{"id":95488,"date":"2020-09-30T07:42:29","date_gmt":"2020-09-30T05:42:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem"},"modified":"2020-09-30T07:42:29","modified_gmt":"2020-09-30T05:42:29","slug":"zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","title":{"rendered":"De ce sunt necesare stick-urile USB cu criptare hardware?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Bun\u0103, Habr! \u00cen comentariile la unul dintre materialele noastre <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/512078\/\">despre unit\u0103\u021bile flash<\/a><\/noindex> cititorii au pus o \u00eentrebare interesant\u0103: \u201cDe ce este nevoie de o unitate flash cu criptare hardware, c\u00e2nd exist\u0103 TrueCrypt?\u201d, \u2013 \u0219i au exprimat chiar \u0219i unele \u00eengrijor\u0103ri legate de \u201cCum putem fi siguri c\u0103 \u00een software-ul \u0219i \u00een partea hardware a unit\u0103\u021bii Kingston nu sunt backdoor-uri?\u201d. Am r\u0103spuns pe scurt la aceste \u00eentreb\u0103ri, dar apoi am decis c\u0103 subiectul merit\u0103 o analiz\u0103 mai profund\u0103. Asta vom face \u00een aceast\u0103 postare.<\/p>\n<p><img decoding=\"async\" alt=\"De ce sunt necesare stick-urile USB cu criptare hardware?\" src=\"\/wp-content\/uploads\/2020\/09\/28f293543b4bdd12a2a11ae7fcf2e052.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nCriptarea hardware AES, la fel ca \u0219i cea software, exist\u0103 de mult timp, dar cum anume protejeaz\u0103 datele importante pe unit\u0103\u021bile flash? Cine certific\u0103 astfel de unit\u0103\u021bi \u0219i putem avea \u00eencredere \u00een aceste certific\u0103ri? Cine are nevoie de astfel de unit\u0103\u021bi \u201ccomplexe\u201d, c\u00e2nd putem folosi programe gratuite precum TrueCrypt sau BitLocker. Dup\u0103 cum vede\u021bi, tema ridicat\u0103 \u00een comentarii genereaz\u0103 cu adev\u0103rat multe \u00eentreb\u0103ri. Haide\u021bi s\u0103 \u00eencerc\u0103m s\u0103 ne l\u0103murim cu toate acestea.<\/p>\n<h2>Ce diferen\u021biaz\u0103 criptarea hardware de cea software?<\/h2>\n<p>\n\u00cen cazul unit\u0103\u021bilor flash (precum \u0219i HDD \u0219i SSD), pentru a efectua criptarea hardware a datelor este folosit un cip special, situat pe placa de circuit a dispozitivului. Acesta include un generator de numere aleatorii, care creeaz\u0103 chei de criptare. Datele sunt criptate automat \u0219i sunt decriptate instantaneu la introducerea parolei utilizatorului. \u00cen acest scenariu, accesul la date f\u0103r\u0103 parol\u0103 este practic imposibil. <\/p>\n<p>Atunci c\u00e2nd utiliz\u0103m criptarea software, \u201cblocatul\u201d datelor pe unitate este asigurat de un software extern, care serve\u0219te ca o alternativ\u0103 economic\u0103 la metodele hardware de criptare. Dezavantajele acestui software pot include cerin\u021ba banal\u0103 a actualiz\u0103rilor regulate, pentru a oferi rezisten\u021b\u0103 la tehnicile de hacking \u00een continu\u0103 \u00eembun\u0103t\u0103\u021bire. \u00cen plus, pentru decriptarea datelor sunt folosite resursele procesorului computerului (nu ale unui cip hardware separat), iar, \u00een esen\u021b\u0103, nivelul de protec\u021bie al PC-ului determin\u0103 nivelul de protec\u021bie al unit\u0103\u021bii.