How to Add Data Privacy to Your Angular Application

HOW TO ADD DATA PRIVACY TO
YOUR ANGULAR APPLICATION

// @IronCoreLabs @cipher_sift
IronCoreLabs
@ironcorelabs
madison-kerndt
@cipher_sift
ironcorelabs.com madison@ironcorelabs.com

Show of hands…

DATA
PROLIFERATESMy Data 
(Personality & Likes)

DATA
PROLIFERATES
Vendors 
(e.g., Facebook)

DATA
PROLIFERATES
Partners 
(e.g., Personality Quiz)

DATA
PROLIFERATES
Partners of Partners 
(e.g., Cambridge Analytica)

OUT OF
CONTROL

DON’T GET
ZUCKED

WHAT IF
?

Data

DECIDE WHO
HAS ACCESS

MONITOR
VISIBILITY

REGARDLESS OF
WHERE DATA LIVES

REVOKE ACCESS
AT ANY TIME

HOW
?

End-to-End Encryption
Transform Encryption
Groups

Encryption in Transit
+
Encryption at Rest
!==
End to End Encryption

CLIENT SIDE ENCRYPTION
Client Client

HTTP INTERCEPTOR

IRON HTTP INTERCEPTOR

> NG GENERATE CLASS ORDER
CREATE SRC/APP/SERVICES/ORDER.TS

[STAND-IN]: [CODE]
: encryption
order.ts
import { IronEncrypt } from '../iron/iron-encrypt';
@IronEncrypt({ groupId: ‘away-team’ })
export class Order {
constructor() {
public title: string;
public message: string;
public id?: string;
}
}

> NG GENERATE SERVICE ORDER
CREATE SRC/APP/SERVICE/ORDER.SERVICE.SPEC.TS
CREATE SRC/APP/SERVICES/ORDER.SERVICE.TS

[STAND-IN]: [CODE]
: encryption
order.service.ts
…
export class OrderService {
private url = “api/order";
constructor(private http: HttpClient) {}
create(bloodTest: Order): Observable<Order> {
return this.http.post<Order>(this.url, order);
}
list(): Observable<Order[]> {
return this.http.get<Order[]>(this.url);
}
get(id: Number): Observable<Order> {
return this.http.get<Order>(`this.url/${id}`);
}
delete(id: Number): Observable<Order> {
return this.http.delete<Order>(`this.url/${id}`);
}
}

[STAND-IN]: [CODE]
: encryption
app.module.tsapp.module.ts
import { NgModule } from '@angular/core';
import { HttpClientModule, HTTP_INTERCEPTORS } from '@angular/common/http';
import { IronHttpInterceptor } from './services/iron/iron-http-interceptor';
@NgModule({
...
providers: [{
provide: HTTP_INTERCEPTORS,
useClass: IronHttpInterceptor,
multi: true
}],
...
})
export class AppModule { }

1
2
HTTP Interceptor
Encryption
Decryption
3

Your Data
Order {
title: “Stay safe.”,
message: “And set phasers to stun.”,
id: “6339192471668405”
}
END-TO-END
ENCRYPTION

EncryptedDocument {
id: 6339192471668405
document:“AVxdaY3t0n14XleGN3DjkCVJAyKo9UvTCU
+uMaGQUC89OluCkEMCe0Y8qOUZPyXpHnP9sK”
}
Your Data
END-TO-END
ENCRYPTION

@cipher_sift
Public Key Cryptography
Kirk
Kirk’s
Private Key
Kirk’s
Public Key
Spock
Spock’s
Private Key
Spock’s
Public Key

@cipher_sift
Encrypt and Decrypt
Spock’s
Public Key
Encrypted
Document
Document

@cipher_sift
Encrypt and Decrypt
Spock’s
Public Key
Document
Spock’s
Private Key
Encrypted
Document

@cipher_sift
Encrypting to a Group
User’s
Public Key
User’s
Public Key
Document
Document
encrypted to the
group of usersUser’s
Public Key
User’s
Public Key

INTRODUCING GROUPS

INTRODUCING GROUPS
Spock
McCoy
Redshirt
Chekov
Sulu
Uhura

Transform Service
Spock

Transform Service
Spock
Spock

Lab accessing data: {
id: 6339192471668405
document:“AVxdaY3t0n14XleGN3DjkCVJAyKo9UvTCU+uMaGQUC89OluC
kEMCe0Y8qOUZPyXpHnP9sK”
}
Doctor accessing data: {
id: 6339192471668405
}
id: 6339192471668405
}
id: 6339192471668405
}
id: 6339192471668405
}
id: 6339192471668405
}
Transform Service
Spock
MONITOR
VISIBILITY

Transform Service
Spock
REVOKE ACCESS
AT ANYTIME

Transform Service
Spock
✨

Transform Service
Spock
MATH
*PKC ECC

@cipher_sift
Transform
Service
Away Team Spock
Away Team
Private Key
Spock
Public Key
Away Team => Spock
Transform Key
Transform Key Generation
Group to User
// @IronCoreLabs

@cipher_sift
Away Team
Public Key
Away Team
Document Encrypted
to Away Team
Document
Encrypt to a Group
// @IronCoreLabs

@cipher_sift
Group to User Transformation
File Encrypted
to Away Team
Away Team => Redshirt
Transform Key
File Encrypted
to Spock
Spock’s
Private Key
Transform
Service
// @IronCoreLabs

@cipher_sift
Revoke Access
Transform
Key
// @IronCoreLabs

CHANGING THE MODEL

WANT A
?T

Thank you!
IronCoreLabs
@ironcorelabs
madison-kerndt
@cipher_sift

Questions?
IronCoreLabs
@ironcorelabs
madison-kerndt
@cipher_sift

How to Add Data Privacy to Your Angular Application

Recommandé

Contenu connexe

Similaire à How to Add Data Privacy to Your Angular Application

Similaire à How to Add Data Privacy to Your Angular Application (20)

Dernier

Dernier (20)

How to Add Data Privacy to Your Angular Application