Home
›
Discover

Introduction to Hypori

Hypori delivers zero-trust access to enterprise apps and data via a separate, secure virtual mobile workspace from any smartphone or tablet. The Hypori client apps (Android, Apple, Windows) are NIAP Common Criteria Certified and provide the encrypted TLS Tunnel to connect to the virtual workspace. The virtual workspace delivers Android apps to connect to organization infrastructure and resources such as email, documents, or collaborative tools (Teams, Zoom, Slack, etc.).

The widespread adoption of personal mobile devices in business settings greatly enhances productivity, yet it has also brought significant security vulnerabilities. Mobile devices typically hold both personal and corporate data, making it essential to keep both separate and secure.

Hypori ensures that no corporate data is stored or processed on personal devices while ensuring Enterprises can not access the personal data stored on the phone.

Key Attributes of Hypori

  • Zero-Trust Security Model: Hypori is a zero-trust solution, which means that all users and devices are required to authenticate and continuously validate their access. This approach mitigates risks associated with lost or stolen devices and reduces insider threats.
  • Data Isolation: Hypori physically separates personal and corporate data. This separation ensures that corporate information is safeguarded against device-level threats and that personal data remains private and inaccessible to the organization. This dual layer of privacy protection is crucial for complying with privacy regulations, and it eliminates the potential for corporate overreach into (and corporate entanglement with) personal data.
  • Regulatory Compliance: Hypori uses state-of-the-art security techniques and practices to comply with numerous government and commercial cybersecurity compliance frameworks. This adherence to stringent security protocols helps organizations meet various compliance requirements, including IL5, FedRAMP High, HIPAA, GDPR, and other requirements, regulations, and laws, reducing legal and financial risks associated with cybersecurity-related events.

Virtual Workspace Environment

Using the Hypori Client app (for Android, iOS, and Windows), Hypori provides users access to a virtual workspace environment that operates like a standard smartphone but is hosted in the cloud. This virtual device runs a secure Android operating system and is capable of performing business functions in a controlled and secure manner.

Client Application End-User Devices

The Hypori Client for Android, iOS, and Windows platforms is Common Criteria-certified by the National Institute of Standards and Technology (NIST) and NSA’s National Information Assurance Partnership (NIAP). NIAP ensures that all certified products “demonstrate exact compliance to the applicable technology protection profile.” Hypori has continued to meet these requirements since its first evaluation in 2016. This certification verifies that “Hypori is a thin client that communicates only with a Hypori virtual device on a Hypori server and not with other servers or applications.” It validates the cryptographic elements used to protect the communication with the Hypori service, that no data is at rest on the user device, and no personally identifiable information (PII) is transmitted or stored on the device.

The client app provides users access to a virtual workspace environment that operates like a standard smartphone but is hosted in the cloud. This virtual device runs a secure Android operating system and is capable of performing business functions in a controlled and secure manner.

The client app relies on minimal services within the host device to function. This significantly reduces the amount of trust that needs to be extended to the device, and concerns about encrypting enterprise data at rest and incidents related to device loss are eliminated.

To further reduce any threat vectors stemming from a compromised device, the Hypori Client uses application shielding and cryptographic key protection capabilities. Runtime OS attestation checks are performed when the app launches. If the client detects tampering of the client components or a rooted/jailbroken device, it will not connect to the environment.

Data persisted on the client is limited to device authentication credentials in the key chain. The mutual TLS (mTLS) tunnel certificate is stored with the OS protected keystore on the device. Independent Forensic and Pen Testing attests that no data is on the device.

Virtual Workspaces

Every virtual workspace running on the server has a template that defines its properties. Templates enable multiple virtual workspaces running on the server to use the same set of properties.

  • Applications and Usage Scenarios: Templates identify various applications necessary for day-to-day business operations, such as email clients, messaging apps, CRM software, and specialized corporate applications. Each user is assigned a template that determines the look/feel and contents of the virtual workspace. Users with the same template are given identical virtual workspaces, making them easier to support.
  • Benefits for Multiple Environments: Whether employees are working from the office, from home, or while traveling, they can securely access the same virtual workspace with a consistent user experience. This flexibility is crucial for businesses to maintain high productivity levels from a hybrid workforce without compromising on security.

Hypori not only enhances security by isolating corporate data from personal devices but also ensures that each user’s interaction with corporate data is fully compliant with organizational policies and security regulations.

Architecture and Security Features

Hypori's innovative approach to mobile security leverages a robust architecture and advanced security features, ensuring that it not only addresses modern enterprise mobile security challenges but also complies with stringent compliance standards.

Architecture Overview

Hypori employs a split-architecture model, featuring a Control Plane and a Data Plane, each serving specialized functions within the system.

