|
    

|
 |
ASI Ships the World’s First
Laptop PC Featuring a Hard Drive with Built-in Encryption
The ASI
EL80/C8015 notebook integrated with the Seagate Momentus FDE2
drive is a new security platform that delivers a simple,
cost-effective way to deploy the highest levels of security for
mobile computers by protecting data where it lives – on the hard
disc drive |
|
|
|
|
|
|
As the popularity of laptop computers
continues to explode, so does the need for securing the
financial data, customer information, intellectual property, and
personal history stored on these systems. With over 35% of all
data breaches resulting from a lost or stolen notebook,
businesses such as medical, legal, or financial, as well as
institutions including educational or governmental along with
individual consumers face the increasing challenge of protecting
their vital information from theft.
ASI
EL80/C8015 Security Platform
-
Full
Disk Encryption of all data and passwords
-
Complete hardware encryption allowing the drive to run at
full interface speed to maintain normal drive performance
levels
-
Encryption is always on and seamless to the user
-
Pre-boot password protection prevents unauthorized access to
the drive even if removed from the notebook
-
Lower
cost of ownership and easy to manage
-
Seagate Momentus FDE2 HD is National Institute of Standards
and Technology (NIST) AES Encryption Certified
-
Testing Certified on FIPS (Federal Information Processing
Standard 197)
|
|
Data @ Risk
With the
increasing sales of notebooks, more and more critical data is
going mobile. As a result, companies are at risk to have that
vital information compromised as it can no longer be contained
with in the walls of the organization. In fact, according to
recent studies by the Ponemon Institute, over 35% of data loss
occurred due to a lost or stolen laptop which represented a loss
of $182 per record with a total cost ranging from approximately
$1 million to $22 million
-
In August
2006, 49% of all reported data breaches were the result of a
lost or stolen laptop (Privacyrights.org)
-
December
2005, 1 millionth record breached
-
Sept 2006
– Rueters – “1,100 Laptops Missing from US Commerce
Department”
-
August
2006 Veterans Administration Hospital lost over 18,000
medical records of veterans as a result of a stolen laptop.
The lost data again included name, address, birth date and
SSN
-
June 2006
–eWeek – “Ameriprise Laptop Theft puts Client Database at
Risk”
-
June 2006
the US Government Veterans Affairs lost over 1.1 million
names of active duty military, reserves, and National Guard
members as a result of a stolen laptop. The information that
was lost contained name, address, birth date and SSN.
-
March
2006 – eWeek – Stolen Fidelity Laptop puts HP Workers at
Risk”
-
May 2005
– The California Aggie – Laptop Containing 98,000 names
Stolen from Berkeley Campus”
-
March
2004 – Information Week – Laptop Theft puts GMAC Customers
at Risk”
|
|
Advantages of HW
Encryption
The answer to
protecting information from be seen or accessed by unauthorized
users rests with a technology known as encryption which is a
process that simply codes and decodes data as it is written or
read from the computer hard drive. This technology has been
available for some
time through software but there have been several draw backs
which have made it a far from ideal solution.
As with any software application
the encryption process requires a heavy amount of processor
overhead which means it must utilize the systems main processor
to code or decode the data which causes the computer to perform
below expectations as well as make employees less productive and
more frustrated with their PC. In order to address the
performance issue many software programs only encrypt logical
sectors of the drive which means some data is still vulnerable
even without a password.
This
performance degradation also leads to another problem associated
with software encryption and that is that they can easily be
turned off by the user which means that even though a security
solution is in place, it is not functioning because the user
deactivated the program due to performance issues.
Another
challenge related to software encryption programs occurs when an
update or patch needs to be loaded on the drive which requires
encryption to be turned off and for the drive to be decoded
which can be a very time consuming process. Of course, once the
patch has been added, the drive needs to be encrypted which
again causes delays for usability of the system.
In general,
software programs are not completely secure because passwords
are stored in BIOS or on an open area of the hard drive making
them easy to hack and once the password is known, all the data
on the drive can easily be accessed which defeats the overall
purpose of encryption so protecting the password is equally as
important as securing the data.
|
|
ASI Security Platform
The solution
to the problem of data protection on a laptop is the ASI
C8015/EL80 NB which incorporates technology from Wave Systems
and Seagate Technologies to offer a notebook that protects the
information stored on the drive by using a hardware solution
that completely encrypts the data and locks the drive through
pre-boot password authentication to prevent unauthorized access.
Even if the drive is removed from a stolen notebook or sent to a
data recovery lab the information can not be viewed nor can the
password be hacked making it completely secure.
The encryption
technology deployed in the ASI NB has many unique design
features that help deliver exceptional performance and
security. First, the Seagate hard drive includes its
own controller chip which
is integrated on the drive. This chip is tasked with the
responsibility of coding as well as decoding the information
stored on the hard drive so the job is not handled by the
systems main CPU as would be the case with a software program.
This Native or hardware encryption solution prevents any
performance degradation because it keeps the systems main
processor free to perform other tasks.
Second, Seagate has added an
additional hidden partition used to store the password as well
as other vital information. This encrypted partition is not part
of the overall storage capacity of the drive so it is completely
inaccessible and secure. It also means that since the password
is stored on this secret partition on the drive and not in BIOS
as with software or other hardware solutions it travels with
drive so if the drive is removed from the notebook, the password
would still be required in order to access the drive.
Last, Wave
Systems Trusted Drive Manager which is the software program
interface for the password helps simplify setup and
configuration of the Seagate Momentus 5400 FDE.2 hard drive as
well as make it easy for administrators and users to create and
back up passwords. It also allows administrators to control
hard drive policies and security settings as well as easily
erase all data including the operating system cryptographically
so the drive can be safely redeployed or discarded.
|
|
Government Legislation
Data theft is one of the
fastest growing high tech crimes in the US and this has not gone
unnoticed by many state governments which have enacted laws that
specifically require some form of data encryption. In fact, 29
states have laws such as the
Gramm-Leach-Bliley Act, the Health Insurance Portability
and Accountability Act (HIPAA), or California SB1386 that
require encryption compliance and full client disclosure in the
event of any type of data loss.
In addition to specific laws that are being
written to address data security, President Bush has issued
specific directives to all branches of the US Government that
they must use encryption on all mobile devices. While this
certainly raises compliance issues, it also creates
opportunities for those resellers that can differentiate
themselves by offering a notebook with built in hardware
encryption like the ASI EL80/C8015 notebook.
|
|
Impact of Data Loss
Compliance is one concern but maybe more critical
is the issue of disclosure which could have a serious impact on
an organizations revenue due to a loss in customer confidence.
Recent studies indicate that 20% of a companies clients say
they would immediately end their business relationship, while
another 40% claim they would consider ending their partnership,
and still 5% more would consider legal action if they were told
their personal records had been lost due to a theft.
|
|
Back Up Solutions
The encryption technology used in the ASI
notebook is a powerful solution designed to protect the data
stored on the drive and as such, it can not be recovered if
passwords are forgotten or the drive fails. Therefore, it is
critical that the user also deploys proper back up protocol by
saving their data to some type of external storage. Most
commonly, people are using external hard drives which are
available form ASI. This is a vital component of the entire
Security Solution. |
| |
| Return to top |
| |
|
|