3. Data storage security on USB flash drives

The first threat to the user is the loss of data and any sensitive information relating to the holder's identity (e-mail account settings, website passwords, etc.) when the key itself is lost or stolen.

While professional solutions include functions for remotely disabling lost or stolen USB flash drives, consumer solutions must cover this risk in two ways:

• protection of the key by an encryption system included by the key supplier (Kingston, Sandisk, Ironkey), protecting the entire content using a symmetrical encryption algorithm. The user must set up a password when the key is first launched. Be careful not to leave the factory default password!

• the alternative is to define an encryption zone on the USB key, using the Truecrypt tool (see [Doc. TE 7 720]). A specific volume (virtual...