Network and Communication Security

Network infrastructure is very important for the protection of the system. The network must support the communication, which is necessary for your operating requirements, without permitting unauthorized access. A clearly defined network topology is able to remove many security risks (on operating system level or application level) based on software errors, and prevents attacks to the network, e.g. network spying.

With a cloud environment, there are a minimum of 2 network areas:

• Virtual cloud network - managed by the cloud operator
• Store network/s - managed by the customer

These networks are connected over a public IP provided by the cloud provider. All store networks and store components see the cloud public IP but central systems installed in the cloud virtual network do not see any store networks.

Store applications and web applications use HTTPS secure transport protocols to access central cloud services. HTTPS and TCP over SSL is used for the communication of modules within cloud systems. HTTPS and TCP over SSL as well as GKRMI over SSL is used for the communication of modules within a store system.

All communication channels are protected by authentication.