DG-HS256S3-500S

External high-security hard drive HS256 S3 SSD

Professional solution for authorities and companies

The portable high-security HS256 S3 SSD enables data protection-compliant storage, sending and archiving of sensitive and personal data at authorities and companies. It's faster, safer, and more robust than any other HS hard drive.

The elegant and robust 2.5-inch aluminum housing protects against mechanical influences and electromagnetic waves. The USB3.0 connection ensures fast data transfer when reading and writing.

The BSI certification confirms that you can entrust your particularly sensitive data to this hard drive. In addition, with this hard drive you meet the strictest requirements of the Federal Data Protection Act (BDSG) and the European Data Protection Regulation (EU-DSGVO) with regard to the secure storage of personal data.

The information stored on the HS256 S3 SSD is protected against unauthorized access, for example if the hard disk is lost or stolen, or in the event of logical or physical attacks, with regard to the confidentiality of the information.

The Digittrade HS256 S3 SSD ensures the confidentiality of the data through the following security mechanisms

• Encryption
• Access control
• Management of cryptographic keys

Security mechanisms and special features:

Encryption

The encryption module integrated in the security housing carries out a complete encryption of the hard disk.

Every saved byte and sector on the drive is encrypted with 256-bit Advanced Encryption Standard (AES) in XTS mode with two 256-bit cryptography keys.

It also encrypts all temporary files and areas that encryption software often overlooks.

Access control

The access control is based on the principle of ""possession and knowledge"": The user must have a suitable smart card and the correct PIN in order to access the data.

The smart card is automatically blocked and unusable as soon as the 8-digit PIN has been entered incorrectly eight times. The cryptographic keys on the smart card are irrevocably destroyed. The data on the hard drive will still be stored securely. This data can then be accessed with the second smart card and the valid PIN.

Encryption key

The user can use the crypto key himself:

• Create
• Change
• Copy
• To destroy

Management of the cryptographic keys

The two 256-bit crypto keys are generated on the smart card. The certified chip card has a very intelligent DRG3 random generator for this purpose.

The keys are then saved on the smart card separately from the hard drive and only transferred to the hard drive's cryptographic module for encryption or decryption of the data.

The user can copy these keys to the other chip cards and destroy them if necessary.

Smart cards

The hard disk is supplied as standard with two Java-based chip cards NXP J2E081 JCOP v2.4.2 R3 EAL5. They are certified by the Federal Office for Information Security (BSI) according to EAL5 and enable the creation, copying, modification and destruction of cryptographic keys. The key management is carried out on the smart card independently of the PC with the support of the DIGITTRADE HS256 S3 applet.

In the event of any kind of manipulation attempt, the encryption keys on the smart card are destroyed and the smart card is automatically and irrevocably deleted. The data on the hard disk is saved and can be called up and edited with the help of the second smart card after entering the correct PIN.

Management software Smartcard Manager 2

The DIGITTRADE Smartcard Manager 2 is available separately and gives you a central overview of all your DIGITTRADE high security hard drives, smart cards and cryptographic keys. With this extensive management software you can completely record these high security hard disks. By showing a company structure, employees, departments and locations can be assigned to the respective information. This allows you to add the hard drives and smart cards to the respective employees and the respective departments. Existing information can be updated.

You also have the option of managing your smart cards directly on the PC. The smart cards can be synchronized, new cryptographic keys can be created, changed and deleted, and the smart card PIN can be changed.

Supported Operating Systems

The hard disk is independent of operating systems and is bootable. This enables not only the storage of the data, but also the operating systems and programs on this hard drive. This means that the HS256S can be used on all devices with USB support.