<\/p>\n<p>Caracteristica principal a unit\u0103\u021bilor cu criptare hardware este procesorul criptografic separat, care ne spune c\u0103 cheile de criptare nu p\u0103r\u0103sesc niciodat\u0103 unitatea USB, spre deosebire de cheile software, care pot fi stocate temporar \u00een memoria RAM a computerului sau pe hard disk. \u0218i, av\u00e2nd \u00een vedere c\u0103 criptarea software utilizeaz\u0103 memoria PC-ului pentru a stoca num\u0103rul de \u00eencerc\u0103ri de acces, nu poate opri atacurile de tip brute force asupra parolei sau cheii. Contorul de \u00eencerc\u0103ri de acces poate fi resetat constant de c\u0103tre un atacator p\u00e2n\u0103 c\u00e2nd programul de spargere a parolelor g\u0103se\u0219te combina\u021bia corect\u0103.<\/p>\n<p>Apropo..., \u00een comentariile la articolul \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/512078\/\">Kingston DataTraveler: noua genera\u021bie de stick-uri USB securizate<\/a><\/noindex>\u201d utilizatorii au remarcat, de exemplu, c\u0103 programul TrueCrypt dispune de un mod de func\u021bionare portabil. Totu\u0219i, acest lucru nu reprezint\u0103 un mare avantaj. Problema este c\u0103, \u00een acest caz, programul de criptare este stocat \u00een memoria stick-ului USB, iar acest lucru \u00eel face mai vulnerabil la atacuri.<\/p>\n<p>\u00cen concluzie: abordarea software nu ofer\u0103 un nivel de securitate la fel de ridicat ca criptarea AES. Aceasta este mai degrab\u0103 o protec\u021bie de baz\u0103. Pe de alt\u0103 parte, criptarea software a datelor importante este totu\u0219i mai bun\u0103 dec\u00e2t absen\u021ba complet\u0103 a cript\u0103rii. \u0218i acest fapt ne permite s\u0103 delimit\u0103m clar aceste tipuri de criptografie: criptarea hardware a stick-urilor USB este o necesitate, mai degrab\u0103, pentru sectorul corporativ (de exemplu, atunci c\u00e2nd angaja\u021bii companiei folosesc stick-uri emise de acesta); iar criptarea software se potrive\u0219te mai bine nevoilor utilizatorilor.<\/p>\n<p><img decoding=\"async\" alt=\"De ce sunt necesare stick-urile USB cu criptare hardware?\" src=\"\/wp-content\/uploads\/2020\/09\/3c3a4aeb2e28f43c2010f8dd3e0334d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nCu toate acestea, Kingston \u00ee\u0219i \u00eemparte modelele de unit\u0103\u021bi de stocare (de exemplu, IronKey S1000) \u00een versiuni Basic (de baz\u0103) \u0219i Enterprise (corporative). Func\u021bionalitatea \u0219i propriet\u0103\u021bile de securitate sunt practic identice \u00eentre ele, dar versiunea corporate ofer\u0103 posibilitatea de a gestiona unitatea prin software-ul SafeConsole\/IronKey EMS. Datorit\u0103 acestui software, unitatea func\u021bioneaz\u0103 fie cu servere cloud, fie cu servere locale pentru aplicarea de politici de protec\u021bie cu parol\u0103 \u0219i acces de la distan\u021b\u0103. Utilizatorii au op\u021biuni pentru recuperarea parolelor pierdute, iar administratorii pot comuta unit\u0103\u021bile neutilizate pe noi sarcini.<\/p>\n<h2>Cum func\u021bioneaz\u0103 stick-urile USB Kingston cu criptare AES?<\/h2>\n<p>\nKingston utilizeaz\u0103 criptare hardware AES-XTS pe 256 de bi\u021bi (folosind o cheie suplimentar\u0103 complet\u0103) pentru toate unit\u0103\u021bile sale de stocare securizate. A\u0219a cum am men\u021bionat anterior, stick-urile con\u021bin \u00een baza lor component\u0103 un cip separat pentru criptarea \u0219i decriptarea datelor, care ac\u021bioneaz\u0103 ca un generator constant de numere aleatoare. <\/p>\n<p>C\u00e2nd conecta\u021bi dispozitivul la un port USB pentru prima dat\u0103, wizard-ul de configurare a ini\u021bializ\u0103rii v\u0103 va oferi ocazia s\u0103 stabili\u021bi o parol\u0103 principal\u0103 pentru accesul la dispozitiv. Dup\u0103 activarea unit\u0103\u021bii, algoritmii de criptare vor \u00eencepe automat s\u0103 func\u021bioneze