Authorised access only

Our AppsAnywhere technology uses a variety of authentication and encryption mechanisms to ensure that the data moving between our users and our servers are secured against third-party attack while in transit over the Internet. Our technology supports you through the use of:

1. Client-Server Computing: Client programs authenticate with the server by supplying the server with user name and password information. This information is never sent as clear text over the Internet; instead it is encrypted before being transmitted from the client to the server, and is then decrypted by the server and checked for the appropriate authentication and authorisation.

Outlook/Exchange is an example of Client-Server Computing. The process of authentication and authorisation is shown below:

The security mechanism used is called Windows NT Challenge/Response security, which provides safe authentication for Internet users through the use of Windows NT RPC (Remote Procedure Call). The user's password is never sent in plain text over the Internet — the server issues a challenge to the client, which it encrypts using the client’s password as a key. The client then sends the encrypted challenge back to the server, which in turn verifies that the client knows the true password. With Microsoft Exchange Server and Windows NT RPC, the entire client/server conversation can be encrypted (the choice is made by the user), thus allowing secure mailbox access over the Internet.

2. Web based Computing: Web based computing allows access to hosted applications via a web interface utilising HTTP protocol. In order to make the applications compatible with all types of browsers such as Netscape, Internet Explorer etc, we implement a security mechanism called SSL (Secure Socket Layer); 128 bit for US customers, 40 bit for international customers. SSL is the most trusted and widely used security mechanism and is used in almost all e-commerce sites on the Internet. (It is the mechanism most commonly used for transmitting credit card details over the Internet.)

Outlook Web Access, for example, allows clients to access their Exchange Mailbox from any web-browser, and utilizes SSL security to ensure that sensitive information such as usernames and passwords are not sent in clear text over the Internet.