The recent loss of 25 million child benefit records by Her Majesty’s Revenue
& Customs highlights the need to be extremely cautious when transporting
data.
Safeboot, now a part of McAfee, has a way of tackling the problem, with a
family of secure USB storage devices that feature strong data encryption and
integrated access controls to protect the data they contain.
Advertisement
We tested three, starting with the Safeboot for USB Standard, which employs
simple passwords to manage access. Multiple users can be defined, each with
their own AES-encrypted partition, accessible only when the correct password is
supplied.
The range also includes the Safeboot for USB Phantom (from £100 ex Vat for a
1GB device), which features a built-in fingerprint scanner, providing two-
factor authentication. And lastly there’s the Safeboot for USB Midentity (from
£141 ex Vat for 1GB), which is slightly different in that it uses a smartcard
and Pin number to store encrypted user credentials and can also be used for
remote VPN authentication.
All three look much like ordinary USB flash memory sticks and can, indeed, be
plugged into any PC with a USB 1.1/2 interface to provide up to 4GB of removable
storage. Do that, however, and you’ll be able to see very little.
A public and/or read-only partition may be available, depending on how
they’ve been configured, but that’s all. Any other, protected data is hidden and
only accessible once the necessary credentials have been verified, which is done
by the device itself.
Some software is also required. There’s a management utility to configure
user accounts and their associated storage partitions, and a client application
to make the data accessible once the appropriate credentials have been
authenticated. The same software is used by both the Standard and Phantom
models, though we we found it a little on the simplistic side. However, it
worked well enough and, apart from a few teething problems (caused by a general
lack of documentation), we encountered no real problems.
Separate tools are required to manage and use the Midentity devices. These
were clearly from a different developer, had a completely different interface
and were much harder to get to grips with.
Of the three, the Safeboot for USB Standard proved the quickest to configure
and was the easiest to use, requiring no more than a password to open up each
protected storage area. To configure the Phantom, users needed to register their
fingerprints and we found the built-in scanner awkward to use.
To set up the Midentity device, we first had to fit the smartcard (the same
size as a mobile Sim card) inside. That done we then had to install the software
and set up our Pin code and digital certificate.
Once the devices had been configured they could all be used just like an
ordinary flash memory stick, at the same time offering high levels of security
and encryption that would be difficult to crack should they get lost or stolen.
You’d also need to know that they contained secure data in the first place, and
there are few clues on the outside and nothing to see if you put them in a PC
without the associated client installed.
In the end, whether you think these devices are worth the cost and effort
involved will depend on how highly you value your data.
Pros: AES encryption; authentication controls; integrated
fingerprint scanner on the Safeboot for USB Phantom; smartcard and Pin code on
the Safeboot for USB Midentity Cons: Lack of documentation; more advanced devices harder to
configure; a lot more expensive than standard USB memory sticks Overall: A good way to protect mobile data, with a choice of
authentication technologies to suit a variety of applications
Do you agree?
Have your say on this article