Hypori functional architecture diagram showing the Control Plane and Data Plane

Control Plane

The Control Plane orchestrates the management and operation of virtual mobile environments, ensuring efficient policy enforcement and resource management:

  • Authentication and User Management: It manages secure user access through robust authentication mechanisms, including multi-factor authentication and mutual TLS (mTLS), to verify user identities and maintain secure sessions.
  • Policy Enforcement: Enforces consistent security policies across all virtual devices to ensure configurations comply with internal standards and external regulations.
  • Service Management: Coordinates services across the virtual environment, handling everything from resource allocation to service health monitoring, ensuring optimal performance and availability.

Data Plane

The Data Plane provides the operational environment for virtual devices, offering powerful data protection and operational isolation:

  • Isolated Virtual Devices: Runs each user’s session in a completely isolated environment, using containerization to prevent data leakage and unauthorized interaction between sessions.
  • Resource Optimization: Utilizes advanced algorithms to dynamically allocate resources based on user demand and system load, enhancing the overall efficiency of the virtual environment.
  • Data Integrity and Security: Implements rigorous data protection measures, including encryption and access controls, to safeguard sensitive information stored within the virtual devices.

Security Features

Hypori integrates several advanced security technologies to protect data integrity and confidentiality.

Zero Trust Security Model

Adopting a zero-trust architecture, Hypori requires strict verification for every access request, regardless of the origin:

  • Continuous Verification: Implements continuous verification of credentials and security posture for all devices and endpoints, ensuring sustained adherence to security policies.
  • Least Privilege Access: Adheres to the principle of least privilege by granting users the minimal level of access necessary for their job functions, significantly reducing the potential attack surface.
  • Segmented Network Access: Uses network segmentation and micro-segmentation strategies to control access to network resources, enhancing security, and reducing the risk of lateral movement by threats.

Encryption and Data Protection

Robust encryption and strict data handling protocols are central to Hypori’s security strategy:

  • End-to-End Encryption: Utilizes industry-standard encryption protocols such as AES-256 for all data in transit and at rest, ensuring comprehensive data protection against interception and unauthorized access.
  • Data Segregation: Ensures that no corporate data is on the user’s devices and that the corporation has no control over the personally-owned device. This completely segregates personal from corporate data and infrastructure/resources and minimizes the risk of accidental disclosure or malicious data breaches.
  • Secure Data Deletion: Employs mechanisms for secure data deletion from the cloud environment when data is no longer required, adhering to best practices in data lifecycle management.

Compliance with Security Regulations

Hypori’s design is crafted to meet global compliance standards, helping organizations fulfill their regulatory obligations. Hypori is actively used by government and commercial organizations to meet compliance obligations.

Cybersecurity Compliance Framework Certifications (All listed on the Hypori Trust Center)

All Hypori offerings have been certified or authorized with at least one of the following Cybersecurity Compliance Frameworks, reflecting its commitment to maintaining a high security standard:

  • SOC 2 Type II: SOC, which stands for System and Organizational Controls, is a framework developed by the American Institute of Certified Public Accountants (AICPA) for the purpose of providing regular, independent attestation of the controls that a company has implemented to mitigate information-related risk. The Hypori Commercial Cloud and CMMC Cloud environments have been audited and certified to comply with SOC 2 Type II cyber security requirements for operational effectiveness and reliability in safeguarding customer data over time.
  • Common Criteria: Hypori Client apps are certified by the National Information Assurance Partnership (NIAP), which ensures compliance with exact technology protection profiles.
  • NIST Compliance: The Hypori service offerings comply with the National Institute of Standards and Technology guidelines, including the use of FIPS 140-2 validated components for encrypted communications.
  • CMMC/NIST 800-171/ 252.204-7012 Safeguarding Covered Defense Information: The Hypori CMMC Cloud environment provides Defense Industrial Base (DIB) customers with secure access to controlled unclassified information (CUI) information and resources from a personally- or corporate-owned device. This environment meets all requirements for FedRAMP Moderate equivalency with a mirrored environment to our FedRAMP High / DoD CC SRG IL5 authorized environment.
  • FedRAMP High: The Hypori for Government environment has been assessed by a certified 3PAO auditor as compliant with no significant findings. Hypori expects to be listed in the FedRAMP Marketplace as “In Progress” by the end of 3rd quarter 2024.
  • DoD Cloud Computing Security Requirements Guide Impact Levels 4 and 5: The Hypori IL5 SaaS environment (eMass record #106) provides DoD Mission Owners with secure access to DoD resources from a personal or government owned device while protecting CUI.
  • NSA's Commercial Solutions for Classified (CSfC): Listed on the NSA CSfC Compliant Product List, Hypori meets high-security standards for connecting to classified environments.

Hypori's architecture and security features provide a sophisticated framework that enhances mobile security and aligns with strict compliance requirements. By isolating physical devices from data processing and storage, Hypori offers a secure and scalable mobile solution that integrates seamlessly into existing corporate infrastructures, ensuring compliance and robust protection against modern cyber threats. This innovative approach ensures that organizations can address their mobile security challenges without compromising user experience or regulatory compliance.

Operational and Deployment Models

Hypori offers diverse deployment options to cater to the varying needs of enterprises, each model providing specific operational roles and responsibilities. This section outlines these models, highlighting Hypori's involvement in the deployment and operation of Hypori across different environments.

