LoTech Security: Wheel Locks & WoJack for the Wireless

Okay, your wireless network is wrapped up tighter than a drum and your laptop is practically impregnable. Then you zone out and forget your computer at Starbucks or, worse, somebody steals it. No matter how tech we get, stuff happens; people just lose things. Data at rest is at risk if the device is lost. Here are two radically different cures for this problem:

Pointsec and Smartner provide peace-of-mind that the data will not fall into the wrong hands. The solution combines Pointsec's FIPS encryption with Smartner's Always-On Mail to centrally manage security policies for mobile devices and push out changes and updates. It uses 128-bit AES (Advanced Encryption Standard) to protect data.

When the screen times out, anyone who can’t verify authenticity cannot access any data, while legal users merely have only to log in to re-authenticate themselves.

Paradoxically, wireless data may be safer than information stored in handheld devices because so many of them are lost or stolen and never recovered. One survey revealed that over 200,000 handhelds were lost in taxis in Chicago alone in 2004. Coupled with FBI statistics that indicate that fewer than one in 30 stolen laptops are recovered, the danger of lost data takes on almost drastic proportions.

Coming from another angle, Apple guru Steve Wozniak has introduced "wOz Location-Based Encryption," an application that uses GPS. Hundreds of thousands of notebooks and laptops are stolen or lost every year and 98 percent are never recovered.

With wOz Location-Based Encryption, companies can guard against the unauthorized removal of data outside of safe zones by using broadband Wi-Fi GPS tracking tied to the proprietary wOzNet, which serves as a local wireless network. The application uses a dongle, a device that controls access to applications, attached to the laptop to communicate wirelessly with a base station. The location of the laptop is known at all times and access is denied if a safe zone is breached.

When the employee logs in, the device automatically requests valid zone information from the dongle. Once the preset zones are approved, the dongle regularly requests GPS positioning as a key to decrypting data to allow access. Once everything clears approval, the dongle decrypts the data, automatically blocking an employee or a thief from picking up a laptop and moving out of a building without approval. Once the computer is removed from the physical zone, the keys are lost or unavailable, and the hard disk is gibberish. If the dongle is removed, the base station automatically detects it.  In addition, it’s possible to trace the movements of computer by back-tracking through the device location history to home in on its general location.

Lost and found has gone hi-tech.