Spyrus: Security Cloud Application for Windows To Go Drives

SPYRUS, Inc. announced the PocketVault Encryptor Professional (PVE Pro) file encryption and file sharing application for the Microsoft certified SPYRUS WorkSafe and WorkSafe Pro WTG bootable USB 3.0 live drives.

The solution encrypts, shares and stores single files, groups of files and directories in public and private cloud environments. Documents, spreadsheets and even media files can be shared and synched among teams of authenticated users.

The application secures the user’s AES 256 bit encryption keys on the FIPS 140-2 Level 3 Rosetta hardware security module that is embedded within WorkSafe and WorkSafe Pro live drives. Every user file is encrypted with its own key and it ensures all file encryption and decryption keys are always secured on the user’s drive and never available to the cloud service provider. Sensitive files can even be encrypted multiple times with different keys for defense-in-depth protection. Unlike commodity file encryption products, this employs the strongest cryptographic algorithms in a hardware security module certified by NIST.

Key generation, key storage, and key management functions are also executed completely within the hardware security module. As in other SPYRUS encrypting products, passwords do not exist on the drive in any form and are reconstituted for each logon process to unlock the drive, making them unsusceptible to attacks. All this core functionality is implemented within the USB security device and is applied to all data on each secured by SPYRUS WTG drive.

“PocketVault Encryptor Professional was originally developed to meet the security needs of Government organizations to share and protect both data at rest and data in transit for collaboration among workgroups,” said Tom Dickens, COO, SPYRUS.

The integration of the application with a FIPS 140-2 Level 3 Rosetta hardware security module provides the assurance that only authenticated users who have access to the hardware key and legitimate password can decrypt the files stored on SharePoint or public cloud storage systems such as DropBox and Google Drive.

Enterprise users can share encrypted files by creating and exchanging PVE Certificates with other PVE users, and add their certificates as PVE Contacts. When encrypting a file, you can select PVE contacts to share decryption capabilities for that file. You can then transmit the encrypted file (for example, as an email attachment, on a USB storage drive, or stored in cloud storage systems), and only you and designated contacts can decrypt it. An initialization process creates, backups, or restores private keys based on enterprise policy. The SPYRUS Enterprise Management System (SEMS) can centrally enforce corporate access rules and key management policies and selectively enable, disable and ‘kill’ access to each PVE Pro enabled WorkSafe and WorkSafe Pro drives.

It can be used to encrypt and decrypt files and folders from your booted Windows 8.1 environment on WorkSafe or WorkSafe Pro drives or as a USB token in Windows 7 and 8 desktop infrastructure environments. Source files can be removed after encryption/decryption and perform encrypt, decryption and safe erase functions on folders and subfolders wherever they are stored.