The eMIP platform uses TSL / SSL secure communication protocols, which encrypts all the data transmitted between the client and the server. These protocols are commonly used to protect communications over the Internet, including online transactions, access to secure websites, and other activities that involve the transmission of sensitive data over the Internet.

​

TLS (Transport Layer Security) and SSL (Secure Sockets Layer) are security protocols that provide encryption for communications between two systems, such as a browser and a web server. These protocols are used to protect sensitive data, such as credit card numbers or passwords, when transmitted over the Internet.

​

TLS and SSL are similar, but TLS is a newer and more secure version of the SSL protocols. TLS was developed as an improvement on SSL protocols and has replaced them in most cases. Both protocols work by encrypting data during its transmission over the Internet and verifying the authenticity of the server and client.

​

To use TLS or SSL, a connection is established between two systems and a shared encryption key is negotiated. This key is used to encrypt and decrypt data transmitted between systems. TLS and SSL also use digital certificates to verify the identity of the server and client and to ensure that data is transmitted only to the expected server.

Authentication is ensured by PBKDF2 (Password-Based Key Derivation Function 2) algorithm with 1000 iterations, 128-bit hop and 256-bit subkey which is designed to be computationally expensive, making a brute-force attack unprofitable .

​

In addition to being computationally expensive, PBKDF2 is also resistant to various types of attacks such as dictionary attacks and pre-computation attacks. This makes it a very effective method for securely storing passwords and protecting against unauthorized access.

Brute force attacks work by calculating every possible combination that could make up a password and testing it to see if it is the correct password. As password length increases, the time, on average, to find the correct password increases exponentially.

​

eMIP, blocks the account of the attacked user for a period of time, upon detection of a set of failed access attempts. The unlocking is done automatically after a certain time interval (tens of minutes), and the detection of other sets of attempts that will be blocked is resumed.

Two-factor authentication (2FA) is an authentication system that involves entering two forms of authentication information to access an account or system. The first form of authentication is usually a password, and the second form can be a verification code received via email / SMS, an authentication token generated by an application, or a physical authentication key.

​

2FA is an effective method of protecting access to accounts and systems because it involves the need to have access to both forms of authentication information to perform authentication. If an attacker manages to gain access to your password, they won't be able to access your account or system unless they also have access to the second form of authentication.

​

In general, 2FA is considered an efficient method of protecting access to accounts and systems, as it significantly increases the level of security. However, it's important to keep in mind that two-factor authentication methods can still be compromised, for example if an attacker manages to gain access to your phone or if you use an authentication app that isn't secure enough. That's why it's important to consider all security aspects when using two-factor authentication methods.

The infrastructure of the eMIP platform uses Windows Server 2022 Datacenter as an operating system, which offers support for applications and high-performance network services. This operating system offers enhanced security features, such as TLS (Transport Layer Security) over SSL (Secure Sockets Layer), to protect data transmitted over the network.

​

The eMIP platform uses Azure VM (Virtual Machine) backup to make daily backup copies of the virtual machines in the platform. This backup service ensures the protection of business continuity by making automatic backup copies of virtual machines, which can be restored in case of need.

​

The eMIP platform uses Microsoft SQL Server 2019 as a database to store and manage the information of the applications in the platform. This version of SQL Server is an Enterprise edition, with advanced functionalities:

1. SQL Server Agent is a tool that allows administrators to automate database maintenance and monitoring activities.

2. Machine Learning Server and R for building, training and evaluating machine learning models directly in a SQL Server database for scoring and prediction.

 

In conclusion, the infrastructure of the eMIP platform uses the latest technologies, such as Windows Server 2022 and SQL Server 2019, to offer high-quality performance and security to the applications in the platform. Additional tools, such as Azure VM backup and SQL Server Agent, ensure the protection of business continuity and the facilitation of database maintenance.