SecureLine: End-to-End Email Encryption

Escrow enables LuxSci SecureLine users to send secure email messages to anyone with an email address.

1. The recipient gets a notice of the waiting message in his/her INBOX
2. S/he clicks on a link in the notice to get to the Escrow Portal
3. S/he either answers a question or enters a password for identity verification
4. The recipient then can access the message, download it, reply, save it, and delete it.

The message remains available to the recipient until s/he deletes it, until it expires (you as the sender determine when that happens), or until the sender retracts it.

Verifying Recipients

The Escrow service verifies the identity of the recipient before it provides access to the waiting message. This is to help ensure that only the intended person can access the message content.

There are two methods of verification available: "SecureSend Login" and "Question and Answer".

Verification by Question and Answer

When a recipients tries to access an Escrow message:

• S/he is prompted to answer a security question provided by the sender
• If s/he can answer the question correctly, s/he is taken to view the message

Use of "Question and Answer" requires the sender to prepare the questions ahead of time and ensure that the recipients will be able to answer them. Recipients must be able to answer the questions and they may be different for different messages.

Verification by SecureSend Login

The first time a recipient tries to access an Escrow message:

• S/he is taken through the steps to register for a SecureSend Account
• This includes sending a confirmation email to his/her email address
• S/he clicks on a link in the confirmation email to verify that s/he has access to that email account
• S/he is taken to view the waiting message

Subsequently, when the recipient tries to access an Escrow message, s/he is simply prompted for his/her current SecureSend password.

Using "SecureSend Login" requires no setup on the part of the Sender, no special communication between the sender and recipient, and a couple of extra steps to access the first message. However, access to subsequent messages and messages from multiple senders is simplified over "Question and Answer".

Verification Methods Compared

	SecureSend Login	Question/Answer
Meets HIPAA Requirements
LuxSci Default
Least Setup
Easiest for the Recipient
Most Secure

SecureLine Escrow Features for Senders

LuxSci SecureLine Users sending messages via Escrow:

Feature
Meets HIPAA Requirements
Optionally protect email message subjects
Most secure email portal pick up services use the actual email subject in the email sent informing people of the waiting message. This is very usable, but risky if your users may enter sensitive information in the subject. With SecureLine Escrow, you can optionally specify a fixed subject, such as "You have been sent a secure email message," for these messages, mitigating this risk.
Branded SecureSend and Escrow User Interfaces (*)
Configure use of Questions and Answers vs SecureSend Login on an account-wide, domain-wide, and/or per-user basis
Override use of SecureSend Login for specific recipients using your Address Books.
Send Escrow from LuxSci WebMail
Send Escrow from email programs and devices via SMTP
Send Escrow from mobile devices using Mobile Sync
Send complex messages with attachments securely
Integration into Microsoft Outlook v2007+ via the SecureLine Plugin
Escrow Messages are digitally signed
Tracking and Auditing
SecureLine Escrow allows you to track the receipt and viewing of messages by your recipients.
Requested read receipts are always sent back.
Configure default message expiration: 1 day to 10 years
With SecureLine Escrow, you are able to retract a message (expire a message), effectively stopping a recipient from gaining any further access to the message content.
Extend the expiration dates on messages so that recipients have more time to view them.
Content-Driven Automatic Encryption
SecureLine allows you to set up rules to automatically encrypt only certain messages based on keywords, phrases, and regular expressions that appear within the content.
Bulk upload or use an API for uploading Escrow Questions and Answers for recipients into user Address Books.
Specify the Question and Answer to use for recipients in special email headers
Configure account-wide, domain-wide, or per-user default Escrow Questions and Answers.

(*) Branding Interfaces requires the purchase of Private Labeling.

SecureLine Escrow Features for Recipients

For recipients picking up secure messages via Escrow:

Feature
Meets HIPAA Requirements
Message Center: View INBOX of all received secure messages (*)
Access via SSL-secured web site
Protection against message password guessing
Reply to messages (replies can have attachments and be up to 70MB in size)
Download messages
Delete messages
View message access history
View digital signature on messages and see when they expire

(*) Message Center requires the purchase of Premium Private Labeling.