them.

It provides an alarm function when detecting abnormal symptoms, such as attempts to decrypt large amounts of data.

Thank you

It provides a complete encryption/decryption history.

Alerts and historical reports are provided when incorrect decryption is performed.

Database or file server performance degradation due to data collection can be kept below a certain level.

The audit report can be provided in conjunction with the ChakraMax access control solution.

Integrate administrator configuration changes, back up, and schedule the history of automated system operations.

Convenience

A unified web-based management GUI supports integrated management of file servers with multiple databases and unstructured data.

It supports encryption scheduling, progress monitoring, and administrator tasks such as authority management, index management, decryption, backup, and recovery through the GUI.

It provides development convenience through manuals and samples, as well as APIs from various programming languages.

In the case of the plug-in method that uses database display and triggering, the application state of the column properties (PK/FK/UK) and various constraints (constraints) does not change after encryption and decryption.

System Requirements

A processor with 64-bit support (also known as x86-64, x64, x86_64, AMD64, and Intel 64)

2 GB of RAM.

8 GB of disk space.

A screen capable of a resolution of 1024 x 768 or higher.