Increasing the security and ease of deployment of remote working solutions

新冠肺炎导致了远程工作在计划外的迅速普及。组织一直在努力适应，因为目前没有简单的方法来远程配置所需的高安全性，而且在正确的位置缺乏合适的IT硬件。有许多解决方案可以促进远程工作。一些远程工作解决方案易于设置和使用，例如Go to My PC或类似解决方案，但这些系统不能提供访问敏感数据所需的安全级别。使用VPN和类似技术的系统更安全，但是设置起来很复杂，需要管理员访问最终用户设备。我们的建议创建了一种远程访问技术，可以提供最高级别的安全性，同时还允许简单设置和远程管理服务。例如，我们为中央政府部门提供安全的IT系统，允许安全的远程工作，但目前我们需要物理访问他们的设备才能进行初始登录。这会推迟部署并造成后勤问题。我们的计划是在我们获得专利的可信云可证明安全技术的基础上，开发一种软件定义、硬件飞地强制实施的网状VPN，该VPN部署迅速且管理简单。它将使用经验证的WireGuard协议构建在轻量级网状VPN的基础上轻松管理，将集中VPN管理的优势与分布式密钥存储相结合，以创建具有安全本地密钥生成和存储的零信任网络系统，从而允许快速部署自带设备和公司设备。VPN将部署为从常规应用程序商店下载的简单应用程序。这将实现安全VPN解决方案的远程管理，从而极大地加快安全远程访问解决方案的交付，并向需要安全远程工作的其他人开放该技术。例如，它将使全科医生能够使用他们的个人自带设备笔记本电脑，安全地连接到他们的工作计算机，并从远程位置安全地访问患者数据，而不需要复杂的中央安装。

Covid-19 has resulted in a rapid, unplanned adoption of remote working. Organisations have struggled to adapt as there currently is no easy way to remotely configure the high security needed and a lack of suitable IT hardware in the right place.Many solutions exist to facilitate remote working. Some remote working solutions are simple to set up and use, such as Go To My PC or similar, however these systems do not offer the level of security required to access sensitive data. More secure systems exist using VPNs and similar technologies, however these are complex to set up and require administrators to access the end user devices. Our proposal creates a remote access technology that offers the highest level of security, while also allowing the service to be simply set up and remotely administered.For example, we supply central government departments with secure IT systems which allow secure remote working but currently we need physical access to their devices for initial onboarding. This delays deployments and creates logistical issues.Our plan is to build upon our patented Trusted Cloud provably secure technology to develop a software defined, hardware enclave enforced mesh VPN that is quick to deploy and simple to manage. It will be easily administered built upon a lightweight mesh VPN using the proven WireGuard protocol combining the benefits of central VPN management with distributed key storage to create a zero trust networking system with secure local generation and storage for keys allowing rapid deployment of both BYOD and corporate devices. The VPN will be deployed as a simple app downloaded from regular App stores. This will enable remote administration of a secure VPN solution to dramatically speed up the delivery of a secure remote access solution and open the technology up to others who need secure remote working. For example, it would enable GPs to use their personal BYOD laptops, connect securely to their work computer and securely access patient data from a remote location without the need for complex central installations.