View Table of Contents

The Data-Hippo Secure Data Transfer Application

Data-Hippo allows the user to upload a file and then allow multiple recipients to download this file in a secure manner.

Each recipient receives an email containing a link to an unique download URL. When the recipient goes to this URL, the recipient will be prompted for a unique password. This password is sent to the recipient in a separate email. When the recipient enters the correct password she is prompted to save the file to her computer. After the recipient has downloaded the file, access to the file is removed so that it cannot be downloaded again. After all recipients have downloaded the file, the file is deleted from the server. An expiration date can be set for the uploaded file. After the expiration date, the file is removed from the server even if there are still recipients who have not download the file.

Data Hippo is a file transfer service which provides end to end encryption to multiple recipients. The service provides file transfer expiration times and will only allow each recipient one download. When all recipients have downloaded the file or the file has expired the file is deleted from the server. The file is transfered from the sender to the server and from the server to the recipient with the SSL protocol using AES-256 256 bit encryption. Files stored on server file system are encrypted using the Blowfish cipher with a randomly generated key and initialization vector.

• Data-Hippo URL https://data.vanderbilt.edu/data-hippo

Features of Data-Hippo

• Easy means of distributing files to multiple recipients.
• The file is encrypted from the time that the user uploads the file to the server until the recipient downloads the file from the server.
• Ensures that files containing confidential data do not sit on a server indefinitely.
• Minimizes the possibility that a third party could download a file.
• Is limited to a single file per upload.
• Users can receive notifications when a recipient downloads a file.
• If a file expires the user receives an email detailing which recipients have not downloaded the file.

How to Use Data-Hippo

To securely send digital attachments, follow these nine simple steps.

1. Go here
2. Select the file to send in the File to upload field.
3. Enter your email address in the Email Address field.
4. Enter your name in the Name field.
5. Leave the Expiration date blank (it defaults to 2 weeks).
6. Add a note if you wish in the Note field (not essential).
7. Enter the recipients’ email addresses in the Email Address field at the bottom.
8. Check the Receive download confirmation emails box.
9. Click submit at the very bottom of the page.

Other Resources

• Vandy's Vshare for secure transfer of files up to 1GB.