Hypori Cloud Deployment

In a public cloud deployment, Hypori manages the cloud infrastructure where the Hypori software operates, providing a hands-off approach for the customer regarding the technical management and maintenance of the platform.

  • Platform Management: Hypori is responsible for the installation, management, and upgrades of the Hypori platform on the cloud infrastructure.
  • Security and Compliance: Ensures that the deployment adheres to security standards and compliance requirements, managing tasks such as security patching and network configurations.
  • Operational Support: Hypori offers continuous monitoring and technical support, handling incident response and system optimizations to ensure high availability and performance.

Hypori Named Cloud Deployment

In a Named Cloud Deployment, Hypori manages the cloud infrastructure in the Cloud Provider of the customers’ choice. Currently AWS and Azure are supported.

As with Hypori Cloud, Hypori Named Cloud provides a hands-off approach for the customer regarding the technical management and maintenance of the platform.

  • Platform Management: Hypori is responsible for the installation, management, and upgrades of the Hypori platform on the selected cloud infrastructure.
  • Security and Compliance: Ensures that the deployment adheres to security standards and compliance requirements, managing tasks such as security patching and network configurations.
  • Operational Support: Hypori offers continuous monitoring and technical support, handling incident response and system optimizations to ensure high availability and performance.
  • and custom updates.

Hybrid Private Deployment

Hybrid deployments leverage both on-premises and cloud environments, where Hypori’s responsibilities vary based on the location of the resources.

  • Integration and Configuration Management: Hypori manages the integration of cloud services with on-premises infrastructure, ensuring seamless operation across environments.
  • Security Management Across Platforms: Hypori oversees security protocols across both the cloud and on-premises deployments, maintaining a consistent security posture.
  • Performance Monitoring and Optimization: Regular reviews and adjustments are made by Hypori to optimize performance across the hybrid environment.

Private Cloud Deployment

For enterprises looking for customization and control over their data, Hypori offers private cloud deployments where Hypori’s role is more collaborative.

  • Infrastructure Setup and Maintenance: While the customer may provide the cloud infrastructure, Hypori handles the installation and ongoing management of the Hypori platform within this environment.
  • Custom Security Solutions: Hypori works closely with the customer to implement enhanced security measures that meet the enterprise's specific requirements.
  • Dedicated Support: Hypori provides dedicated support and maintenance, including direct access to Hypori’s engineering teams for rapid issue resolution

On-Premises Deployment

For organizations that require all data and systems to remain on-premises, Hypori adapts its role to support an on-premises deployment effectively.

  • Software Installation and Configuration: Hypori is responsible for the initial deployment of the Hypori software and subsequent configuration adjustments.
  • Local Support and Maintenance: Hypori provides on-site support and maintenance, including system upgrades and troubleshooting.
  • Compliance and Security: Hypori assists in ensuring that the deployment meets industry compliance standards and is secure against potential threats.

Each deployment model offers tailored roles for Hypori, designed to meet the specific needs and security requirements of different organizational environments. From full management in a public cloud to collaborative roles in private and hybrid models, and direct support in on-premises installations, Hypori ensures that each deployment is optimized for security, compliance, and operational efficiency.

Key Takeaways

As enterprises continue to navigate the complexities of mobile security, Hypori stands out as a sophisticated, regulatory-compliant, and user-friendly solution that protects both corporate and personal data without compromising functionality or performance. By choosing Hypori, your organization can achieve not only a higher standard of security but also a more flexible and resilient IT infrastructure.

Hypori addresses the fundamental challenges faced by enterprises today, including the need to secure mobile data, comply with rigorous regulatory standards, and enable a flexible, productive workforce. By decoupling the physical device from data processing and storage, Hypori provides a solution that significantly reduces the risk of data breaches and other security threats. This approach not only enhances the overall security posture of an organization but also simplifies compliance with global data protection regulations.

The various operational models available with Hypori, from public and private cloud to on-premises solutions, allow organizations to choose the deployment that best fits their specific needs. Each model is designed to optimize the balance between control, security, and ease of use, ensuring that all employees, regardless of their location, have secure and efficient access to the tools they need to be productive.

To truly understand the value and capabilities of Hypori, we encourage you to engage with us further:

  • Schedule a Demo: See firsthand how Hypori can transform your organization’s approach to mobile security. Our team will provide a comprehensive demonstration of the platform’s capabilities and how it can be tailored to your specific needs.
  • Pilot Program: Participate in a pilot program to experience the benefits of Hypori in your own operational environment. This trial will allow you to evaluate its effectiveness and ease of integration within your existing IT infrastructure.
  • Consultation: Contact our expert team for a detailed consultation to discuss your specific security challenges and requirements. We can help you understand how Hypori fits into your overall security strategy and assist in planning a seamless deployment.

Take the next step towards securing your mobile enterprise environment by reaching out to us today. Let Hypori safeguard your data while empowering your workforce to succeed in the digital age.