Data Security

The MFT service implements a combined encryption by using both symmetric and asymmetric methods. The encryption of the files you send is performed locally on your computer, and the original files are not uploaded to the server. The following approach is used to ensure safe data exchange:

Note When an MFT agent has been installed and activated, the agent generates public and private keys, and the public key is registered on a server.

Step 1: Before sending a file, an agent generates symmetric session keys and requests for your partner’s public key from the server.

Step 2: An agent performs file encryption by using the created symmetric key.

Step 3: An agent encrypts a symmetric key by using a public key of your partner’s agent.

Note If your partner has several agents, an agent encrypts a symmetric key for each agent. The file itself is not encrypted again.

Step 4: An agent encrypts a symmetric key by using its public key, so that you can access the file.

Step 5: An agent uploads an encrypted file and an encrypted symmetric key to the server.

Step 6: Your partner's agent downloads an encrypted file with the encrypted symmetric key from the server.

Step 7: Your partner's agent decrypts the key by using its private key, and then decrypts the file by using the decrypted symmetric key.