Identification

Transferring data from one point to another and carrying them around have become common practice, if not a habit. The end result is a mobile world that now seems to be a breeding ground for serious data theft, like Identity theft, confidential data breach, reports of stolen laptops, lost USB tokens, financial data breach, and unlawful use of personal credentials. In most of these cases, the loss may be irreparable, and for companies and individuals these may mean losing the public’s trust and loss of competitive information.

As part of Data loss Protection, there is a dire need for a Secure Drive that should provide User authentication, access control, transport security and secure Data storage.

This document will herein refer to this system as SecurDriveand will form the basis for documenting the Hardware / Software system requirements.

System Overview

SecurDrive is a safe security solution implemented as a combination of hardware and software components

Hardware

1. Free EEPROM of 65Kb available for key storage.
2. MLC based flash storage space of 4GB
3. TYPE A USB plug Form factor
4. LED status

Software

1. Generic USB-HID host interface
2. Smartcard Cryptographic Engine supporting RSA up to 2048 bits, DES, AES, HMAC, SHA1 and SHA2 algorithms and file system wi.th partition
3. API library supporting  secure/non secure file system and device operations

Features supported

1. Flash memory secure storage implemented as hardware based AES 256 bits encryption.
2. The flash memory appears in the OS as a virtual drive called Private. All data stored on the device is encrypted.
3. The data on this drive can be locked, so that it can be accessed only by presenting the correct passphrase.
4. A “Resize” function that enables you to redistribute the memory between the secure storage area called Private and the public storage area, called Public.
5. Admin & User Logins
6. Device stores the encryption key (that you use to encrypt data files) safely.
7. Change user/Admin PINs
8. Critical Security Parameters
9. AES Data Storage Key: 256 bit AES key used to protect data in flash
10. Card Admin Key: 192-bit Triple-DES key used to authenticate card administrator
11. Storage Admin Key: 192-bit Triple-DES key used to authenticate storage administrator
12. User PIN: 4-256 char length, for Authenticating the User
13. Seed and Seed Key: Initializes the RNG

SecurDrive Device will be a MS Windows ™ & RHEL 5.1 based solution. As an optional customization we can also provide a comprehensive set of APIs compatible for application development.