conform preferin\u021belor utilizatorului. <\/p>\n<p>Pentru utilizator, principiul de func\u021bionare al stick-ului de memorie va r\u0103m\u00e2ne neschimbat \u2013 acesta va putea \u00een continuare s\u0103 descarce \u0219i s\u0103 plaseze fi\u0219iere \u00een memoria dispozitivului, la fel ca la un stick USB obi\u0219nuit. Singura diferen\u021b\u0103 const\u0103 \u00een faptul c\u0103, atunci c\u00e2nd conecta\u021bi stick-ul la un nou computer, va trebui s\u0103 introduce\u021bi parola stabilit\u0103 pentru a ob\u021bine acces la informa\u021biile dvs.<\/p>\n<h2>De ce \u0219i cui \u00eei sunt necesare stick-urile cu criptare hardware?<\/h2>\n<p>\nPentru organiza\u021biile \u00een care datele confiden\u021biale sunt parte din afacere (fie c\u0103 sunt institu\u021bii financiare, medicale sau guvernamentale), criptarea este cel mai sigur mijloc de protec\u021bie. <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstoneDatatrevelerFlashUSBHabr\">\u00cen aceast\u0103 privin\u021b\u0103, stick-urile de memorie care suport\u0103 criptarea pe 256 de bi\u021bi<\/a><\/noindex> Criptarea hardware AES - o solu\u021bie scalabil\u0103, care poate fi utilizat\u0103 de orice companie: de la persoane fizice \u0219i mici \u00eentreprinderi p\u00e2n\u0103 la corpora\u021bii mari, precum \u0219i organiza\u021bii militare \u0219i guvernamentale. Dac\u0103 ne g\u00e2ndim la aceast\u0103 problem\u0103 \u00eentr-un mod mai concret, utilizarea unit\u0103\u021bilor USB criptate este necesar\u0103:<\/p>\n<ul>\n<li>Pentru a asigura securitatea datelor confiden\u021biale ale companiei<\/li>\n<li>Pentru a proteja informa\u021biile despre clien\u021bi<\/li>\n<li>Pentru a proteja companiile de pierderea profitului \u0219i a loialit\u0103\u021bii clien\u021bilor<\/li>\n<\/ul>\n<p>\nEste de re\u021binut c\u0103 unii produc\u0103tori de unit\u0103\u021bi flash protejate (printre care \u0219i compania Kingston) ofer\u0103 solu\u021bii personalizate pentru corpora\u021bii, adaptate la nevoile \u0219i cerin\u021bele clien\u021bilor. Dar liniile de produse de mas\u0103 (\u00een care se num\u0103r\u0103 unit\u0103\u021bile DataTraveler) \u00eendeplinesc, de asemenea, sarcinile lor \u0219i sunt capabile s\u0103 asigure un standard de securitate de nivel corporativ.<\/p>\n<p><img decoding=\"async\" alt=\"De ce sunt necesare stick-urile USB cu criptare hardware?\" src=\"\/wp-content\/uploads\/2020\/09\/1a7da32b0922526ed61e43cf12531522.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>1. Asigurarea securit\u0103\u021bii datelor confiden\u021biale ale companiei<\/h2>\n<p>\n\u00cen 2017, un rezident din Londra a g\u0103sit \u00eentr-un parc o unitate USB care con\u021binea informa\u021bii nesecurizate legate de securitatea aeroportului Heathrow, inclusiv amplasarea camerelor de supraveghere, detalii despre m\u0103surile de protec\u021bie \u00een cazul sosirii persoanelor de rang \u00eenalt. De asemenea, pe stick se aflau datele despre permisele electronice \u0219i codurile de acces \u00een zonele restric\u021bionate ale aeroportului.<\/p>\n<p>Anali\u0219tii indic\u0103 drept cauz\u0103 a unor astfel de situa\u021bii lipsa de cuno\u0219tin\u021be cibernetice a angaja\u021bilor companiilor, care pot \u201escurge\u201d date secrete din neglijen\u021b\u0103. Unit\u0103\u021bile flash cu criptare hardware rezolv\u0103 par\u021bial aceast\u0103 problem\u0103, deoarece, \u00een caz de pierdere a unei astfel de unit\u0103\u021bi, accesul la datele de pe aceasta f\u0103r\u0103 parola principal\u0103 a aceluia\u0219i angajat al serviciului de securitate nu este posibil. \u00cen orice caz, aceasta nu elimin\u0103 necesitatea ca angaja\u021bii s\u0103 fie \u00eenv\u0103\u021ba\u021bi cum s\u0103 foloseasc\u0103 unit\u0103\u021bile flash, chiar \u0219i atunci c\u00e2nd este vorba despre dispozitive protejate prin criptare.