Data Encryption utilizing Access Policies (DEAP) Navy STTR FY2012.A Sol No.: Navy STTR FY2012.A Topic No.: N12A-T025 Topic Title: Data Encryption utilizing Access Policies (DEAP) Proposal No.: N12A-025-0129 Firm: Architecture Technology Corporation 9971 Valley View Road Eden Prairie, Minnesota 55344 Contact: Ryan Marotz Phone: (952) 829-5864 Web Site: www.atcorp.com Abstract: The Navy and Marine Corps currently protect their Data-at-Rest (DAR) storage using Public Key Infrastructure (PKI) encryption technology. PKI protects data based on a single security key pair allowing only a single individual to decrypt the data; thus making it unsuitable for an environment where multiple individuals, satisfying an access policy, would be able to decrypt the data. Therefore, Architecture Technology Corporation (ATC) and Arizona State University (ASU) propose the Data Encryption utilizing Access Policies (DEAP) product which leverages Attribute-Based Encryption (ABE) to encrypt data based on access policies rather than individual key pairs. DEAP will be designed to work in coordination with existing DAR products to automatically protect data stored on any device (e.g. local hard drives, portable USB media, and network storage). Benefits: DEAP will benefit the Navy and Marine Corps by unobtrusively protecting data for greater technology adoption. DEAP allows autonomous data protection to limit accidental data leakage. DEAP enables encrypted data to be access by multiple personnel satisfying a defined access policy. Return