CopyCrypt

The CopyCrypt architecture is centered around three primary components: the Encryption Engine, the Key Manager, and the Audit Logger. The Encryption Engine is responsible for encrypting and decrypting data using algorithms such as AES. This component interfaces directly with the z/OS system to intercept data streams during tape I/O operations.

The Key Manager securely stores, generates, and rotates encryption keys. It supports integration with external key management systems for enhanced security. The Audit Logger records all security-related events, including key management operations, access attempts, and system errors.

The communication between these components occurs within the z/OS environment, utilizing standard system interfaces and APIs. The CLI provides a programmatic interface for managing encryption keys, configuring security policies, and monitoring system activity. The product leverages existing z/OS security features, such as RACF, for authentication and access control.

The product's design emphasizes security, ease of integration, and operational efficiency. The product's architecture is designed to minimize performance impact while providing robust data protection.