USBK - CryptoBridge A101 User manual

User Guide Ver:1.1 Page:
1
USBK - CryptoBridge
USER GUIDE
Version: 1.2
Models: A101
A103
For more product information, please visit
www.usb-k.com

User Guide Ver:1.1 Page:
2
Contents
Contents .............................................................................. 2
Introduction......................................................................... 6
Technical & Security Notes ................................................... 7
Key things to know about your USBK- CryptoBridge .................................................................. 7
Best Practices ........................................................................................................................... 8
Overview ............................................................................. 9
Security Label Sticker) as Seal .................................................................................................. 9
Package Content ...................................................................................................................... 9
Identifying Parts ....................................................................................................................... 9
About USBK Models ............................................................................................................... 10
Introducing USBK ................................................................................................................... 10
Definitions ................................................................................................................................................... 10
States (Modes) of USBK ............................................................................................................................... 10
Types of Users ............................................................................................................................................. 11
How USBK protects your data ................................................................................................. 11
System Requirements ............................................................................................................. 11
Getting started .................................................................. 3
Before You Begin .................................................................................................................... 13
About Drive Mapping .................................................................................................................................. 13
ontrol Panel of USBK Management Software ........................................................................................... 13
Initializing with a USBK ........................................................................................................... 14
Personalizing a USBK ................................................................................................................................... 14
Starting with your BackDisk ......................................................................................................................... 17
Day to Day Using of USBK .................................................. 9
Activate / Deactivate your USBK ............................................................................................. 19
Activate your USBK ...................................................................................................................................... 19
Deactivate your USBK .................................................................................................................................. 19
Usage of BackDisk .................................................................................................................. 20
Understanding USBK status via LEDs ....................................................................................... 20
Managing User Authentication .......................................... 22
Changing your password ......................................................................................................... 22
Forgetting your password ....................................................................................................... 23
Auto-Activation Property ........................................................................................................ 23
Managing USBK(s) ............................................................. 25

User Guide Ver:1.1 Page:
3
Recycling a USBK .................................................................................................................... 25
Changing Device USBK) Name ................................................................................................ 25
Changing Key Name s) on USBK .............................................................................................. 26
Viewing device information .................................................................................................... 26
Using USBK on Linux .......................................................... 28
Getting started for Linux ......................................................................................................... 28
Installing Linux LI Software ........................................................................................................................ 28
Using USBK Linux LI Software .................................................................................................................... 29
Initializing with a USBK ........................................................................................................... 29
Personalizing a USBK ................................................................................................................................... 29
Starting with your BackDisk ......................................................................................................................... 31
Day to Day Using of USBK ....................................................................................................... 31
Activate / Deactivate your USBK ................................................................................................................. 31
Usage of BackDisk ........................................................................................................................................ 32
hanging your password ............................................................................................................................. 32
Forgetting your password ............................................................................................................................ 32
Auto-Activation Property ............................................................................................................................. 32
hanging Device (USBK) Label ..................................................................................................................... 33
hanging Only Key Name(s) on USBK .......................................................................................................... 34
Using USBK with Text Editor .............................................. 35
Getting Started ....................................................................................................................... 36
Personalizing a USBK ................................................................................................................................... 36
Starting with your BackDisk ......................................................................................................................... 39
Day to Day Using of USBK ....................................................................................................... 40
Activate / Deactivate your USBK ................................................................................................................. 40
Usage of BackDisk ........................................................................................................................................ 41
hanging your password ............................................................................................................................. 42
Forgetting your password ............................................................................................................................ 42
Auto-Activation Property ............................................................................................................................. 42
hanging Device (USBK) Name .................................................................................................................... 43
hanging your encryption key(s) ................................................................................................................. 44
Viewing device information ......................................................................................................................... 45
Using USBK with a USB Hub ............................................... 46
Troubleshooting (FAQ) ....................................................... 47
USBK.exe program doesn’t work. What can I do? .................................................................... 47
How can I recover my Encryption Key if I forget it? .................................................................. 47
My BackDisk plugged-in USBK recognized as unformatted. Why? ............................................ 47
The file that I saved to USBK disk is lost. Why? ........................................................................ 47
I have two partitions on my BackDisk. Can I use one partition encrypted with USBK and other
partition as regular? ............................................................................................................... 47
How long does it to format my 300GB external harddisk by USBK? .......................................... 47
How can I read data on my BackDisk if I lost my USBK? ........................................................... 47

User Guide Ver:1.1 Page:
4
Who are we? ..................................................................... 48
Contact Information .......................................................... 48
Appendix: USBK policy settings .......................................... 49

User Guide Ver:1.1 Page:
5
Revision History
Version
Date
Comments
Ver: 1.0 23.03.2011 Initial Publication
Ver: 1.1 24.03.2011 “About USBK Models” part of this guide is revised
Ver: 1.2 23.05.2011 “Using USBK on Linux” and “Using USBK with Text
Editor” parts of this guide is revised.
NOTE: Please visit our website www.usb-k.com to obtain the latest version of this document.

