MindLink Chat Engine (MCE) is an ultra-secure and mission-focused collaboration platform designed for classified communications at above TOP SECRET.
Find out how MCE protects mission data, enables mission-critical use cases, and delivers frictionless and safe sharing of highly sensitive information in real time.
Read more about MCE's mission features, security ecosystem, deployment and design.
Download Overview
The MCE security engine is a sophisticated and multi-layered access control system based on military-grade practices of secret attributes, roles, and security clearances.
It allows chat room access rights to be configured at multiple levels of privilege and granularity through expressive and role-based permissioning rules, using secret attributes and security clearances sourced from trusted third-party directories.
This encourages information flow across the mission theatre though autonomous and devolved management of chat rooms, whilst ensuring that the governance and confidentiality of such highly-sensitive data is maintained.
The MCE security architecture is rooted in the novel "Communities of Interest" paradigm advocated by the Intelligence Community.
It segregates all aspects of the system - such as chat rooms, users, and content - into secure compartments to enforce strong access-control boundaries, define explicit data handling procedures, and mitigate spillage risks.
This protects highly-sensitive information using best-practice techniques from the IC by ensuring data is organized and shared only with those with a "need to know".
MCE data classification is the unique adaptation of military-grade labelling and access control techniques to chat rooms and messages using sophisticated national classification systems such as CAPCO as GSCP.
It treats secure chat rooms as dynamically classified documents, performing message and room labelling, classification banner-rollup, and security clearance authorization.
This secures classified data using government-mandated information management practices as first-class chat system constructs, whilst allowing the data to be shared frictionlessly in real time.
MCE's end-to-end encryption is an innovative approach to zero-trust architecture using specialized information security paradigms adopted by the intelligence community.
It leverages the "Communities of Interest" pattern to protect and exchange encryption keys whilst preserving both organizational governance and the scalibility required for effective mass-participation, real time collaboration.
This mitigates prevalent insider threat against the vast attack surface of a typical chat system without compromising the capability of the system to support the modern mission.
MCE multitenancy is the ability to define deep ethical walling mechanisms, trust models, and data management controls to securely partition users and chat rooms on a single MCE instance.
It enables MindLink to be hosted as a centralized hub service for users from allied organizations, agencies, or countries whilst maintaining granular levels of trust, segregation, and secrecy as necessary.
This facilitates the rapid onboarding of multiple coalition partners across the mission arena whilst proactively controlling the risks associated with multi-party intelligence dissemination.
MCE is a self-contained system designed to be run on any Windows compute hardware. It supports a flexible deployment model for on-premises, sovereign cloud, or public cloud, including isolated or forward-deployed networks. This delivers real time collaboration capabilities that meet the most demanding of technology, security, and mission needs.
MCE is built using a cutting edge event-driven, distributed, and self-healing architecture. It treats all interactions on the system as immutable data streams, balancing and processing the work across a highly available server cluster. This achieves reliable, scalable support for large-scale mission operations whilst being inherently compliant and auditable against insider threat.
MCE is designed to integrate with both existing enterprise infrastructure and third-party collaboration systems. It synchronizes users and secret attributes from enterprise directories and trusted attribute servers and amalgamates third-party complementary modalities (e.g. instant messaging and voice) towards a unified end-user experience. This provides a low-barrier onboarding and adoption path, implicit compatibility with overarching compliance, security and governance ecosystems, and a seamless end-user collaboration experience. This provides powerful and flexible platform for C4ISR operations across the mission.
Groups or chatrooms within MCE allow for the configuration of content retention policy. Owners of a group can determine how long content should be retained within the group chat history and when it is removed. Administrators are able to set a global content retention policy that applies to all groups. It allows administrators and group owners to decide when content should be automatically deleted by the system. This removes the need to run manual processes against the system to comply with organisational standards.
MCE supports the use of alternative attribute servers without the requirement to leverage Active Directory Groups as an interim step. It reduces administrative workload and removes the dependency on Active Directory. This means configuration and administration is less cumbersome.
The Forward Deployed/Low Bandwidth solution is provided via a thin client to reduce network traffic, a single port to minimise the potential for unauthorised access, only sharing data necessary for a given operation and intelligent caching in the frontend, with resilience to unreliable connections achieved with intelligent retries built-in for message delivery.
MindLink are specialists in realtime collaboration systems for highly-secure, mission-critical operations.
Contact us and find out what MindLink can do for your Mission...