User manual

G-P6019-TM001
ST Electronics (Info-Security) ISSUE A
2
2. Introduction
2.1. About DiskCrypt Mobile DCM300
Congratulations on your purchase of DigiSAFE DiskCrypt Mobile DCM300. DiskCrypt Mobile
DCM300 represents the most advanced secure Mobile storage solution today, utilizing
smart card authentication technology and AES 128/256 bits full disk encryption. With
DiskCrypt Mobile, you can enjoy Mobile storage with the speed and convenience of both
USB 2.0 and Firewire 400/800 in a compact form factor, and be assured that your data is
safe from prying eyes.
DCM300 is a secure portable hard drive enclosure consisting of a 2.5” SATA hard drive
enclosure and a hardware-based encryption module that performs full disk encryption, i.e.
it encrypts every byte and every sector of data that is written into the hard drive. The
device is designed to fit standard 2.5” hard drives with a SATA interface, and
communicates with the computer via either standard USB 2.0 ports or Firewire 400/800
ports. By encrypting every single byte and sector, DCM300 is operating system
independent and does not require any software drivers. It also encrypts all temporary
files, as well as areas that would normally be missed and left “in the clear” by software
encryption products. Encryption and decryption occurs transparently without any loss in
disk performance. Users simply use their computers as usual with the assurance and
complete piece of mind that their data is fully protected in the unfortunate event that their
hard drives are stolen or lost.
DCM300 stores the hard drive encryption key in smart cards (two are provided per unit).
Smart card technology is well understood and represents the highest level of security
possible for secure data storage. It is vastly more secure than other solutions that use
hardware tokens, where the encryption key is stored in insecure memory that can be
easily duplicated. In contrast, smart cards store the encryption key securely within, and
can only be accessed upon presentation of a valid PIN. The user will need both the smart
card as well as knowledge of its PIN to be able to access the data in the connected hard
drive. By doing so, DCM300 enforces two-factor authentication, which is a higher security
protection by ensuring that the user possesses both the physical Smart Card and the
knowledge of its PIN.
The user is required to authenticate him or herself each time DCM300 is plugged into the
computer. After authentication, the drive presents itself to the operating system and the
user is granted normal drive access.