Ncc Group Plc · LSE:NCC
Ncc — Technical Presentation (April 2013)
29 slides from Ncc's technical presentation, April 2013
Slide 1: Escrow for (cc)TLDs
Escrow for (cc)TLDs by David Kipling 1
Slide 2: Agenda
Agenda • Why Escrow your data? • Latest ICANN requirements • Data Security • Data Integrity • Keeping you informed • Q&A 2
Slide 3: Why Escrow your data?
Why Escrow your data? Data Security • Enhance DR Processes • Verify Impartially and Externally Secure Business & Increase Revenue • Customer protection • Builds trust and reputation Keeping up with the new gTLDs • Essential stakeholder protection • A competitive advantage 3
Slide 4: Why Escrow your data?
Why Escrow your data? • Confidence your data is Secured, Accessible and Usable • Gives customers Confidence in your services • Independent verification of you most Valuable asset 4
Slide 5: Latest ICANN requirements
Latest ICANN requirements New gTLDs • Daily deposits of data • Data MUST conform to agreed ICANN format • Deposits MUST be validated by the Escrow Agent using ICANN rules • Deposit notifications are sent to ICANN and the Registry operator • Emergency Back End Registry Operators to resume services 5
Slide 6: Latest ICANN requirements
. SG Latest ICANN requirements necgrour Backend Registry Operator Data Escrow Agent Files encrypted and transferred securely Y Encrypted files QZ stored securely Deposit files } Registry Servers ! f Storage Server Daily Deposits of data to i restore registry created Hl \ \ ' \ \ \ i H File Transfer
Slide 7: Data Security
nccgroup* Data Security Ec
Slide 8: How to secure the data
How to secure the data Transfer Protocols SFTP/FTPS/HTTPS Authentication SSH keys/User/Password Data Encryption PGP(GPG) File Integrity Digital Signatures 8
Slide 9: Diagram of Escrow Security Process
Diagram of Escrow Security Process 9
Slide 10: Data Integrity
nccgroup* Data Integrity Ec 10
Slide 11: How to ensure Data Integrity
How to ensure Data Integrity • Digital Signatures using file checksums • Schema checks • Verification of contents 11
Slide 12: ICANN Extended Verification
ICANN Extended Verification 1. Check deposit validates to schemas defined 2. Count the objects and validate that number of objects is equal to the number objects reported in the <header> element of the escrow deposit 3. All contacts linked to domain names are present. 4. All registrars linked to oth
Slide 13: Deposit Formats (XML)
Deposit Formats (XML) <?xml version="1.0" encoding="UTF-8"?> <rde:deposit type="FULL” id="20101017001" prevId="20101010001" xm1ns :domain="urn: ietf:params:xml:ns:domain-1.0" xmlns :rde="urn: ietf: params: xml:ns:rde-1.0" xmlns :epp="urn:ietf: params :xml:ns:epp-1.@"> <rde:watermark>2010-10-17T@:0@:
Slide 14: Deposit Formats (CSV)
freedom from doubt Deposit Formats (CSV) necgroup® <?xml version="1.0" encoding="UTF-8"?> <rde:deposit xmlns :xsi="http: //www.w3.org/2001/XMLSchema-instance” xmlns:rde="urn:ietf:params:xml:ns:rde-1.0" xmln: :csvIDN="urn: ietf:params:xml:ns:csvIDN-1.0" type="FULL" id="20101017001" prevId="2010101000
Slide 15: Deposit Formats (CSV)
Deposit Formats (CSV) nccgroup <csvContact: contents> krdeCsv:csv name="contact">...</rdeCsv:csv>| v v <rdeCsv:csv name="contactStatuses"> KrdeCsv:csv name="contactStatuses">.. .</rdeCsv: csv>| <rdeCsv:sep>,</rdeCsv:sep> KrdeCsv:csv name="contactPostal">... </rdeCsv:csv>| erdeCsv:fields> KrdeCsv:csv
Slide 16: Validating the deposit against the schema
Validating the deposit against the schema 16
Slide 17: Validating the deposit against the schema
Validating the deposit against the schema 17
Slide 18: Extended Verification
Extended Verification • Count the objects and validate that number of objects is equal to the number objects reported in the <header> element of the escrow deposit • All contacts linked to domain names are present. • All registrars linked to other objects are present. • An FQDN exists only as a doma
Slide 19: Extended Verification
Extended Verification • Large files (Millions of records) • Different formats CSV or XML • Full, incremental and differential files 19
Slide 20: How to progress?
How to progress? Extended verification • Rules are in draft and allow for future updates Heuristic analysis using notifications • Use counts and alert if large change IETF Forum discussions • Place for the community to discuss validation steps http://www.ietf.org/mail-archive/web/ire 20
Slide 21: Keeping you informed
nccgroup* Keeping you informed Ec 21
Slide 22: NCC Process
NCC Process • Puts you the customer first • Aggregates reports and billing to simplify • Notifications by not only email but also by phone • A quick clean portal to help with the resolution of failures • NCC Welcomes feedback on how to make the process work for you 22
Slide 23: Ease of management
4 Ease of management NCCQfOUP freedom from doubt Logged in as [email protected] Logout 4 NCCOSOUN Escrow Portal Oe [ Home || Contacts |] FAQ |] Contact Us Welcome to the NCC Group Escrow Portal Failed deposits outstanding Last 24hrs | LastWeek Last Month Name » | Type ~»_ Last Successful Deposi
Slide 24: Ease of management
4 Ease of management NCCQfOUP freedom from doubt Logged in as [email protected] Logout ACCOOUP® Escrow Portal one [ Home ][ Contacts |[ FAQ ][ Contact Us Agreement - Agreement 1 Desposit ID \ DepositRecieved ~ Type ~» Watermark | Status 1 04/04/2013 17:03:00 Full 04/04/2013 17:03:00 i) 2 04/04/
Slide 25: Ease of management
4 Ease of management NCCQfOUP freedom from doubt Logged in as [email protected] Logout ACCOOUP* Escrow Portal freedom fron douot [ Home |] Contacts |[ FAQ || Contact us Deposit - 1 Agreement Agreement 1 Recieved 04/04/2013 17:28:58 Type Full Watermark 04/04/2013 17:28:58 Status tx} **** Examini
Slide 26: Summary
Summary • Why Registry Data Escrow is needed • Latest ICANN requirements • Data Security • Data Integrity • Keeping you informed 26
Slide 27: Contact Us
Contact Us Booth: 16 Tel: +1 408 406 5969 / +44 7759 740 780 e-mail: [email protected] Visit: www.nccgroup.com 27
Slide 28: Questions
nccgroup~ reedom from doubt Questions 28
Slide 29: UK Offices North American Offices Australian Offices
UK Offices North American Offices Australian Offices Manchester - Head Office San Francisco Sydney Cheltenham Atlanta Edinburgh New York Leatherhead Seattle London Chicago Thame Austin European Offices Amsterdam - Netherlands Munich – Germany Zurich - Switzerland 29