Does the iok file get stored on the local pc using Java webstart

Mees · August 1, 2011 5:47PM

We use java webstart for our clients to launch iok files.
A major reason to use this is the fact that the file is online accessible but disappears when the screen is closed.
This disappearing of the file is important for us as it serves as a form of data security, as files contain very sensitive data.

Now it appears that users still can open the downloaded file after closing the Viewer. The file is opened from the History list in the Viewer. I have tested this and what I see is that the file cannot be opened when the local machine is offline, but can be opened from the history list when there is an internet connection. This does raise some questions regarding security:

- Is the file stored on the local machine?
- Can the file be distributed to other machines?

Thanks

August 1, 2011 5:50PM

Very interesting post. Keen to see the answer.

steve · August 2, 2011 8:24AM

The recent file in the file menu is in fact a link/URL. When you open it, you are opening it directly from your servers, in the same way as when you originally clicked the Launch button.

Anyone who knows the URL can download the file. They will be able to open it in Omniscope Viewer, and edit it in Omniscope Desktop.

To prevent this, you need to use the following options in the Save dialog:
- Owner-locked
- Domain-locked to "yourdomain.com"

Owner-locked will prevent anyone from saving a copy or exporting data, other than the licence which created it.

Domain-locked will prevent anyone from opening the IOK file except directly from your servers.

steve · August 2, 2011 8:25AM

The equivalent enterprise action is "Secure file" with "Lock file" and "Restrict to domains".

Welcome!

Categories

Ideas Parade