WebSphere MQ Advanced Message Security

An overview of WebSphere Advanced Message Security: Enhance end-to-end message level security

---

Closed Caption:

text
businesses extra nets and virtual
private networks are blurring the
boundaries that the IT perimeter
at a time when audits are growing more
stringent IBM's WebSphere MQ advanced
message security
AMS facilitates compliance with payment
card industry data security standard
PCI DSS Health Insurance Portability and
Accountability
given and other regulatory mandates by
extending the functionality available
WebSphere MQ to include into when
message level security
WebSphere MQ
AMS can be used in any industry by any
business that runs WebSphere MQ servers
our clients
on supported platforms from the largest
enterprises
to small businesses with only one or two
queue managers in production
rupture mqm ass protects data not only
is it flows across the network
but also when it's a crest on the Q's
for example
in the retail industry were card payment
transactions are processed
each transactional messages transported
in its own cryptographic unlike
the envelope travels with a message from
the producing application
all the way to the consuming application
insuring messages are never in plain
text while on the queues or log files
successfully securing card and personal
identifying information
with WebSphere MQ AMS each message is
transported and its own cryptographic
envelope
which troubles with a message from the
producing application to the consuming
application
this means that the text of the messages
can't be read in log stops
traces of a normally be difficult costly
to prove to an auditor that data doesn't
leak near these ephemeral copies
with WebSphere MQ AMS that's not an
issue
because the contents are in scripted the
decryption keys need not be available
locally
just
WebSphere MQ AMS encrypt messages at the
point of production
and then the crips and authenticates
them at the point of consumption
because all points in between have no
access to decryption keys
scope I V Rod it can be greatly reduced
resulting in the cost savings that can
offset
hard for all the cost about increase the
functionality
just
WebSphere MQ JMS is a layer between the
application
and the WebSphere MQ API transparently
handling crypto functions
as messages passed between the
application in the queue manager
no code changes are required making a
mask
compatible with most vendor applications
when an application signs a message
using WebSphere MQ a UMass
the messages origin can be validated
before processing
messages from unknown senders are
diverted to an exception queue
where they can be investigated in
addition
n2n message encryption secures messages
when business to business links traverse
open networks like the internet
to help achieve compliance WebSphere MQ
AMS
signs each message and allows you to
configure policies based on who signs
the message
and who receives it this allows security
per message
instead of perfection or perch you the
center policy
determines who can read encrypt messages
including the ability to restrict
message accessed by WebSphere MQ
administrators although the
administrator can still access the queue
to perform maintenance
messages can only be decrypted by
recipients to find
in the policy this ability to restrict
access to individual messages on a need
to know basis
neck sweatshirt mqm ass a key component
your compliance strategy
to learn more about how WebSphere and
QMS
can help you meet compliance for your
sensitive data visit this URL