TrustedFlash Technology
| Firmware |
|
|
|
|
|
| |
|
|
|
|
|
|
|
| TrustedFlash™ |
|
|
|
|
|
|
| ||
|
|
|
|
|
|
| ||
| Memory |
|
|
| Mass Storage |
|
| |
|
|
| CD ROM |
| Device Certificate | |||
|
|
|
| |||||
| Controller |
|
| (R/W) |
| |||
|
|
|
|
| ||||
|
|
|
|
| ||||
|
|
|
| (ISO Image) |
|
|
| Secrets |
|
|
|
| Applications |
| |||
|
|
|
|
| ||||
|
|
|
|
| ||||
|
|
|
|
|
|
| (e.g. OTP Seeds) | |
|
|
| Public | |||||
| Processor |
|
|
|
|
| ||
|
|
|
| Private |
|
|
| |
|
|
|
|
|
|
|
| |
|
|
|
|
|
|
|
| |
|
|
|
|
|
|
|
|
|
TrustedSignins is based on SanDisk's TrustedFlash technology. Every TrustedFlash device contains a unique readable electronic serial number, a device certificate, and an unknown random encryption key. A custom controller partitions memory and manages access from the host PC. A
to and read from the device, protecting against information disclosure even if the components are directly targeted.
The host OS has no direct access to TrustedFlash memory. The device API supports strong authentication, including PKI, allowing authorized host processes to create and access their own information in the TrustedFlash partition while preventing access even by other processes authorized to access other information within the TrustedFlash partition. For example, the shared secret used to generate a one time password can be written and erased but not read from the device. Similarly, the device certificate can be used for authentication, verification, and signing but cannot be modified. The device certificate can be encapsulated in a PKCS#7 package, thus supporting PKI applications.
SanDisk USB flash drives can make 3 disk volumes available to the host PC; a
For more information on TrustedFlash technology or TrustedSignins and how they can increase security while lowering costs, please send an email to
Trustedsignins@sandisk.com
Features and Advantages
•Based on TrustedFlash™ Secure Storage Technology
•One device supports multiple virtual tokens and multiple algorithms
•OATH (Open Authentication) compliant
•Up to 4.0GB of password protected flash memory storage
*TrustedSignins and the private volume require Windows 2000 Service Pack 4 and later, Windows XP (all editions and service packs), and Windows Server 2003.
SanDisk, the SanDisk logo and Cruzer are trademarks of SanDisk Corporation, registered in the United States and other countries. Gruvi, the gruvi logo, TrustedFlash, the TrustedFlash logo and TrustedSignins are trademarks of SanDisk Corporation. miniSD and the miniSD logo are trademarks. U3 and the U3 logo and the U3 smart logo are trademarks of U3, LLC. Other brand names mentioned herein are for identification purposes only and may be trademarks of their respective holders. ©2007 SanDisk Corporation. All rights reserved. 1/07
