Our Technology
Zero-Plaintext Architecture
No 'Plaintext' and 'Key' is left anywhere on the server, database, or application.
Our Encryption
1
Request
App server sends plaintext data alongside encryption commands.
2
Hardware Operation
Key combinations and operations are performed inside the CTHR-01 Memory Vault.
3
Return
Only encrypted result (Ciphertext) is returned and saved to the database.
Application Layer Encryption
When processing personal information on a web/app server, it securely encrypts by calling the hardware API without load the key into memory.
Transparent Encryption Offload
The TDE function of the existing DB (Oracle, MySQL, PostgreSQL) is used as is, but only key management and operations are delegated to CTHR-01.
1. CTHR-01 PCIe Installation and Driver Interworking
2. Move DB Master Key inside CTHR-01 (Isolation)
3. Accelerate performance by offloading encryption/decryption operational loads into hardware.
Database Server
TDE Layer
Master Key
PCIe Gen4
Connection
CTHR-01
QSPU
Secure Vault
Master Key Stored Here