Highly Secure Encrypted SSD Drive

Drive is an external encrypted hard drive in a rugged metal enclosure

The highly secure encrypted SSD Drive enables the storage, safekeeping and secure transfer of sensitive business and private data for public authorities and companies in compliance with GDPR regulations.

Drive is approved by the Bureau of Security Information (BSI) for government classified information up to NATO Restricted and EU Restricted.

The data stored on the Drive is protected against unauthorised access, for example in the event of loss or theft of the media, as well as in the event of various types of attack.

While the Drive is not connected to a computer or an external power source (e.g. USB or USB hub), it will remain in sleep mode and all keys will be disabled.

Drive guarantees data confidentiality with the following security mechanisms:

• Encryption;
• Access control;
• Cryptographic Key Management;
• User management.

Encryption

The encryption module integrated into the security housing provides complete encryption of the Drive. All stored data and written sectors on the storage device are encrypted in XTS mode using two cryptographic keys according to the 256-bit AES (Advanced Encryption Standard). Drive also encrypts temporary data and areas that are often ignored by conventional encryption software.

User authentication

• User authentication is based on the “have and know” principle
• To access the data, the user must have a smart card and know the PIN
• If the permitted number of incorrect PIN entries is exceeded, the smart card is deactivated and no longer usable, the cryptographic keys are also irreversibly deleted

Cryptographic Key Management

The user can generate, change or destroy cryptographic keys at any time. This process is irreversible. Once the new cryptographic keys have been generated, the old cryptographic keys (and therefore all data stored on the data carrier) are irreversibly destroyed.

Two 256-bit encryption keys for data encryption and decryption are generated by a hardware random number generator and stored in memory. If the user’s PIN is entered correctly, it is transmitted to the Drive encryption module for data encryption and decryption.