GRAU DataSpace provides FileShare & Sync for enterprises and managed service providers

1. GRAU Data Space 2.0 –
The Secure Communication Platform for
Businesses and Organizations
YOUR DATA. YOUR CONTROL
7. Dez 2013

2. Introduction
●
●
WebAttached Drive and WebAttached Backup have been introduced
to the market in 2000 by GRAU DATA in Germany
Data Space 2.0 can be deployed in house leveraging existing
infrastructures
●
Customer specific development is possible (open API)
●
Customer specific branding without programming
●
Product of the month January 2013 in SearchStorage magazine

3. Usage scenarios
●
Encrypted and secure file sharing (internal or external)
●
Reducing the load on e-mail system (attachments)
●
Replacement of FTP or proprietary solutions
●
Eliminates security holes in file sharing processes
●
Multilevel access control
●
Solution for reception of mission critical corporate files
●
Secure mobile access to enterprise data
●
Synchronization of files on different devices
●
Replacement of local file server
●
Synchronization between branch offices

4. Features (1)
●
Easy to use file sharing for internal, external and anonymous users
●
File sharing via public up- and download links
●
Expiration date for up-/download links, users, folders and files
●
Flexible right management
–
–
●
Rightsmanagement on folder level
Roles, Groups, optional ACLs
Platform-independent access via
–
WebGUI
–
WebDAV (Windows, MacOSX, Linux)
–
Mobile Apps (iOS, Android, BB10)
–
Desktop Sync für Windows, Linux, MacOSX (CMIS)
–
Interoperability with OwnCloud clients via gateway
–
CIFS protocol

5. Features (2)
●
IT compliance:
–
Compliance with German and European data-protection and data-security
regulations (official certification in progress)
–
Audit-proof logging of all activities (optional)
–
Automated versioning of all file objects
World-wide unique identification of all objects
Integration with existing identity management (AD, SAML, OAUTH2)
–
–
●
IT security:
–
–
–
Integration with BoxCryptor (group level encryption)
Implementation of private or hybrid clouds possible
–
●
Encrypted file transfer
Master/master replication between sites (folder level)
Flexible storage backends:
–
SQL-DB, filesystem, object store, NAS (CIFS)

6. Features (3)
●
Easy integration of existing IT systems
●
●
●
●
Groupware systems
Portals
Provisioning systems
CMS systems
●
●
●
●
Online marketplaces
CRM/ERP systems
DMS/ECM systems
Accounting-/Billing systems
Innovative cloud oriented solution for
secure file sharing - designed for global
enterprises and organizations

7. Security & Compliance
●
Architecture
–
–
Vendor independence (storage, operating System, database, clients)
–
●
Statically typed language on server-side (stability & security)
Scalability through shared-nothing architecture (no single point of failure)
Compliance
–
–
Versioning and unique identification of objects (consistency)
–
Logging of all events (configurable)
–
Classification of objects (e.g.level of confidentiality)
–
●
Separated between user and administrative access (confidentiality)
WORM functionality on objects (long-time archiving)
Security
–
On-/Off premise deployment (distributable)
–
End-to-end encryption (BoxCryptor)
–
Plugin infrastructure for server side encryption

8. Open interfaces
●
Open standard interfaces
–
–
JSON/SOAP core API
–
●
WebDAV
CIFS
Gateways
–
–
CMIS 1.1 (SOAP, AtomPub, JSON)
–
●
OwnCloud
LDAP/AD
Source code access
– Based on a variety of open source components
–
Source code access for customers

9. Technologies used
●
GDS core
–
–
●
Java
JBOSS, Enterprise Java Beans
Interfaces
–
–
●
JSON (Jersey)
CMIS (OpenCMIS)
WebGUI
–
●
Desktop Clients
–
●
ExtJS/Sencha Touch
C# (.net/mono)
Data Persistence
–
–
●
Data bases: DB/2, MS-SQL, MySQL, Oracle, Postgres
Object stores: Caringo, S3, SWIFT
Metadata Persistence
–
DB/2, MS-SQL, MySQL, Oracle, Postgres

10. Architecture (1)
WebGUI
Admin GUI
GUI GW
Admin GW
GDS2 API (JSON)
ownCloudGW
CMIS GW
CIFS
WebDAV
GDS core
Storage Backend
Object-Store
Caringo
S3
SWIFT
FS/CIFS
GAM
NAS
Meta data
SQL
DB/2
Oracle
MySQL
Postgres
SQL/HA
DB/2
Oracle
MySQL
Postgres

11. Architecture (2)
GDS core
Storage Backend
Hashing
(optional)
Chunking
(e.g. 512kB)
Crypto
(sym.)
Mirroring
Object store
Filesystem
CIFS
SQL
NAS
GAM/Archive
DB/2
Oracle
MySQL
Postgres
Caringo
RADOS
SWIFT/S3
ext4
XFS

12. Architecture (3)
Load Balancer
Load Balancer
GDS (Session) Director
GDS (Session) Director
GDS2 API (JSON)
GDS2 API (JSON)
GDS core
GDS core
Storage
Metadata
Replication
Data
Metadata
Storage
Metadata

13. Architecture (4)
Load Balancer
Load Balancer
GDS (Session) Director
GDS (Session) Director
CMIS Cache
CMIS Cache
CMIS Cache
CMIS Cache
GDS2 API (JSON)
GDS2 API (JSON)
GDS2 API (JSON)
GDS core
GDS core
GDS core
MD
Data
Metadata
Replication
MD
Data
Metadata
Replication
Objectstore / Cluster filesystem
MD
Data

14. Architecture (5)
WebGUI
Admin GUI
Admin GW
GDS2 API (JSON)
Provisioning
Gateway
LDAP/AD
SQL
SAML
GDS core
Storage Backend
Metadata
Authentication
Gateway
LDAP/AD
SAML
RADIUS

15. Distributed Data Space
GDS2
CIFS
FW
Site B
GDS2
CIFS JSON
LAN
Site A
CIFS JSON
HT
T
S
TP
HT
CIFS
FW
LAN
FW
LAN
GDS2
CIFS
PS
Internet
HT
T
LAN
CIFS
FW
GDS2
CIFS JSON
PS
Site C
HT
Site D
PS
T
CIFS JSON

16. CMIS
Site B1
Site B2
WebDAV
GDS
HT
T
Site B
CIFS
GDS
CMIS
GDS
WebDAV
PS
OS
OS
Site C
CIFS
CMIS
WebDAV
GDS
HT
T
PS
CMIS Cache
HT
S
TP
SD
WebDAV
CMIS
GDS
GDS
CMIS
CIFS
HT
WebDAV
PS
T
HTTPS
CIFS
GDS
SD
CIFS
CMIS Cache
Site A
CMIS Cache
Corporate CDN
OS
GDS

17. GRAU Data Space 2.0 –
USABILITY AND USER INTERFACE

18. Web GUI (1.0)

19. Web GUI (1.1)

20. Mobile Clients (iOS)

21. Mobile Clients (Android)

22. Desktop Sync

23. YOUR DATA. YOUR CONTROL.
WWW:
HTTP://WWW.GRAUDATA.COM/DATASPACE
E-MAIL:
THOMAS.UHL@GRAUDATA.COM
CEL:
+49 172 7277920
TWITTER:
@graudata