Kobra VS Introduction
Kobra VS are external encrypted hard disks and USB-C memory sticks with approval by the German Federal Office for Information Security (BSI) for classified data.
These are the only devices on the market that we are aware of that require MFA to unlock. Drives are unlocked using a PKI cryptographic smart card and a PIN that is assigned to a specific user. The card reader is built in. It comes with a management application that will allow an administrator to configure each device, assign a smart card to a device, whether it can only read or read and write, manage timeout and lockout functions, etc. They are entirely GDPR compliant and can be shipped easily as long as the smart card is not included. All the encryption and decryption happen on the device on the fly, only after the user has successfully been authenticated. Until the user is authenticated, all any computer sees is an unknown device drawing power; it won’t even recognize it as a storage medium. Once the user has authenticated, every device sees a plain old USB mass storage device. So if a device can use a generic USB thumb drive, these drives are compatible with it, so the use cases are endless.
In addition to Kobra Infosec smartcards, existing PKI-based company ID, Service, and Troop ID smartcards can be used for authentication. Identity cards from Auðkenni are not yet compatible, but a fix for that will be in the next release. If your existing ID cards aren’t compatible, that is an easy fix.
In terms of confidentiality, all data stored on the KOBRA VS storage device is protected against unauthorized access in case of loss or theft of the device.
The following security mechanisms assure the confidentiality of the data:
- Encryption: 256-bit AES full-disk hardware encryption in XTS mode using two 256-bit crypto keys
- Access Control: Two-factor authentication via smartcard and PIN according to the principle “having and knowing”
- Cryptographic Keys Management: Administration of the cryptographic keys by the Users: Create, Modify, and Destroy
Kobra VS Encrypted storage technical information:
- Integrated power supply
- Execution of many functions without a PC connection
- Simple operation, maintenance, and support free
- Modern USB-C connection
- Compatible with USB 3.0 & 2.0
- Operating system independent and bootable
- No performance limitations
- Up to 8 smartcards (PKI cards) can be configured per device
- Automatic encryption of all data, boot sectors, temporary files, and partitions in real time
- Automatic formatting after key change
- Read-Only Mode mechanism
- Time out function (1 to 30 minutes)
- Lock-Out and Quick-Out functions
- Sturdy metal housing protected against splash water
Optional Configuration (special order):
- Laser engraving of logo, inventory numbers, scanable QR codes, designations, or similar according to the customer
- Custom USB VID, PID & Serial Number
- Integration of other PKI-based ID cards or smartcards from the client