<\/p>\n<h2>2. Protec\u021bia informa\u021biilor despre clien\u021bi<\/h2>\n<p>\nO sarcin\u0103 \u0219i mai important\u0103 pentru orice organiza\u021bie este \u00eengrijirea datelor clien\u021bilor, care nu trebuie s\u0103 fie expuse riscurilor de compromitere. De altfel, aceste informa\u021bii sunt adesea transferate \u00eentre diferitele sectoare ale afacerii \u0219i, \u00een general, sunt de natur\u0103 confiden\u021bial\u0103: de exemplu, pot con\u021bine date despre opera\u021biunile financiare, istoricul medical etc.<\/p>\n<h2>3. Protec\u021bia \u00eempotriva pierderii profitului \u0219i a loialit\u0103\u021bii clien\u021bilor<\/h2>\n<p>\nUtilizarea dispozitivelor USB cu criptare hardware poate ajuta la prevenirea consecin\u021belor devastatoare pentru organiza\u021bii. Companiile care \u00eencalc\u0103 legea privind protec\u021bia datelor personale pot fi amendate cu sume mari. Prin urmare, este necesar s\u0103 ne \u00eentreb\u0103m dac\u0103 merit\u0103 s\u0103 ne asum\u0103m riscuri \u00een schimbul informa\u021biilor f\u0103r\u0103 o protec\u021bie adecvat\u0103?<\/p>\n<p>Chiar \u0219i f\u0103r\u0103 a lua \u00een considerare consecin\u021bele financiare, cantitatea de timp \u0219i resurse cheltuite pentru corectarea erorilor de securitate poate fi la fel de semnificativ\u0103. \u00cen plus, dac\u0103 o bre\u0219\u0103 de securitate compromite datele clien\u021bilor, compania risc\u0103 pierderea loialit\u0103\u021bii fa\u021b\u0103 de brand, mai ales pe pie\u021bele unde exist\u0103 concuren\u021bi care ofer\u0103 produse sau servicii similare.<\/p>\n<h2>Cine garanteaz\u0103 absen\u021ba 'backdoor-urilor' de la produc\u0103tor atunci c\u00e2nd se folosesc stick-uri USB cu criptare hardware?<\/h2>\n<p>\n\u00cen subiectul pe care l-am abordat, aceast\u0103 \u00eentrebare este, credem, una dintre cele mai importante. Printre comentariile la articolul despre unit\u0103\u021bile Kingston DataTraveler, am \u00eent\u00e2lnit o alt\u0103 \u00eentrebare interesant\u0103: 'Dispozitivele dumneavoastr\u0103 au audit din partea unor speciali\u0219ti independen\u021bi?'. Ei bine..., este un interes destul de logic: utilizatorii doresc s\u0103 se asigure c\u0103 stick-urile noastre USB nu au erori comune, precum criptarea slab\u0103 sau posibilitatea de a ocoli introducerea parolei. \u0218i, \u00een aceast\u0103 parte a articolului, vom vorbi despre procedurile de certificare pe care le parcurg unit\u0103\u021bile Kingston \u00eenainte de a ob\u021bine statutul de stick-uri USB cu adev\u0103rat sigure.<\/p>\n<p>Cine garanteaz\u0103 fiabilitatea? S-ar p\u0103rea c\u0103 am putea spune c\u0103 \u201eKingston a produs \u2013 el garanteaz\u0103\u201d. \u00cens\u0103, \u00een acest caz, o astfel de declara\u021bie ar fi incorect\u0103, deoarece produc\u0103torul este o parte interesat\u0103. Prin urmare, toate produsele trec printr-o verificare de c\u0103tre o ter\u021b\u0103 parte, cu expertiz\u0103 independent\u0103. \u00cen special, unit\u0103\u021bile Kingston cu criptare hardware (cu excep\u021bia DTLPG3) sunt participante la programul de validare a modulelor criptografice (Cryptographic Module Validation Program sau CMVP) \u0219i sunt certificate conform standardului federal de procesare a informa\u021biilor (Federal Information Processing Standard sau FIPS). De asemenea, unit\u0103\u021bile sunt certificate conform standardelor GLBA, HIPPA, HITECH, PCI \u0219i GTSA.