DESlock+ provides to individuals a shared-key architecture that allows them to encrypt files, folders, E-mails or entire compressed archives and share those encrypted documents with other authorized DESlock+ users.
The product leverages an architecture in which each user possesses a collection of encryption keys (up to 64) stored in either a purpose-designed USB token available from the vendor, or a software key-file (the key-file can reside on the user′s hard drive or a removable USB drive). Users can create keys to share with other users (provided they have permission to do so), allowing them to encrypt/decrypt each other′s documents (the analogy is similar to the protection of one′s home; to let others in, you provide them with a copy of your key). Keys that are created for sharing with others are copied to other tokens or key files via RSA 1024-bit public-key exchange; transferred keys will work only on the token that they were intended for. Access to the tokens themselves is protected via two-tier password authentication. 数据挖掘研究院
When creating keys, the user/administrator also selects the encryption algorithm that will be associated with that key (any information encrypted with that key in the future will use the specified algorithm). Current choices include 128-bit AES, 112-bit 3DES, and 128-bit Blowfish. 数据挖掘研究院
With an authenticated USB token or key-file, the user can utilize multiple encryption capabilities for their shared or personal data, including:
- Creation of encryption folders; files dragged into these folders (or sub folders) is automatically encrypted and files dragged out of the folder is unencrypted. The folder itself can be automatically hidden when the user logs out.
- Encrypted E-mail transmissions, via Microsoft Outlook and Lotus Noted plug-ins. For support of other E-mail clients (and the ability to encrypt/decrypt segments of any text document), DESlock+ includes a plain text encryption/decryption tool, accessible via hotkeys. 数据挖掘实验室
- Encrypted Mountable Files, which appear and are used as disk volumes in Windows
- Archive creation; wherein an entire directory tree can be compressed and encrypted into a single storable archive file 数据挖掘研究院
Other features include a shredder tool for deletion of data; right-click context menu features for encryption of individual files; and support for synchronization of offline encrypted folders. Additionally, the USB tokens offered by the vendor include a "scratchpad" wherein the user can store their own password or PIN information (only 2K of space is included, however).
New to the DESlock+ product offering is the Administrator′s Tool, a centralized component that allows for the management of user keys and encryption permissions. The tool allows a security administrator to configure multiple DESlock+ licenses and to define and manage company-wide groups and user-rights so that specific documents can be viewed only by authorized individuals. The administrator′s tool additionally allows the admin to restrict the ability of end users to generate new keys (in this scenario, the user would have to request a new key from the admin, who would then distribute it to the necessary tokens). 数据挖掘研究院
DESlock+ is available now. 8-Key licenses are available beginning at $46.75 per user; and 64-Key licenses are priced at $74.80. Volume discounts are available. The new administrator′s tool is priced at $365, which includes a USB token (required). Customers who purchase 100 or more DESlock+ licenses receive the administrator′s tool free.
A 60-day free trial and a free license for personal use (up to 4 keys) are also available.
Visit the Data Encryption Systems Web site for further information.
product submission by EITPlanet Staff
