Security
Policy
Introduction
ClickMeeting is a worldwide, solid and easy to use SaaS platform. It’s core was constructed with the hi-end technology. Data security the highest priority in the design, deployment and maintenance of its network, platform and applications, and its offerings meet the most stringent security requirements of businesses and government agencies so they can use ClickMeeting services effectively and routinely, secure in the knowledge that their sessions are safe and private.
Role based security features
To enable account owners to enforce company access policies related to service and feature use, every ClickMeeting user is assigned one of several application-defined roles.
Organizer privileges
Organizers have the most control in a meeting and the ability to grant and revoke various privileges for the other participants. ClickMeeting Organizers can specify the respective roles and privileges of other participants.
Specific Organizer privileges include:
The ability to invite Attendees, before or during the meeting, so that only authorized participants can join a given meeting
The ability to see the complete list of Attendees and their current roles and privileges, so the Organizer remains aware of those present at all times
The ability to start and end the meeting, which prevents others from disrupting the meeting accidentally or otherwise
The ability to transfer the Organizer role to another Attendee so the meeting can continue if the Organizer must leave early. (Once another Attendee becomes an Organizer this privilege cannot be revoked.)
Presenter privileges
A Presenter is the user actively sharing content with other Attendees. Any Attendee within a meeting may be granted the active Presenter role. Presenters have the following controls available to them:
The ability to share content, which can be helpful to avoid displaying confidential data that might otherwise appear on the Presenter’s desktop (e.g., while searching files or folders) The ability to grant/revoke remote keyboard and mouse control to another Attendee, which facilitates efficient communication through desktop interaction
The ability to make another Attendee the Presenter, providing for a flexible, dynamic flow during meetings
Attendee privileges
Users with the basic Attendee role have the following privileges:
The ability to join any meeting to which they have been invited at or after the meeting’s start time The ability to view the presentation content unless the Presenter has paused or disabled
If granted, the ability to remotely control the Presenter’s keyboard and mouse. (Remote control privileges are automatically revoked whenever Presenter moves his mouse). The ability to use Chat to send text messages to all other Attendees. (Chat may be disabled for Attendees by an Organizer or Presenter.)
Basing access rights and privileges on assigned roles allows flexible meetings that facilitate highly dynamic interaction between Attendees, without sacrificing either control or visibility.
Organizers can easily add Attendees or change the Presenter as needed throughout the meeting. Presenters remain in complete control of their own desktops, and Organizers have everything required to manage the meeting effectively.
Secured Data Centers
Servers used for ClickMeeting service operate within cloud-based infrastructure. Our network includes servers in the following locations:
US: Pennsylvania, California, New Jersey, Washington DC Europe: France, Poland
Asia: Singapore
South America: Sao Paulo
Personnel within data centers are available 24x7 to provide required logistical security and operational support.
Security Personnel
We have a dedicated security department. This team recommends and implements security procedures for ClickMeeting service and business operations.
Our highly qualified security personnel receive ongoing training in all aspects of security in order to remain at the forefront of security innovation and to meet the criteria for security accreditations. Management of security-related features covers:
Account Passwords
Strong Account Password Criteria
Meeting Passwords – a Host can set a meeting password and then optionally choose to include or exclude the password in the meeting invitation email.
Meeting room and account security features
Role-based authorization depends upon the ability to correctly identify and authenticate each and every user. To ensure that each Organizer, Presenter and Attendee is in fact who he or she claims to be, ClickMeeting incorporates robust account and meeting authentication features.
Web site account login
To access a user account on the ClickMeeting Web site, users must supply a valid email address and corresponding user account password. To make them hard to guess, all passwords must contain at least eight characters and include letters, numbers or non-alphabetic characters.
Passwords stored in the service database are encrypted with salted SHA1 and checked using a cryptographically secured verifier that is highly resilient to offline dictionary attacks.
Authentication of meeting attendees
ClickMeeting provide different types of access to created meeting rooms.
Password protected - Host can set a password for his meeting, password is one for all attendees. Token protected - Tokes are 6 characters (digits and/or letters) passwords, generated by ClickMeeting. Tokens are unique for each participant.
Registration with manual conformation - option for registration where host can approve or decline registrations. Meeting link will be send only for approved participants so no one else will be able to join this meeting.
Encryption Technologies/TCP layer security
ClickMeeting provide these encryption mechanisms:
1. Data is transported from the client to the cloud-based server using 256 bit Secure Socket Layer version 3 (SSLv3)
2. Documents and presentations are encrypted end to end using 256-bit RSA prior to transport.
Security standards
ClickMeeting and ClickWebinar are compatible with world standards for cryptographic algorithms and security protocols in order to provide secure services:
The TLS/SSL Protocol, Version 1.0 IETF RFC 2246 RSA, PKCS #1
SHA-1, FIPS 180-1
HMAC-SHA-1, IETF RFC 2104
Advanced Encryption Standard (AES), FIPS 197 MD5, IETF RFC 1321
Pseudorandom Number Generation, ANSI X9.62 and FIPS 140-2 AES Cipher suites for TLS, IETF RFC 3268
