Department of Electrical & Computer Engineering Advisor: Michael Zink

Department of Electrical & Computer Engineering Team Organization Project Lead: Fadi Maalouli Web & Software Development: Brigit Lyons Software Development: Anthony Panetta Hardware Development: Renzo Silva 2

Department of Electrical & Computer Engineering Outline Problem Statement Existing Products Our Solution Overall Operation Security Analysis Description of Main Components  Requirements  Implementation  Cost Design Challenges MDR Deliverables 3

Department of Electrical & Computer Engineering Problem Statement Hard drives contains a lot of information Easy to lose or get stolen Secure Important Data on your Hard Drive  Thieves  Hackers  Coworkers Secure Personal Data  From Family members  From Friends 4

Department of Electrical & Computer Engineering Existing Product Software that encrypts your entire Hard Drive  TrueCrypt  SafeGuard® Easy  SafeHouse Explorer  Seagate Self-Encrypting Drives They have static password protection  Not effective 5

Department of Electrical & Computer Engineering Our Approach Secure any non-bootable SATA HDD Use phone as hard token to lock/unlock data stored on HDD Locking/Unlocking requires 2-tiered user password authentication, hardware authentication, and physical locality 6

Department of Electrical & Computer Engineering Design Overview Website Account Database Bluetooth Module 7

Department of Electrical & Computer Engineering Typical Use Scenario Website Account Database Bluetooth Module

Department of Electrical & Computer Engineering Security Concerns Database hack Phone identity spoofing Eavesdropping Brute force attack to crack encryption 9

Department of Electrical & Computer Engineering System Components Server Android Application Bluetooth Module 10

Department of Electrical & Computer Engineering Server User Accounts Database Query Database Website User Account Administration Encryption Module Message to Phone Message from Phone 11

Department of Electrical & Computer Engineering Server Website provides interface for account administration Create account, change password, register Bluetooth module/Phone, etc. Communications to and from website will be encrypted Decrypted only by Bluetooth module Database as backend of website User account information Registered phone IDs Registered Bluetooth modules Encryption keys 12

Department of Electrical & Computer Engineering Android Application Convert Bluetooth Packet to Wireless (WiFi/3G) Packet Convert Wireless (WiFi/3G) Packet to Bluetooth Packet Account Login/Validation Login Phase HDD Usage Phase Android Message To Bluetooth Module Message From Bluetooth Module Message To Bluetooth Module Message To Website Message From Website 13

Department of Electrical & Computer Engineering Android Application Communication with Bluetooth module Detect and register Bluetooth modules Lock/unlock message Encrypted communications Communication with website Convert between Bluetooth packets and wireless (WiFi/3G) packets Access user account and gain information to communicate with selected Bluetooth module Encrypted communications The phone will not be able to decrypt Only relays encrypted messages between website and Bluetooth module Develop using the Android SDK Eclipse plugin 14

Department of Electrical & Computer Engineering Dynamic Encryption Encrypted network communications 128-bit AES encryption Database and Bluetooth module share an encryption key Key changes upon unlock Website creates new key New key encrypted using old key Bluetooth module decrypts and stores new key Provides another layer of protection against attackers 15

Department of Electrical & Computer Engineering Hardware Structure Unlock Power Up SecurityReport. Doc ClientSS.doc Account #’s Decryption Request Retrieve Key Decrypt File Make File Names Available Bluetooth Device     16

Department of Electrical & Computer Engineering Security Lock Controller Processor BlueCore 5MM with 8MBit internal flash 512k EEPROM Power Supply 5V regulated stand-alone Lithium rechargeable battery, 4.2V, mAH 3V primary cell Bluetooth Module: AIRcable SMD Wirelessly Programmable Micro Controller Event Handling 4 Simultaneous Connections PIN code request PIN code limit: 15 characters Performance max 1000 lines per second Port Access Parallel IO ports, 12 ports TTL level, 5V tolerant 17

Department of Electrical & Computer Engineering Data Encryption SeriesIntel Atom Clock Rate1600 MHz Front Side Bus 533 MHz Level 1 Cache56 KB Level 2 Cache 512 KB Max. Power 2.5 Watt 18

Department of Electrical & Computer Engineering Design Challenges and Limitations Hardware and Software Security Small, Fast and intuitive interface Encrypting at a minimum speed of 3Gb/s Interfacing with the operating system 19

Department of Electrical & Computer Engineering Cost Analysis AIRCable SMD$60 Intel Atom$40 Web Hosting$5/month Sata receptacle (data/power) $2.5/each The Sata Cables (power/data) $2.5/each 20

Department of Electrical & Computer Engineering Deliverables for MDR Working encryption algorithm Basic phone application Basic Bluetooth communication Design of Bluetooth module 21

Department of Electrical & Computer Engineering Questions? 22