USB Secure Devices
HKS IT has reviewed a number of currently available USB mini hard drives and flash drives for security. The method of review was to target the average HKS end user wishing to store confidential data. This data can be university confidential data, database information, passwords, personal information or similar information that can not be disseminated to the general public or lost. Some of the most import items that were weighted are:
|
 |
We found that each of the devices had draw backs. The devices that had the best ease of use, and most security were: the Kingston DataTraveler Secure Privacy and the MXI Stealth. These two devices had the best security, and ease of use.
Harvard Policy
Harvard Policy states that confidential data (Harvard Definition) must be encrypted when stored locally (Harvard Policy). Also “No member of the Harvard community is permitted to store Social Security, credit card, or bank account numbers in any way relating to Harvard or Harvard sponsored activities on any user computer” (Harvard Policy).
IT Recommendation
HKS IT recommends the following devices to transport and encrypt data in compliance with Harvard Policy:
Kingston DataTraveler Secure Privacy (High Security - Average Price 2GB $120)
The Kingston DataTraveler Secure Privacy is designed for security. It has built in AES 256 bit hardware encryption chip, along with software that was extremely light weight and easy to use. The drive is waterproof at depths of up to four feet and comes in a titanium-coated, stainless steel case. It is USB 2.0-compliant and transfer data while encrypting it at 24MB/sec. reads and 10MB/sec. writes.
The software necessary to unlock the device does not require admin privileges allowing it to be used in a variety of limited access environments like student labs and kiosks. The “Privacy Edition” encrypts the entire flash drive transparently, leaving no room for error by users. This device is for use on Windows only (2000/XP/Vista).
For more information please see:
http://www.kingston.com/flash/privacyUSB.asp?id=2
This device can be purchased at GovConnection with a University discount. To create a Harvard GovConenction account please see the UIS Portal (Bottom left-Personal Account)
After login you can purchase the device:
if you do not buy from GovConnection please make sure to buy Kingston DataTraveler Secure Privacy (Model DTSP). If you have any questions please conect Kevin Amorin, Network Security Manager.
MXI Security Stealth (High Security/Very Sensitive Data- Average Price 2GB $240)
|
If you require a higher level of security, or you are transporting very sensitive information IT recommends the use of the MXI Stealth device. MXI Stealth is by far the most secure and best designed device IT tested and reviewed. It does 128bit AES hardware encryption, cross platform support, and does biometric authentication (fingerprint reader). |
 |
The MXI device is more difficult to initially setup and configure but after your fingerprint is stored the device is as easy to use as a standard flash drive. It is also the only device that does not require software to unlock the secure encrypted area. This device is FIPS 140-2 Level 2, which can be used for government use.
If you are using non windows system (Mac,Linux) or a older windows system (Windows 98/ME) IT recommends the MXI device as Kingston device supports Windows XP/2000 only.
http://www.mxisecurity.com/?p=products&i=stealth_mxp
To purchase this device please visit:
2Gig version http://store.mxisecurity.com/product30.html
to initially configure this device please contact Kevin Amorin in IT.
