Question about secure file transfer

[ristver]

Hi all, I am running a large scale business and some time I have to transfer large and very important data files to my business partner. I fear about my data because there are many of my business competitors who will definitely try to steal my important data. So there is huge amount of risk involved in sharing my important data on Internet. I recently heard about secure file transfer technique from my friend who is working in well established software company. Does anyone have any idea about what is Secure File Transfer (SFT) service and how does it work?

[Ng Seah Wee]

Hi Sir,

Our hosting package are SFTP ready, will you be interested,

Are you able to provide your contact details for further discussion

You can contact me at 65600732, or ngsw@nswgroup.com.sg

[LampPC]

Hi all, I am running a large scale business and some time I have to transfer large and very important data files to my business partner. I fear about my data because there are many of my business competitors who will definitely try to steal my important data. So there is huge amount of risk involved in sharing my important data on Internet. I recently heard about secure file transfer technique from my friend who is working in well established software company. Does anyone have any idea about what is Secure File Transfer (SFT) service and how does it work?

I have a better suggestion. Why not use a VPN to transfer the files?

If security is a concern, zip the file and password protect it. This will be recommended than SFTP because firstly, the zipped files become smaller and secondly SFTP is slower than normal FTP.

[dotservant.com]

I would second the VPN approach, since likely you will need to do this regularly, the VPN setup is much viable solution to you.

[kristking]

Hi, I am a programmer and I agree with your doubts. SFT is a secure way to move files between almost any two computers across open networks. Secure FTP (http://www.jscape.com/secureftpserver/) is very useful when you require high speed file transfer method. It indeed helps in transferring large files and that too in a secure mode. I have personally used this thing and I cannot think of a better solution to your problem. It helps in automation of file transfer processes and I believe it will help you to get rid of the fear of your data being stolen by your competitors.

Good luck and wish you success in your business.

[alanwoo]

The above suggestion is only securing the transmission/communication channel for file transfer, this do not protect you from network administrator or unauthorized person to view you document.

For better document security, you need to encrypt your document, so in the event the file fall into the wrong hand, they cant decrypt to view the document.

Please search/review the subject "PGP" public/private key signing feature/ or personal digital certification to encrypt the document, the underlying concept is very simple:

For example, when you want to send me a document that only I can view it but no one else, you ask me for a "LOCK"(public key), you will then use my "LOCK" to lock(encrypt) the document, I am the only person who have the "KEY"(private key) to unlock the LOCK (decrypt the document).

In this senario, I will publish my "LOCK"(Public Key) to everyone that want to send me encrypted document, and I will save my "KEY"(Private key) in a USB thumb drive or a Smartcard(similar to cashcard). I carry the "KEY" with me, and only use the "KEY" to decrypt document when I needed. In the event I lost my laptop, whoever pick up my laptop wont be able to view the encrypted document without the "KEY"(save in usb thumb drive or smartcard).

Hope this information useful.

[alanwoo]

1 more bit to add in,

You must take good care of your "KEY"(private key), if you lose your "KEY", you say goodbye to your encrypted document, there is not much locksmith around to break this PGP 1024bit encryption, you may need a supercomputer with 10 year of computing power to break the encryption.