<\/p>\n<p><img decoding=\"async\" alt=\"De ce sunt necesare stick-urile USB cu criptare hardware?\" src=\"\/wp-content\/uploads\/2020\/09\/f0ce4f1a2d086a61d0d9522955a10305.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>1. Programul de validare a modulelor criptografice<\/h2>\n<p>\nProgramul CMVP este un proiect comun al Institutului Na\u021bional de Standarde \u0219i Tehnologie din cadrul Ministerului Comer\u021bului al SUA \u0219i al Centrului Canadian pentru Securitate Cibernetic\u0103. Scopul proiectului este de a stimula cererea pentru dispozitive criptografice verificate \u0219i de a oferi indicatori de securitate agen\u021biilor federale \u0219i sectoarelor reglementate (cum ar fi institu\u021biile financiare \u0219i medicale) care sunt utilizate la achizi\u021bionarea echipamentelor.<\/p>\n<p>Verific\u0103rile dispozitivelor \u00een conformitate cu setul de cerin\u021be criptografice \u0219i cerin\u021bele de securitate sunt efectuate de laboratoare independente de criptografie \u0219i testare a securit\u0103\u021bii, acreditate NVLAP (National Voluntary Laboratory Accreditation Program \/ \u201eProgramul Na\u021bional de Acreditare Voluntar\u0103 a Laboratoarelor\u201d). Fiecare concluzie de laborator este verificat\u0103 pentru conformitatea cu standardul federal de procesare a informa\u021biilor (FIPS) 140-2 \u0219i confirmat\u0103 de CMVP.<\/p>\n<p>Modulele validate ca fiind conforme cu standardul FIPS 140-2 sunt recomandate pentru utilizare de agen\u021biile federale din SUA \u0219i Canada p\u00e2n\u0103 pe 22 septembrie 2026. Dup\u0103 aceast\u0103 dat\u0103, ele vor fi incluse \u00een lista de arhiv\u0103, de\u0219i vor continua s\u0103 fie utilizate. Pe 22 septembrie 2020, a fost \u00eencheiat\u0103 primirea cererilor de validare conform standardului FIPS 140-3. Dup\u0103 finalizarea verific\u0103rilor, dispozitivele vor fi mutate timp de cinci ani \u00een lista activ\u0103 a dispozitivelor verificate \u0219i de \u00eencredere. Dac\u0103 un dispozitiv criptografic nu trece verificarea, utilizarea acestuia \u00een institu\u021biile guvernamentale din SUA \u0219i Canada nu este recomandat\u0103.<\/p>\n<h2>2. Ce cerin\u021be de securitate impune certificarea FIPS?<\/h2>\n<p>\nSpargerea datelor chiar \u0219i de pe un disc criptat necertificat este dificil\u0103 \u0219i st\u0103 \u00een puterea doar a c\u00e2torva, iar atunci c\u00e2nd aleg un dispozitiv de stocare consumator pentru utilizare personal\u0103, nu este necesar s\u0103 \u00eengrijoreze prea mult certificarea. \u00cen sectorul business, situa\u021bia este diferit\u0103: atunci c\u00e2nd aleg dispozitive USB securizate, companiile adesea pun accent pe nivelurile de certificare FIPS. Totu\u0219i, nu to\u021bi au o imagine clar\u0103 despre ce \u00eenseamn\u0103 aceste niveluri. <\/p>\n<p>Standardul curent FIPS 140-2 define\u0219te patru niveluri diferite de securitate pe care le pot \u00eendeplini unit\u0103\u021bile flash. Primul nivel ofer\u0103 un set moderat de func\u021bii de securitate. Al patrulea nivel implic\u0103 cerin\u021be stricte privind autoap\u0103rarea dispozitivelor. Nivelurile doi \u0219i trei ofer\u0103 o grada\u021bie a acestor cerin\u021be \u0219i constituie un fel de mijloc de aur.