13

Is there any commercially available USB drive (memory stick) that will automatically encrypt any file(s) copied to the drive, without needing to install or execute special software on the connected computer, except for a possible first-time setup (to choose the password, etc.)?

For example the Datalocker Sentry device supports auto-encryption, but only after executing a program stored on the stick.

I am looking for a device which can be connected to an industrial system with an embedded operating system (Windows CE), and encrypt files transferred to the memory stick through a standard feature of the system, without requring any modification of the system. The person initiating the transfer should not be able to read/decrypt the files on the USB device.

Edit: I will list below some USB-compatible storage devices featuring encryption that I have found:

Edit 2: A device with the possibility of generating a full audit trail of all file transfers might be an acceptable alternative. For example, the Datalocker Sentry and certain Kingston Data Traveller models seem to be compatible with "SafeConsole" software.

I'm not in charge of or have any direct say over budget, but I imagine I should be able to justify an expense of $500-$1000, if we can avoid more complex data handling procedures/equipment to reduce the risk of data loss or tampering. Alternative solutions or the cost of inadequate data integrity might easily come to more than this sum.

  • 3
    Before you commit to any of these, you should really look through security sites. Many of the 'secure' USB sticks are anything but. In some cases all one needs is to bypass the "lock" chip with a piece of wire, often the encryption software uses lousy, long-broken algorithms, or security through obscurity, where your data is stored unencrypted in an invisible partition. You'll be much better off setting up a 'truecrypt traveller disk' on anything. – SF. Apr 30 '16 at 7:07
-1

There can't be anything exactly like you're looking for due to the way USB flash storage works. It's just a USB controller chip attached to flash media; you would need an additional encryption chip on the PCB of the device that took everything the controller fed it and encrypted it. It would have to be powered over the USB link and it would also have to provide a way for people to decrypt its contents via some kind of interface no matter what it was plugged into. I suppose in theory it might be done, but the vast majority of use cases would be better served with encryption being performed on the system itself, where it can be faster, innately compatible, and tailored.

It should not be hard to set up software that watches for a USB drive attached to the system to have files added to it, then automatically encrypts that volume. It might be possible to defeat that system by pulling the drive prior to encryption automatically beginning, but that would require some pretty remarkable deftness.

The audit trail idea seems MUCH more viable. A quick review of links on Google leads me to this: https://www.manageengine.com/products/active-directory-audit/removable-storage-auditing.html?ADAPID=1522&kw=%2Busb%20%2Bfile%20%2Blog&adId=27633832007&gclid=CjwKEAjwqpK8BRD7ua-U0orrgkESJADlN3YBY-7r2DY5KPPjSLdJ0zfn52h1m_bm39e2pWdO_WUSDxoCaAvw_wcB

Which appears to be a server-based solution. Obviously file transfers would need to be illegal if the computer were not currently networked or something like that to maintain security.

This is a free, local software doing much the same thing, but of course as such it would be fairly easy to defeat if a knowledgeable adversary were attempting to steal data.

EDIT: looking over your post again, I think the Startech USB HDD with inline AES encryption is extremely close to what you're asking for (and it overcomes all the problems I said devices like this would need to overcome in order to work). I would go with that device. "Access to the encrypted data is allowed through a built-in touchpad" strongly implies write capability is denied until the key is entered.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.