Re: USB Tokens

From: Alan J. Raveling (alanjraveling@solid-acid.net)
Date: 03/26/03

  • Next message: Robert Schild: "Re: USB Tokens" 
    From: "Alan J. Raveling" <alanjraveling@solid-acid.net>
To: <focus-ms@securityfocus.com>
Date: Wed, 26 Mar 2003 15:29:15 -0600

    I believe the greatest ability that these tokens have is for computer
    equipment that sees a lot of travel. The ability to encrypt the entire disk
    and only allow its contents to be read with the presence of a USB token is a
    fairly good scheme to prevent IP loss. The use of the etokens as just
    password stores is mainly trivial in what they can do.
    There are offerings from eAladdin and CompuSec which allow one to encrypt
    full partitions or just files and directories. However, I am not aware of
    any "free" offerings for Microsoft based solutions.
    Another use for these small portable storage devices is to encrypt the
    storage device itself. Keep all private information on the usb device so
    that in the event of a laptop theft, the amount of personal information
    divulged is kept to a minimum. Of course, this is assuming that the usb
    device is removed from the computer when not in use.

    Happy Computing
    Alan J. Raveling

    ----------------------------------------------------------------------
    Get serious about enterprise anti-spam management.
    SurfControl E-mail Filter for SMTP & Exchange
    leverages multiple layers of technology to defeat
    spam with accuracy. Download a free 30-day trial:
    http://www.surfcontrol.com/go/zsfmsl1

  • Next message: Robert Schild: "Re: USB Tokens"

    Relevant Pages

    • Re: Encrypting the response
      ... encrypt the response with the token that was used to sign the request. ... You should encrypt the response with the token that was used to encrypt the ... encrypting tokens in separate functions. ...
      (microsoft.public.dotnet.framework.webservices.enhancements)
    • Re: WSE 2.0 SP2: UsernameTokens must be encrypted to request SCT?
      ... William Stacey, MVP ... > The SecurityTokenServiceClient class will now automatically encrypt any ... > Username tokens included in a request. ...
      (microsoft.public.dotnet.framework.webservices.enhancements)
    • Re: Encrypt/Decrypt Username Password using Public Key
      ... Our requirements are that we have to encrypt the user name and the ... WSE has all the mechanics for creating tokens based on username/password ... - and if you run over SSL that's totally fine. ...
      (microsoft.public.dotnet.security)
    • Re: New User Encrypting Username Token Issue
      ... The line of code to encrypt the username came right out of the hands on lab ... I am adding the tokens to the token collection first, ...
      (microsoft.public.dotnet.framework.webservices.enhancements)
    • Re: Full-disk crypto for Macbook?
      ... ZFS does have this ability. ... the ability to encrypt entire startup drives. ... certainly have a huge negative impact on speed and responsiveness. ...
      (comp.sys.mac.apps)