fileXhub Security

fileXhub provides for secure file exchange in several ways.

  • Secure file exchange hub software
  • Security of data stored on the server - 'at rest'
  • Security of data transmitted over the Internet - 'in flight'
  • Secure password exchange

First, fileXhub is BIT's proprietary product and is not based on any FTP server code. Although it responds to FTP commands to make it work with FTP clients it is using BIT's proprietary code. fileXhub does include Tomcat, a leading open source Web server to serve up its Web pages, but it employs BIT proprietary code for HTTP/S Web services.

With all versions fileXhub, none of your business documents are stored on the file system at all. They are stored in an encrypted database. If and when a hacker gains access to the server, they will find significant additional barriers that protect your data.

fileXhub Professional and fileXhub Enterprise also offer encrypted passwords and encrypted messages 'in-flight' (while transmitted over the Internet) through the use of HTTPS and a digital certificate. If you already have a certificate, it can easily be installed in the Tomcat Webserver in fileXhub. If you are new to digital certificates, BIT can help you get a certificate from a trusted certificate authority.

With fileXhub Enterprise, there is the option of significantly enhancing security by deploying the portal, FTP proxy, and HTTP(S) proxy on a server in the DMZ (open to the public Internet) and deploying fileXhub administration and the fileXhub database in a secure network zone. That way, even the encrypted database is secured behind firewall rules that only allow database access from the fileXhub proxies using their non-routable IP addresses. That means that your Internet-accessible exchange hub could be completely compromised without giving any access to even the encrypted database.

The very best security comes from using payload encryption, digital signatures, and signed delivery receipts. Doing that requires generation and exchange of digital certificates and sophisticated processing by both your software and the software your trading partners use. BIT supports this kind of processing in both our MFT and EME solutions. It can be added to an existing fileXhub at any time when trading partners are ready to implement their side of the required security framework.

fileXhub eliminates the risk inherent in storing sensitive information like pricing and account numbers in clear text on the file system. fileXhub Professional adds HTTPS encryption of passwords and message content and adds the FTP protocol.
fileXhub Enterprise adds HTTP/S Web service message exchange and goes beyond the security of encrypted passwords, message content and an encrypted database and puts the database safely in your secure network.

Dowload fileXhub today and you won't have a dirty little secret anymore.