Best way to deal with Encrypted USB user authentication

Asked Jun 03 '18 at 23:31

Active Jun 03 '18 at 23:40

Viewed 148 times

So I'm working with a client who wants the absolute highest level of security for his project.

I pitched him the idea of hardware user authentication with one of those encrypted USB drives with the keypads on them. The system is completely isolated from any network, as well as all physical access is biometrically secured.

I was thinking of using pamusb in conjunction with something like this USB drive from Amazon.

The only question I had was "Is the USB going to unlock the user without putting in the password?"

I'm not exactly sure how pamusb works, but if all it does is check UUID of the drive, then it might not work the way I might want. If anybody has experience with pamusb or encrypted flash drives, thanks!

edited Jun 03 '18 at 23:40

jrtapsell

3,207
16
30

asked Jun 03 '18 at 23:31

Matanya

2

Why are you preferring using encrypted USB drives over smart cards or devices that act similarly? – jrtapsell Jun 03 '18 at 23:45
Because enterprise hardware is getting in the way of the budget, if you know what I mean. – Matanya Jun 03 '18 at 23:46
Would U2F + local password be an acceptable way of authenticating? – jrtapsell Jun 03 '18 at 23:48
I'm sure there are many ways of being secure, I would just like to know how my system would work. – Matanya Jun 03 '18 at 23:49
How much of the USB is accessible before the PIN is entered? – jrtapsell Jun 03 '18 at 23:56
It's on the person, and that's why I'm asking. – Matanya Jun 03 '18 at 23:57
Let us continue this discussion in chat. – jrtapsell Jun 03 '18 at 23:59
Can you check if you are able to join the chat? – jrtapsell Jun 04 '18 at 00:00

Best way to deal with Encrypted USB user authentication

0 Answers0