Blochost-MDZ

Software solution Blokhost-MDZ Is a software-hardware complex (PAK) of a trusted download, which allows to exclude unauthorized access (NTD) to PC resources at the initial stage of its download. Thanks Blokhost-MDZ Ensures the preservation of confidential data on both hard disks and removable media in case of their loss. The product allows you to boot the operating system only after carrying out the control procedures that guarantee the power of attorney to boot the OS. AT Blokhost-MDZ Implemented the function of encryption of system and / or user disks, as well as removable USB-media. PAK "Blockhost-MDZ" Clears RAM after the completion of monitored processes, monitors the integrity of selected files / directories, and removes them without recovery. The software solution can be used both at enterprises, and to protect a personal PC or laptop. The structure of "Blockhost-MDZ" includes four subsystems , Which can be installed as a single complex, or separately:
The integrity control subsystem Provides periodic monitoring of directory contents and file integrity on the workstation. Due to domain group policies, it is possible to perform a centralized installation of the subsystem and download the list of monitored files to remote workstations. Memory Cleanup Subsystem It monitors certain (critical) processes and cleans up freed areas of RAM that were previously used to store restricted access information.

Subsystem for guaranteed deletion A permanently active subsystem prevents files from being deleted in the standard way. Thanks to a three-time mashing of the contents using a special algorithm when deleting, the reading of the information remaining on the disc after deletion is excluded.

Disk Encryption Subsystem Eliminates unauthorized access to PC resources at the initial stage of loading and protects information on disks in case of their theft. Advantages of the hardware-software complex "Blockhost-MDZ":

• Effective protection against unauthorized access to the workstation, including in cases of loss or theft;
• Protection and preservation of data on hard disks and removable media in case of their loss or theft;
• Protection of personal data on hard disks of PCs and laptops / netbooks from unauthorized access, loss or theft;
• Protection of backup copies of data;
• Suitable for any type of PC (home computer, work computer, laptop, netbook);
• Intuitive interface;
• Certificates Gazpromert and certificates of compatibility of leading vendors.

The main functional features of "Blockhost-MDZ":

• Two-factor authentication before OS boot using USB keys e-Token, RuToken;
• Encryption of the user and system disks;
• Disable user disks when they are not working;
• Monitoring the integrity of file objects;
• "Transparent" encryption of USB-media and disks according to algorithms AES-256 LRW and GOST 28147-89 (the system disk can be encrypted only using the algorithm AES-256 LRW);
• Clean up memory areas after the completion of monitored processes;
• Zeroing the Windows paging file and secure deletion of files in accordance with GOST R50739-95;
• Restart the PC after three unsuccessful authentication attempts.