<\/p>\n<ol>\n<li>Primul nivel de securitate: pentru unit\u0103\u021bile USB certificate la primul nivel, se preconizeaz\u0103 utilizarea unui algoritm de criptare sau a unei alte func\u021bii de securitate. <\/li>\n<li>Al doilea nivel de securitate: aici, unitatea trebuie nu doar s\u0103 asigure protec\u021bia criptografic\u0103, ci \u0219i s\u0103 \u00eenregistreze \u00eencerc\u0103rile neautorizate de acces la nivel de firmware, dac\u0103 cineva \u00eencearc\u0103 s\u0103 deschid\u0103 unitatea.<\/li>\n<li>Al treilea nivel de securitate: prevede prevenirea spargerilor prin distrugerea \u201echeilor\u201d de criptare. Adic\u0103, se cere o reac\u021bie \u00een urma tentativelor de intruziune. De asemenea, al treilea nivel garanteaz\u0103 un nivel mai ridicat de protec\u021bie \u00eempotriva interferen\u021belor electromagnetice: este imposibil s\u0103 cite\u0219ti datele de pe unitate folosind dispozitive wireless de hacking.<\/li>\n<li>Al patrulea nivel de securitate: cel mai \u00eenalt nivel, care presupune protec\u021bia complet\u0103 a modulului criptografic, asigur\u00e2nd o maxim\u0103 probabilitate de detectare \u0219i de reac\u021bie la orice \u00eencerc\u0103ri de acces neautorizat din partea utilizatorilor str\u0103ini. Unit\u0103\u021bile flash certificate la nivelul patru includ, de asemenea, op\u021biuni de protec\u021bie care \u00eempiedic\u0103 hackingul prin modificarea tensiunii \u0219i temperaturii ambientale.<\/li>\n<\/ol>\n<p>\nConform standardului FIPS 140-2, urm\u0103toarele unit\u0103\u021bi Kingston sunt certificate la nivelul trei: DataTraveler DT2000, DataTraveler DT4000G2, IronKey S1000, IronKey D300. Caracteristica principal\u0103 a acestor unit\u0103\u021bi este capacitatea de a reac\u021biona la tentativele de acces: dup\u0103 zece \u00eencerc\u0103ri gre\u0219ite de introducere a parolei, datele de pe unitate vor fi distruse.<\/p>\n<h2>Ce altceva pot face unit\u0103\u021bile flash Kingston, \u00een afar\u0103 de criptare? <\/h2>\n<p>\nC\u00e2nd vine vorba de securitatea deplin\u0103 a datelor, pe l\u00e2ng\u0103 criptarea hardware a unit\u0103\u021bilor flash, intr\u0103 \u00een joc antivirusurile integrate, protec\u021bia \u00eempotriva factorilor externi, sincronizarea cu cloud-uri personale \u0219i alte func\u021bionalit\u0103\u021bi despre care vom vorbi mai jos. Nu exist\u0103 o diferen\u021b\u0103 semnificativ\u0103 \u00eentre unit\u0103\u021bile flash cu criptare software. \u201eDiavolul\u201d se afl\u0103 \u00een detalii. Iat\u0103 care sunt acestea.<\/p>\n<p><b>1. Kingston DataTraveler 2000<\/b><\/p>\n<p><img decoding=\"async\" alt=\"De ce sunt necesare stick-urile USB cu criptare hardware?\" src=\"\/wp-content\/uploads\/2020\/09\/a1c47ccd1206c8bd962c359f6e0c74ef.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nS\u0103 lu\u0103m, de exemplu, o unitate USB <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstonDatarraveler2000Habr\">Kingston DataTraveler 2000<\/a><\/noindex>. Este una dintre unit\u0103\u021bile flash cu criptare hardware, dar este \u0219i singura cu o tastatur\u0103 fizic\u0103 integrat\u0103 pe carcas\u0103. Aceast\u0103 tastatur\u0103 cu 11 butoane face ca DT2000 s\u0103 fie complet independent de sistemele gazd\u0103 (pentru a folosi DataTraveler 2000, trebuie s\u0103 ap\u0103sa\u021bi butonul \u201eCheie\u201d, apoi s\u0103 introduce\u021bi parola \u0219i s\u0103 ap\u0103sa\u021bi din nou butonul \u201eCheie\u201d). \u00cen plus, aceast\u0103 unitate flash are un grad de protec\u021bie IP57 \u00eempotriva apei \u0219i a prafului (spre surprinderea tuturor, Kingston nu men\u021bioneaz\u0103 acest lucru nici pe ambalaj, nici \u00een caracteristicile de pe site-ul oficial).