Skip to content
Snippets Groups Projects
Commit e1230455 authored by Jenny Thuy Dung Tran's avatar Jenny Thuy Dung Tran
Browse files

apply suggestions

parent 96a5d704
No related branches found
No related tags found
2 merge requests!572[release] Regular merge of develop,!556transfer of sensitive encrypted data via owncloud and privatebin
Pipeline #86024 passed with warnings
external/integrity/transfer/owncloud-privatebin/img/keka-encryption.png

248 KiB

...@@ -13,22 +13,26 @@ redirect_from: ...@@ -13,22 +13,26 @@ redirect_from:
This How-to Card provides a step-by-step guide on how to transfer Human Data via LCSB Owncloud securely. Please note that this How-to Card is intended for the use case where data is < 4 GB and categorized as [sensitive]({{ '/?qms:LCSB-POL-BIC-01' | relative_url }}), in which encryption must be in place as well as secure exchange of encryption password with PrivateBin. If you wish to share Human Data **recurrently** with e.g. external collaborators, we recommend using Owncloud with Cryptomator for encryption of data on the cloud. For further information, please visit the dedicated card on [Cryptomator]({{ '/?exchange-channels:cryptomator' | relative_url}}). This How-to Card provides a step-by-step guide on how to transfer Human Data via LCSB Owncloud securely. Please note that this How-to Card is intended for the use case where data is < 4 GB and categorized as [sensitive]({{ '/?qms:LCSB-POL-BIC-01' | relative_url }}), in which encryption must be in place as well as secure exchange of encryption password with PrivateBin. If you wish to share Human Data **recurrently** with e.g. external collaborators, we recommend using Owncloud with Cryptomator for encryption of data on the cloud. For further information, please visit the dedicated card on [Cryptomator]({{ '/?exchange-channels:cryptomator' | relative_url}}).
1. Use a default zip software installed on your local laptop to zip your file(s) with a strong password. **Prerequisite:** LUMS account is needed and can be requested via the [Service Portal](https://service.uni.lu/sp?id=sc_cat_item&table=sc_cat_item&sys_id=c536257ddb336010ca53454039961936).
* For Windows computer you can use [7-zip](https://www.7-zip.org/download.html). Please make sure *NOT* to change the default encryption from AES256 to ZipCrypto like displayed below.
* For Mac you can use [Keka](https://www.keka.io/en/) (do not go to App Store, just use Download link below App Store button). Please make sure make sure to choose ZIP from the format type drop down and check the **Use AES-256 encryption** checkbox (this box can be checked after password is provided). 1. Use a zip software that supports AES256 encryption to zip your file(s) with a strong password.
* Use a password generator (e.g. [dice ware](https://diceware.dmuth.org/), [BitWarden](https://bitwarden.com/), [KeePass](https://keepass.info/)) to make the password strong. * For Windows computer you can use [7-zip](https://www.7-zip.org/download.html), which uses AES256 encryption per default.
2. Go to [LCSB PrivateBin](https://privatebin.lcsb.uni.lu/) and type/add the password in the Editor tab. If you do not have a LUMS account, please use [HPC PrivateBin](https://hpc.uni.lu/privatebin/), which does not require any account. * For Mac you can use [Keka](https://www.keka.io/en/). To enabled AES256 encryption, please go to `settings > Compression` and tick the **Use AES-256 encryption** checkbox like displayed below. <br>
3. Enable the feature "Burn after reading" by ticking the checkbox. This means that the link to the password can only be used **once** so it expires upon first access. <img src='img/keka-encryption.png' height='350px'>
2. Use a password generator to generate a strong encryption password.
* An online password generator is [dice ware](https://diceware.dmuth.org/), or you can use the feature in a password manager like [BitWarden](https://bitwarden.com/) or [KeePass](https://keepass.info/) to generate a strong password.
3. Go to [LCSB PrivateBin](https://privatebin.lcsb.uni.lu/) and type/add the password in the Editor tab.
4. Enable the feature "Burn after reading" by ticking the checkbox. This means that the link to the password can only be used **once** so it expires upon first access.
<img src="img/encryptionpassword.png"> <img src="img/encryptionpassword.png">
* You will be asked to enter your LUMS credentials once you click on "Send". * You will be promted to enter your LUMS credentials once you click on "Send".
* You should be redirected to a page containing the password link. * You should be redirected to a page containing the password link.
<img src="img/passwordLink.png"> <img src="img/passwordLink.png">
4. Share the password link with your collaborator via your preferred communication channel. 5. Share the password link with your collaborator via your preferred communication channel.
5. The collaborator (recipient) must confirm that the password was successfully received before you can go to next steps. If collaborator reports an error, it means the password was compromised and data transfer is not secured anymore. In this case zip-file should be deleted and the process should started again. 6. The collaborator (recipient) **must** confirm that the password was successfully received before you can proceed with the following steps. If collaborator reports an error, it means the password was compromised and data transfer is not secured anymore. In this case zip-file should be deleted and the process should started again. This is a crucial step in the data transfer!
6. Login to [OwnCloud](https://owncloud.lcsb.uni.lu/) with LUMS account. LUMS account can be requested via the [Service Portal](https://service.uni.lu/sp?id=sc_cat_item&table=sc_cat_item&sys_id=c536257ddb336010ca53454039961936). 7. Login to [OwnCloud](https://owncloud.lcsb.uni.lu/) with LUMS account.
* Upload the zipped file(s) to OwnCloud and make a share link with the collaborator. * Upload the zipped archive to OwnCloud and make a share link with the collaborator.
* See a full guide on how to use [OwnCloud]({{ '/?exchange-channels:owncloud' | relative_url }}). * See a full guide on how to use [OwnCloud]({{ '/?exchange-channels:owncloud' | relative_url }}).
<img src="img/owncloudShare.png"> <img src="img/owncloudShare.png">
7. Share the access link with your collaborator by typing in their email as shown on the image above. 8. Share the access link with your collaborator by typing in their email as shown on the image above.
* The collaborator will automatically receive a link to the encrypted data on OwnCloud by email. * The collaborator will automatically receive a link to the encrypted data on OwnCloud by email.
8. The collaborator can now decrypt the data with the password received via Privatebin. 9. The collaborator can now decrypt the data with the password received via Privatebin.
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment