IronKey

The IronKey is a USB flash drive now offered in capacities of 1, 2, 4, or 8 GB that features at its core encryption and privacy functions including both an on-board hardware encryption chip and a self-contained (Firefox) Web browser.

The drives itself includes a built-in USB plug, enabling it to be inserted directly into the host computer's USB port. IronKey operates with machines running Windows XP/Vista (without requiring the loading of additional drivers) and the vendor notes in their literature that Mac and Linux versions are in development.

The primary feature of the IronKey is its AES hardware-based encryption, facilitated via the on-board encryption chip which performs all cryptographic functions on the drive (encryption keys do not leave the chip itself). Upon initialization of the drive (when it is first plugged in) the user is prompted for an access password; from that point on the data stored on the drive is encrypted and cannot be accessed without that password. Upon 10 consecutive unsuccessful login attempts the drive "self-destructs," automatically deleting all encryption keys and scrubbing the drive data. This self-destruct sequence is activated in hardware, not a separate software application.

The drive itself is also physically designed to withstand both accidental or intentional tampering. Externally the drive is housed in a metal casing, and internally the drive is filled with an epoxy-like "potting" compound that seals/solidifies the internal chamber and components of the drive, making the drive waterproof and shockproof, as well as making intentional physical access difficult. Additionally, the cryptochip itself includes anti-tampering detection features (i.e., power attacks, electron microscopes, etc.), and will initiate its self-destruct sequence if such attacks are detected.

Several applications are included with the drive that assist in the protection of the user's data:

- Password Manager, which allows for the saving of Web user ID and password data (with auto-fillin) on the drive itself

- Secure Backup, which allows the user to perform an encrypted backup of the drive's passwords and data to a local machine (password data can additionally be saved to the user's online account). Such backups would then allow the restoration of the drive's data in the event it is lost or accidentally destroyed via the self-destruct mechanism

- Firefox, a version of the open-source browser that is contained in the drive itself and allows the user to browse the Web without having to use the apps on the host machine.

In addition to the drive's physical applications, the vendor offers online services in conjunction with the drive; including the ability to save passwords to an online repository (access to the user's online repository is two-factor, requiring both the IronKey itself as well as the password), as well as the vendor's Secure Sessions Service, a Tor- (The Onion Router) based anonymous proxy browsing platform that routes your Web communications via encrypted tunnels through the vendor's server's en-route to their target destinations, masking your IP and physical identity in the process. Though based on the Tor platform the Secure Sessions Service runs through the vendor's own servers and not through public Tor servers. According to the vendor, the Secure Sessions Service is offered without requiring identifiable information that can link a session back to the originating user or IronKey device.

Other features of the drive include dual channel SLC NAND flash memory (performance is listed at 30 Mb/sec read, 20 Mb/sec write), and encrypted communications between the device itself and the host computer (to prevent USB traffic sniffing attacks).

The IronKey is offered in basic (only Secure Backup), Personal (including all features described above), and Enterprise (includes a management service facilitating remote, policy-based management and enforcement) versions; with Basic pricing starting at $79. The new 8 GB version is priced at $299.

Visit the IronKey Web site for further information.

product submission by EITPlanet Staff

Latest category updates via our RSS feed