<\/p>\n<p>\u00cen interiorul DataTraveler 2000 se afl\u0103 o baterie litiu-polimer (cu o capacitate de 40 mAh), iar Kingston recomand\u0103 cump\u0103r\u0103torilor s\u0103 se conecteze unitatea la un port USB timp de cel pu\u021bin o or\u0103 \u00eenainte de a \u00eencepe utilizarea, astfel \u00eenc\u00e2t bateria s\u0103 se poat\u0103 \u00eenc\u0103rca. Apropo, \u00een unul dintre materialele anterioare <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/519268\/\">am explicat ce se \u00eent\u00e2mpl\u0103 cu o unitate flash care se \u00eencarc\u0103 de la un power bank<\/a><\/noindex>: nu trebuie s\u0103 v\u0103 face\u021bi griji \u2013 \u00een dispozitivul de \u00eenc\u0103rcare, unitatea flash nu se activeaz\u0103, deoarece nu exist\u0103 cereri c\u0103tre controller din partea sistemului. A\u0219adar, nimeni nu v\u0103 va fura datele prin intermediul unor interven\u021bii wireless.<\/p>\n<p><b>2. Kingston DataTraveler Locker+ G3<\/b><\/p>\n<p><img decoding=\"async\" alt=\"De ce sunt necesare stick-urile USB cu criptare hardware?\" src=\"\/wp-content\/uploads\/2020\/09\/fb25f5a5b82d6f87cef9a154040b0238.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDac\u0103 discut\u0103m despre modelul Kingston <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstoneDatatravelerLockerPlusG3Habr\">DataTraveler Locker+ G3<\/a><\/noindex> \u2013 acesta atrage aten\u021bia prin posibilitatea de a configura backup-uri ale datelor de pe unitate \u00een stocarea cloud Google, OneDrive, Amazon Cloud sau Dropbox. Sincronizarea datelor cu aceste servicii este, de asemenea, prev\u0103zut\u0103. <\/p>\n<p>Una dintre \u00eentreb\u0103rile pe care le primesc cititorii este: \u201eCum pot recupera datele criptate din backup?\u201d. Este foarte simplu. C\u00e2nd se face sincronizarea cu cloudul, informa\u021bia este decriptat\u0103, iar protec\u021bia backup-ului \u00een cloud depinde de capabilit\u0103\u021bile cloudului \u00een sine. Prin urmare, astfel de proceduri se efectueaz\u0103 exclusiv la discre\u021bia utilizatorului. F\u0103r\u0103 permisiunea sa, nu se va face niciun export de date \u00een cloud.<\/p>\n<p><b>3. Kingston DataTraveler Vault Privacy 3.0<\/b><\/p>\n<p><img decoding=\"async\" alt=\"De ce sunt necesare stick-urile USB cu criptare hardware?\" src=\"\/wp-content\/uploads\/2020\/09\/b0151c58494eaafd5a54e323b586747f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nIat\u0103 c\u0103 dispozitivele Kingston <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstonedatatravelerVaultPrivacy30Habr\">DataTraveler Vault Privacy 3.0<\/a><\/noindex> sunt echipate \u0219i cu un antivirus Drive Security de la ESET. Acesta protejeaz\u0103 datele de atacurile viru\u0219ilor, programelor spyware, troienilor, \u201eviermilor\u201d, rootkit-urilor \u0219i conexiunile la computerele str\u0103ine, f\u0103r\u0103 fric\u0103. Antivirusul va alerta imediat proprietarul unit\u0103\u021bii despre amenin\u021b\u0103rile poten\u021biale, dac\u0103 acestea sunt descoperite. Utilizatorul nu trebuie s\u0103 instaleze software antivirus separat \u0219i s\u0103 pl\u0103teasc\u0103 pentru aceast\u0103 op\u021biune. ESET Drive Security este preinstalat pe unitatea flash, av\u00e2nd o licen\u021b\u0103 pe cinci ani. <\/p>\n<p>Kingston DT Vault Privacy 3.0 este conceput \u0219i destinat \u00een principal speciali\u0219tilor IT. Permite administratorilor s\u0103-l foloseasc\u0103 ca un dispozitiv de stocare autonom sau s\u0103-l adauge ca parte a unei solu\u021bii de gestionare centralizat\u0103, precum \u0219i s\u0103 fie utilizat pentru configurarea sau resetarea de la distan\u021b\u0103 a parolelor \u0219i configurarea politicilor dispozitivelor. Kingston a ad\u0103ugat chiar \u0219i USB 3.0, care permite transferul de date protejate mult mai rapid dec\u00e2t prin USB 2.0.