HDD Lock

1. HDDLock HDDLock Advisor: MichaelZink Department of Electrical & Computer Engineering

2. HDDLock Team Organization Project Lead: FadiMaalouli Web & Software Development: Brigit Lyons Software Development: Anthony Panetta Hardware Development: Renzo Silva Department of Electrical & Computer Engineering

3. HDDLock Outline • Problem Statement • Existing Products • Our Solution • Overall Operation • Security Analysis • Description of Main Components • Requirements • Implementation • Cost • Design Challenges • MDR Deliverables Department of Electrical & Computer Engineering

4. HDDLock Problem Statement • Hard drives contains a lot of information • Easy to lose or get stolen • Secure Important Data on your Hard Drive • Thieves • Hackers • Coworkers • Secure Personal Data • From Family members • From Friends Department of Electrical & Computer Engineering

5. HDDLock Existing Product • Software that encrypts your entire Hard Drive • TrueCrypt • SafeGuard® Easy • SafeHouseExplorer • Seagate Self-Encrypting Drives • They have static password protection • Not effective Department of Electrical & Computer Engineering

6. HDDLock Our Approach Secure any non-bootable SATA HDD Use phone as hard token to lock/unlock data stored on HDD Locking/Unlocking requires 2-tiered user password authentication, hardware authentication, and physical locality Department of Electrical & Computer Engineering

7. HDDLock Design Overview Account Database Website Bluetooth Module Department of Electrical & Computer Engineering

8. HDDLock Typical Use Scenario Account Database Website Bluetooth Module 4 1 3 2 Department of Electrical & Computer Engineering

9. HDDLock Security Concerns Database hack Phone identity spoofing Eavesdropping Brute force attack to crack encryption Department of Electrical & Computer Engineering

10. HDDLock System Components Server Android Application Bluetooth Module Department of Electrical & Computer Engineering

11. HDDLock Server Database User Accounts Query Database Website Message to Phone User Account Administration Encryption Module Message from Phone Department of Electrical & Computer Engineering

12. HDDLock Server Website provides interface for account administration Create account, change password, register Bluetooth module/Phone, etc. Communications to and from website will be encrypted Decrypted only by Bluetooth module Database as backend of website User account information Registered phone IDs Registered Bluetooth modules Encryption keys Department of Electrical & Computer Engineering

13. HDDLock Android Application Android Account Login/Validation Message To Bluetooth Module Message To Website Login Phase Message To Bluetooth Module HDD Usage Phase Message From Website Convert Wireless (WiFi/3G) Packet to Bluetooth Packet Convert Bluetooth Packet to Wireless (WiFi/3G) Packet Message To Website Message From Bluetooth Module Department of Electrical & Computer Engineering

14. HDDLock Android Application Communication with Bluetooth module Detect and register Bluetooth modules Lock/unlock message Encrypted communications Communication with website Convert between Bluetooth packets and wireless (WiFi/3G) packets Access user account and gain information to communicate with selected Bluetooth module Encrypted communications The phone will not be able to decrypt Only relays encrypted messages between website and Bluetooth module Develop using the Android SDK Eclipse plugin Department of Electrical & Computer Engineering

15. HDDLock Dynamic Encryption Encrypted network communications 128-bit AES encryption Database and Bluetooth module share an encryption key Key changes upon unlock Website creates new key New key encrypted using old key Bluetooth module decrypts and stores new key Provides another layer of protection against attackers Department of Electrical & Computer Engineering

16. HDDLock Hardware Structure Unlock Power Up Retrieve Key Bluetooth Device Make File Names Available Decrypt File Decryption Request SecurityReport. Doc ClientSS.doc Account #’s Encrypted Information. No one can Department of Electrical & Computer Engineering

17. HDDLock Security Lock Controller Bluetooth Module: AIRcable SMD Wirelessly Programmable Micro Controller Processor BlueCore 5MM with 8MBit internal flash 512k EEPROM Power Supply 5V regulated stand-alone Lithium rechargeable battery, 4.2V, 100-500mAH 3V primary cell Performance max 1000 lines per second Port Access Parallel IO ports, 12 ports TTL level, 5V tolerant Event Handling 4 Simultaneous Connections PIN code requestPIN code limit: 15 characters Department of Electrical & Computer Engineering

18. HDDLock Data Encryption Series Intel Atom Clock Rate 1600 MHz Front Side Bus 533 MHz Level 1 Cache 56 KB Level 2 Cache 512 KB Max. Power 2.5 Watt Department of Electrical & Computer Engineering

19. HDDLock Design Challenges and Limitations • Hardware and Software Security • Small, Fast and intuitive interface • Encrypting at a minimum speed of 3Gb/s • Interfacing with the operating system Department of Electrical & Computer Engineering

20. HDDLock Cost Analysis • AIRCable SMD $60 • Intel Atom $40 • Web Hosting $5/month • Sata receptacle (data/power) $2.5/each • The Sata Cables (power/data) $2.5/each Department of Electrical & Computer Engineering

21. HDDLock Deliverables for MDR • Working encryption algorithm • Basic phone application • Basic Bluetooth communication • Design of Bluetooth module Department of Electrical & Computer Engineering

22. HDDLock Questions? Department of Electrical & Computer Engineering