User Guide Ver:1.1 Page:
6
Introduction
Thank you for your interest in USBK - CryptoBridge. This document will help you become
familiar with it.
USBK - CryptoBridge offers the following benefits:
•Built security features on ordinary USB flash drives and USB external harddisks.
•Secures your removable data by hardware-based encryption (AES 128-bit and AES
256 bit).
•Offers you unlimited capacity as there is no restriction on quantity and size of USB
drives that you use with your USBK.
•Compatible with a wide range of hosts, independent from operating system.
•Does not require installation driver or software on host.
•Possible to use on test & measurement equipments such as oscilloscope, EKG, etc.
with its auto-activation property.
•Easy-to-use and affordable.
This guide provides instructions for Windows. Procedures that are OS-specific (Operating
System specific) carry the OS name. Procedures that do not specifically mention the OS
apply to Windows.
Additionally, this guide is valid for all models of USBK on page 10. Procedures that are
specific for model is emphasized with comments including the model name.
We made use of special conventions which will guide you throughout the entire document.
The purpose of each convention is explained below:
! CAUTION: This convention is used when there is a topic related to data security and/ or
situation which may result in loss of data and vulnerability.
NOTE: This convention is used when a topic has a helpful note or additional information that
is possibly essential or complements the main text.
Tip: This convention is used when there’s an alternative way to do so with expressed
instructions.

User Guide Ver:1.1 Page:
7
Technical & Security Notes
Key things to know about your USBK- CryptoBridge
! On-the fly Encryption – Always
When you use your USBK, all data encryption/decryption is performed automatically and
absolutely transparent to you. It cannot be disabled.
! Fabric Default
You must personalize your before you start to use it. You are forced to set new password at
first usage.
After this password setting, random encryption key(s) is assigned on your USBK. That’s why,
it is strongly recommended to set your encryption key(s) and take in care the notes here at
Encryption key(s).
! Password protected
Do not share your password with anyone- keep it secret.
! It's Self-destruct
After 3 wrong password attempts, USBK erases all your encryption key(s) and password,
returns back to Fabric Default. You are forced to set new password same as at first usage.
Take in care the notes here at Fabric Default.
! Encryption key(s)
After setting/changing your encryption key(s), write down encryption key(s) in note for future
reference, but remember to keep it confidential. There’s no way to recover encryption key(s)
as they are never exported or displayed during usage of USBK. A lost of encryption keys
results in lost of data on BackDisk. Therefore, it is very important that you remember the
encryption key(s) or store it in a safe place.
! Format at first-time use of BackDisk
You must format your BackDisk (USB stick / USB external harddisk) when it is the first time
use with your new encryption key(s).
! Use only on trusted HostSytems
HostSystem should be protected against virus, trojan, malware or any type of network
attacks which can compromise the security of data transfer between the HostSystem and
USBK. Operational environment should also be trusted.
Any person, any application or software that use the open platform of computer can access
the BackDisk and become a user when USBK is in “Activate” state.
! Take more care when your USBK in ‘Auto-Activation”
If you carry and lose your BackDisk plugged-on your USBK in “Auto-Activation Enabled”, any
user can access your data on your BackDisk when he plug in the computer as no password
is asked to verify user. Just carry only your USBK when “Auto-Activation Enabled” for the
security of data on your BackDisk.

User Guide Ver:1.1 Page:
8
Best Practices


 Physically securing
You can physically secure your USBK on keychain or use lanyard provided.


 Read user guide
This document will help you become familiar with your USBK and secure usage. You can
obtain the latest version of user guide on our website www.usb-k.com.


 Renaming your USBK
You can optionally change the name of your USBK so that you will be able to identify them
easily when you plug.


 Giving name to encryption key(s)
You can optionally give name for your encryption key(s) for easy usage.


 Encryption keys per your BackDisks
Keep in mind which encryption key is used for your each BackDisk in order to prevent disk
confusion. There is no support on USBK for this point.

User Guide Ver:1.1 Page:
9
Overview
Security Label (Sticker) as Seal
Check the security label and examine the packaging.
USBK carton box has a security label as seal that need to be cut or removed before it can be
opened. The label is positioned over the opening port of the carton box to ensure that you
are purchasing a genuine USBK.
If you see that the security label is removed or damaged, please contact with your supplier
immediately.
Package Content
Your USBK package includes:
Accessory
Qty
USBK-CryptoBridge 1
Removable Lanyard 1
USB (A male to A female) Retractable Extension Cable 2.0
1
Download Instruction for User Guide 1
If any item is missing or damaged, please contact with your supplier immediately.
Identifying Parts
This part helps you to become familiar with your USBK – CryptoBridge and its parts.

