Mpower Communications PowerCall™

Your company information is a valued asset. Today, more than ever, protecting this asset is critical to maintaining your competitive advantage. Mpower understands those business requirements and has made securing your web meetings a priority when using our PowerCall Services. We have architected a multi-layer secured environment that is the best in the industry and we deliver this value to you at no additional cost to your company, unlike many other vendors.

Secure Socket Layer (SSL) 128 bit Encryption
Mpower utilizes SSL (secure socket layers) for securing proprietary customer information. SSL 128 bit
encryption, is the most widely used internet standard for securing sensitive information. It supports firewalls and proxy servers and it prevents hackers from accessing data in transit. What does this mean
for you? Secure, Internet Web Conferences for your business.


The Architecture Layer
The PowerCall Client Plug-in Software establishes a reliable and secure connection and encodes the data with a proprietary hashing scheme, that rides on top of SSL, so you do not transmit clear text even when encoded with SSL encryption.

PowerCall is also very firewall friendly, as it connects via Port 443, the port designated for SSL, in keeping with corporate firewall configuration parameters. By establishing connections in this manner, firewalls do not have to be reconfigured to enable PowerCall meetings, thus, complying with corporate security policies that guard against opening firewall ports.

PowerCall is built on an architecture that is “Switched Not Stored”

Attendees using PowerCall view content in virtual memory and not in browser cache. The advantage of this method is that there are no “content-finger prints” when the meeting ends as all information is flushed, leaving no storage of any meeting data anywhere! Some services available from other vendors leave information on the participants’ machines in “browsercache,” making it vulnerable to hacker access once logged on, presenting a potential security risk. PowerCall is your partner to protect your meeting against security risks.

There is no need to upload “cleartext” content over the internet and allow it to leave “your” secured
firewall environment ...dynamic meeting information displayed during a session originated only from the presenter’s machine. The attendees see only a representation of this data and at the conclusion of a meeting, all meeting content dissipates.

Web meeting security for your business

Mpower implements security at the application layer via a client plug-in. The client side downloads a software component that makes data collaboration possible via PowerCall, it acts as the meeting conduit. Client Plug-in features include:

• Runs only within a web browser
  (not a standalone application)
  
• Is certified with a signed
  certificate of authenticy
  
• Is the only means possible
  to participate in a PowerCall
  session
  
• Performs a proprietary encoding
  process that encodes all shared
  data and does not transmit
  clear text
  
• Participates in end-to-end
  SSL encryption

Session Security

• PowerCall ‘scopes’ application
  sharing content only to a specified
  application and shares only
  the ‘window’ owned by that
  application
  
• A PowerCall session is never
  transmitted in clear text. All data
  is encoded in a proprietary hashing
  scheme (form *.ata)
  
• PowerCall uniquely identifies
  participants with unique session
  IDs that are used to thwart hackers
  from reassembling meeting
  content

User interface security
There are three roles within a PowerCall session — Host, Presenter, and Attendee. The Host has the first level of security control and is made the initial presenter. The Host controls the distribution list and reference number for login to the conference. The Host also starts the PowerCall meeting and can grant or revoke privileges at any time during the meeting (save, print, send, annotation, send messages, switch pages, etc.). Additional capabilities controlled by the Host include the ability to:

• Terminate application or desktop sharing
  
• Expel attendees and/or restrict access to the meeting
  
• Terminate the meeting

Our network has multiple layers of security established including secure collocation facilities, firewall
protection, username, random system generated password, and if requested, VPN access.