Addressing decentralized data security concerns with Couchbase Mobile

In today’s mobile-driven world, there’s an expectation that apps should always work – with and without an internet connection. Delivering on this expectation requires access and storage of decentralized data directly on device. This is very different from just a few years ago when most data was exclusively stored centralized in the cloud.

Managing decentralized data introduces a number of security risks that are critical to manage. While addressing these risks may be difficult, not addressing them puts mobile users and their data at risk.

Specifically, there are five key security concerns when working with data storage and transport:

• Autenticación de usuarios
• Acceso de lectura/escritura de datos
• Transporte de datos en la red
• Almacenamiento de datos en el dispositivo
• Almacenamiento de datos en la nube

​Couchbase Mobile resolves each of these concerns.

Para Autenticación de usuarios we support pluggable authentication. Out of the box we have support for popular public login providers like Facebook, standard OpenID Connect (OIDC) providers, and you can write your own custom provider. You can also restrict access to the system to successfully authenticated users or optionally allow anonymous users.

Para Acceso de lectura/escritura de datos there are fine-grained policy tools that allow controlling data access for individual users and roles. Read-side permissions are at the document level and write-side permissions are down to the field level.

Transporte de datos en la red, for data in motion, is over TLS.

Almacenamiento de datos en el dispositivo, for data at rest on device, uses the device’s built in File System Encryption and 256-bit AES full database encryption.

Almacenamiento de datos en la nube, para los datos en reposo en la nube, puede configurar Couchbase Server para que utilice el cifrado del sistema de archivos.

Couchbase Mobile allows you to easily manage your data throughout the full network and application stack. This includes storage, access, synchronization, and security in the cloud, on phones, on and tablets, on the web, on your TV, in your car, and everywhere else.

You can learn more and get started with Couchbase Mobile at www.couchbase.com/developers/mobile/.