Talk about an awkward situation—you and a customer collaborate online, sharing a view of a contract and trying to agree on the payment schedule.
As you scrutinize the terms, you realize something has changed. Some of the content in the file you sent is not the same as the file the customer claims they received. What happened?
For all the files you exchange with customers and partners, you want to be able to prove that uploaded and downloaded files are identical. Gaining this capability is critical should a dispute arise over who changed the content of a file. Whether the disagreement might result in decreased trust or a legal matter, you need to make sure your customers and partners never doubt your integrity.
The answer to this challenge comes from non-repudiation. According to Webopedia, non-repudiation ensures a transferred digital message has been sent and received by the parties claiming to have sent and received the message. Non-repudiation can be obtained in three ways:
When non-repudiation is applied to files transferred electronically between two parties, the sender cannot deny sending the message, and the recipient cannot deny receiving the message, thus proving the validity of the transfer to both parties. Non-repudiation can also be used in legal proceedings to prove where a file originated and that the data within the file has not been tampered with.
In essence, who sent a message, where it was sent from, who received it, where they received it, and the integrity of the file can always be guaranteed. And should a dispute arise over the validity of content within a transferred file, non-repudiation provides valuable forensic capabilities to verify what happened.
Going back to the contract dispute discussed above, perhaps someone did make a change inadvertently, maybe even someone within your company. Or perhaps it turns out to be a misunderstanding. Either way, the issue gets cleared up, and the trust between you and your customer remains intact.
In addition to end-to-end non-repudiation playing an essential role in implementing a secure file transfer process between your company and your customers and partner, it’s also required by all the major regulations that protect sensitive information. These include HIPAA, GDPR, SOX, and FISMA.
Correctly implementing non-repudiation can be achieved by implementing a Managed File Transfer software (MFT) solution running on a secure server that performs these functions:
The leading MFT solutions leverage the cryptographically-valid Secure Hash Algorithm (SHA) or the Message Digest (MD) algorithm to check file integrity. SHA takes inputs and produces a hash value that’s typically 40 digits long. It is the stronger method of the two algorithms and is approved under the U.S. Federal Information Processing Standard (FIPS) 140-2.
To solve the non-repudiation challenge, many businesses have turned to MOVEit® Managed File Transfer software. The solution features FIPS 140-2 validated cryptographic modules that include the SHA and MD algorithms for file integrity checking.
Thousands of organizations across the globe have deployed MOVEit for visibility over the file transfer activities of their end-users. With MOVEit, your IT team can assure the reliability of core business processes that depend on the secure and compliant transfer of sensitive data among internal users as well as with customers, partners, and vendors.
You can deploy the managed file transfer software solutions on-premises or in the cloud, with both environments offering certified compliance with PCI, HIPAA, GDPR, and other regulations pertaining to protecting personal data. You can also consolidate all file transfer activities into one system. This lets you manage non-repudiation controls and closely monitor access, encryption, and workout tracking to ensure compliance with SLAs, internal governance, and regulations.
In addition to defending your business, if a file-handling dispute should occur, the non-repudiation capabilities of MOVEit are a great way to show your customers and your partners just how serious you are about protecting the integrity of documents. And that helps establish a level of trust that fosters long-term relationships!
To see for yourself, start a free trial of MOVEit today.
Greg is a technologist and data geek with over 10 years in tech. He has worked in a variety of industries as an IT manager and software tester. Greg is an avid writer on everything IT related, from cyber security to troubleshooting.
Let our experts teach you how to use Sitefinity's best-in-class features to deliver compelling digital experiences.Learn More
Subscribe to get all the news, info and tutorials you need to build better business apps and sites
You can also ask us not to share your Personal Information to third parties here: Do Not Sell or Share My Info
We see that you have already chosen to receive marketing materials from us. If you wish to change this at any time you may do so by clicking here.
Thank you for your continued interest in Progress. Based on either your previous activity on our websites or our ongoing relationship, we will keep you updated on our products, solutions, services, company news and events. If you decide that you want to be removed from our mailing lists at any time, you can change your contact preferences by clicking here.