<\/p>\n<p>\u00cen general, DT Vault Privacy 3.0 este o op\u021biune excelent\u0103 pentru sectorul corporativ \u0219i organiza\u021biile care necesit\u0103 maxim\u0103 protec\u021bie a datelor lor. De asemenea, poate fi recomandat tuturor utilizatorilor care folosesc computere \u00een re\u021bele publice.<\/p>\n<p>Pentru mai multe informa\u021bii despre produsele Kingston, v\u0103 rug\u0103m s\u0103 contacta\u021bi <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstoneDatatrevelerFlashUSBHabr\">site-ul oficial al companiei<\/a><\/noindex>.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/521084\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043d\u0430\u0448\u0438\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u043f\u0440\u043e \u0444\u043b\u0435\u0448-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0434\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441: \u201c\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u0430 \u0444\u043b\u0435\u0448\u043a\u0430 \u0441 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043a\u043e\u0433\u0434\u0430 \u0435\u0441\u0442\u044c TrueCrypt?\u201d, \u2013 \u0438 \u0434\u0430\u0436\u0435 \u0432\u044b\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u044f \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0442\u043e\u0433\u043e \u201c\u041a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0432 \u0441\u043e\u0444\u0442\u0435 \u0438 \u0445\u0430\u0440\u0434\u0432\u0430\u0440\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f Kingston \u043d\u0435\u0442 \u0437\u0430\u043a\u043b\u0430\u0434\u043e\u043a?\u201d. \u041c\u044b \u0435\u043c\u043a\u043e \u043e\u0442\u0432\u0435\u0442\u0438\u043b\u0438 \u043d\u0430 \u044d\u0442\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u044b, \u043d\u043e \u0437\u0430\u0442\u0435\u043c \u0440\u0435\u0448\u0438\u043b\u0438, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95489,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95488","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u044b \u0444\u043b\u0435\u0448\u043a\u0438 \u0441 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-30T05:42:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-30T05:42:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47De ce sunt necesare unit\u0103\u021bile flash cu criptare hardware? | ProHoster","description":"Salut, Habr!","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u044b \u0444\u043b\u0435\u0448\u043a\u0438 \u0441 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c? | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-30T05:42:29+00:00","article:modified_time":"2020-09-30T05:42:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95488","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:04:41","updated":"2022-09-28 09:04:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95488","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=95488"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95488\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/95489"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=95488"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=95488"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=95488"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}