一家英国公司为维护USB闪存驱动设备的数据提供了令人放心的答案,这些设备都太容易丢失或被盗。

Conseal Security Ltd. on Jan. 17 released a new version of a locally installed software, called Conseal USB2, that password-protects such devices and then enrolls them in an online "dual lock" password-checking system. Whenever the device is jacked into a computer, the drive checks in with a server that turns back to the software's local management consol to verify the credentials.

由于该设备是从本地管理员的控制台管理的,因此可以将访问规则设置为各个级别。在某些时间,限制只能在批准的域内在特定计算机上授权用户解锁驱动器。如果有人尝试未经授权使用,则可以将尝试审核回到所使用的机器。

"A device needs access to the internet initially to unlock, but not during use," says Tom Colvin, Conseal's chief technology officer, in an e-mail exchange. "Essentially, that is the key principle behind our Dual Locks system, which is designed to get around the single point of weakness of traditional encryption: the password."

“通常,失去了设备是很危险的,因为秀n as an attacker obtains it, it is just a matter of time before they obtain the password through guesswork, social engineering [manipulating people to divulge confidential information], etc. With Dual Locks, the device’s contents can only be decrypted with the server’s permission. Even if you have both the password and the physical device, the protected contents remain secure," says Colvin.

According to Conseal,researchfrom the U.S. National Institute of Standards and Technology has shown that passwords can typically be broken within 16 minutes via techniques like dictionary attacks or social engineering.

The dual-lock approach ensures the encryption key is not based on the password, nor is it stored on the disk or on the server. As a result, the strength of the protection is not limited to the complexity of the password alone. Devices can be unlocked only with the permission of the server, which is what allows administrators to set access rules or view extensive history audits for devices.

此外,可以向服务器提供说明,以暂时锁定已放错地方的驱动器,直到恢复为止。如果管理员认为驱动器已被盗,则他或她可以对服务器进行编程以销毁驱动器插入的那一刻。

当前版本的一项新功能使管理员可以允许临时离线访问权限,以覆盖希望在未连接设备上使用设备的用户。

与Windows兼容的产品以几个范围为一年的服务合同。Express Edition可为家庭用户和学生提供19.95英镑(约合31.00美元);商业用户的成本起价为59.95英镑(约合94.00美元),最多可容纳五个用户,其他计划可用于250个或更多用户。