HS256S high security external hard drive

External high-security hard disk HS256S

Professional solution for authorities and companies

"Die externe Festplatte HS256S wurde in einem kombinierten Verfahren mit dem schleswig-holsteinischen und dem europäischen Datenschutz-Gütesiegel EuroPriSe ausgezeichnet. Eine starke Verschlüsselungstechnik und eine Zwei-Faktor-Authentifizierung setzen Privacy by Design vorbildlich um und schützen Vertraulichkeit und Integrität der auf der Festplatte gespeicherten personenbezogenen Daten."

(Pressemitteilung www.datenschutzzentrum.de)

Translation: "The HS256S external hard drive was awarded the Schleswig-Holstein and European data protection quality seal EuroPriSe in a combined process. Strong encryption technology and two-factor authentication implement privacy by design in an exemplary way and protect the confidentiality and integrity of the personal data stored on the hard drive."

The HS256S portable high security hard disk enables data protection compliant storage, transmission and archiving of sensitive and personal data at authorities and companies.

The elegant 2.5 inch plastic housing protects against mechanical influences. The combination of FireWire 400 (800) and USB 2.0 ports ensures fast data transfer for reading and writing.

The HS256S is the first external hard drive to be awarded the ULD Privacy Seal and European Privacy Seal. By using this hard drive you meet the strictest requirements of the Federal Data Protection Act (BDSG) and the European Data Protection Regulation (EU-DSGVO) with regard to the secure storage of personal data.

The data stored on the HS256S is protected from unauthorized access, for example, if that hard drive is lost or stolen, as well as in the case of logical or physical attacks, with regard to the confidentiality of the information.

The Digittrade HS256S ensures the confidentiality of the data through the following security mechanisms:

• Encryption
• Access control
• Management of cryptographic keys

Security mechanisms and special features:

Encryption

The encryption module integrated in the security housing performs a complete encryption of the hard disk

Each stored byte and sector on the disk is encrypted to 256-bit AES (Advanced Encryption Standard) in CBC mode.

It also encrypts all temporary files and areas that are often overlooked by encryption software.

Access control

Access control is based on the principle of "owning and knowing": the user must have a suitable smart card and the correct PIN to access the data.

The smart card is automatically locked and unusable as soon as the 8-digit PIN has been entered incorrectly eight times. The cryptographic keys on the smart card are irrevocably destroyed. The data on the hard disk will continue to be stored securely. The access to this data can then be done with the second smartcard and the valid PIN.

Encryption key

The user can use the crypto keys themselves:

• Generate
• Change
• Copy
• Destroy

Management of cryptographic keys

The 256-bit crypto key is generated on the smart card. For this, the certified chip card has a very intelligent DRG3 random number generator.

Subsequently, this key is stored on the smart card separately from the hard disk and transferred only for encryption or decryption of the data to the crypto module of the hard disk.

The user can copy this key to the other smart cards and destroy it if necessary.

Smart Cards

As standard, the hard disk is supplied with two Java-based smartcards Oberthur Cosmo 64 v5.4. Certified to FIPS 140-2 Level 3 (by NIST), you can create, copy, modify, and destroy the cryptographic key. Key management is performed on the smart card independently of a PC with the support of the DIGITTRADE HS256S applet.

In case of manipulation attempts of any kind, the crypto key on the smart card is destroyed and the smart card automatically terminated irrevocably. The data on the hard disk is retained and can be accessed and edited with the help of the second smart card after entering the correct PIN.

Optionally, two Java based NXP P5CD081 J3A081 JCOP v2.4.1 R3 (BSI-DSZ-CC-0675-2011) smart cards can be supplied. These smartcards are additionally certified by the Federal Office for Information Security (BSI) according to EAL5 and have the same functions as the Oberthur Cosmo 64 v5.4 smart cards. The surcharge for delivery with NXP Smartcards is 30,00 EUR.

Management software Smartcard Manager 2

The DIGITTRADE Smartcard Manager 2 is available separately and gives you a centralized view of all your DIGITTRADE High Security hard drives, smart cards and cryptographic keys. With this comprehensive management software, you can completely capture these high security hard drives. By displaying a company structure, employees, departments and locations can be assigned to the respective information. This allows you to add the hard disks and smart cards to the respective employees and departments. Already existing information can be updated. 

You also have the possibility to manage your smartcards directly on your PC. The smart cards can be synchronized, cryptographic keys can be newly created, changed and deleted, and the smart card PIN can be changed.

Further information is available at info@digittrade.de.

Built-in hard disk

The built-in SATA hard drive in 2.5 "format makes the mobile data safe small and handy. The data transfer and the power supply via USB as well as the hardware encryption allow the use of the storage medium independently of the operating system.

Supported Operating Systems

The hard disks are independent of operating systems and bootable. This allows not only to store data but also operating systems and programs on these hard disks. This allows the HS256S to be used on all devices with USB support