User Guide Ver:1.1 Page:
10
About USBK Models
The following table provides a brief description about each USBK models.
Device
Model
Description
A101 1 encryption key is created
A103 Up to 3 Encryption keys can be created
3 adet şifreleme anahtarı desteklenir
Introducing USBK
USBK - CryptoBridge is an on-the-fly encryption device featuring two USB ports which
establish and maintain encrypted link between HostSystem and BackDisk. It is equipped with
a USB Type A receptacle for attaching your BackDisk, a USB Type A plug for attaching to
your HostSystem.
Definitions
HostSystem: The system on which the USBK is plugged and used. It can be a desktop PC,
laptop PC or test & measurement equipment such as oscilloscope, EKG, etc.
BackDisk: All kind of USB flash drives and USB external hard drives plugged into the USBK
for secure data transfer. The capacity/ size of USB drive is not important, it can be in any
size in any brand name. Additionally, file system of USB drive is also not important. It can be
NTFS FAT/ FAT32 or EXT3/EXT4.
NOTE: USBK is not compatible with USB storage disks with multiple LUNs. The BackDisk
should be single LUN.
On-the-fly Encryption: It means that encryption is made always automatically and
transparently without user intervention and cannot be disabled. Data can be copied to/from a
mounted BackDisk at back of USBK just like they are copied to/from any normal USB drive
(for example, by simple drag-and-drop operations). Data that are being written or copied to
the BackDisk are automatically being encrypted on the fly. Similarly, data is automatically
being decrypted on the fly while it is being read or copied from a BackDisk.
States (Modes) of USBK
•Fabric Default (Initial State): This is the state that USBK is in Fabric Default. In this
state, the user is forced to set new password.
• Deactivate State: This is the state that, any user who knows the user password can
perform the tasks of USBK such as Deactivate key, setting/changing password,
setting/changing key(s) and key name(s), setting/changing device name (label) and
setting Auto- Activation property. 3 failed password attempts during these settings,

User Guide Ver:1.1 Page:
11
the USBK erases all your encryption key(s) and password; and returns back to Fabric
Default(Initial State).
•Activate State: This is the state that the BackDisk is accessible and used securely.
In this state, user has privileges just to perform Activate key Types of Users
Types of Users
With USBK - CryptoBridge, one user type is present as general users. General users are
typical device user who can authenticate USBK and save data securely to BackDisk.
General users have all privileges to perform all tasks of USBK such as Activate/Deactivate
key, setting/changing password, setting/changing key(s) and key name(s), setting/changing
device name(label) and setting Auto- Activation property.
! CAUTION: Any person, any application or software that use the open platform of computer
can access the BackDisk and become a user when USBK is in “Activate” state.
How USBK protects your data
In general, the USBK – CryptoBridge includes two main areas of protection:
1. Access to the USBK: controlled by the authentication mechanisms with password to
verify user. Password makes practically impossible for unauthorized people to access
your USBK and consequently your data on BackDisk.
For the password protection you are required to set a password on the first use.
Also, to protect against brute force password attacks, after 3 consecutive incorrect
password attempts, USBK securely erases all onboard data (your encryption key(s)
and password)
2. Protection of private data on BackDisk: provided by encrypting the data using
AES algorithm (FIPS PUB 197). USBK – CryptoBridge uses hardware-based
encryption and entire file system is encrypted for advance security. All USBK models
support the following AES key sizes: 128-bit and 256-bit. You are required to choose
the key size, set encryption key(s) accordingly. Encrypted data stored on your
BackDisk cannot be read (decrypted) without using correct encryption key(s).
System Requirements
USBK – CryptoBridge does not require installation of driver or software on HostSystem.
The following list describes the requirements of HostSystem and BackDisk that you need to
use your USBK:
HostSystem
USB Port
• USB 1.1 or USB 2.0 ( should be High Speed or Full Speed as Low Speed does
not support MSD interface)
Operating Systems
• All operating systems that support FAT16 file system and have a text editor such
a Notepad or any other
• Windows XP, 2000, Vista, 2007 (.NET 2.0 Framework dependent for windows
GUI)
• Linux (Ubuntu 10.10 for Linux CLI)

User Guide Ver:1.1 Page:
12
! CAUTION: HostSystem should be protected against virus, trojan, malware or any type of
network attacks which can compromise the security of data transfer between the HostSystem
and USBK. Operational environment should also be trusted.
BackDisk
USB Port
• USB 1.1 or USB 2.0
MSD (Mass Storage Device)
•All kind of USB flash drives and USB external hard drives as registered as USB
MSD having SCSI interface with a single LUN.

User Guide Ver:1.1 Page:
13
Getting started
Before You Begin
Before you use your USBK for the first time, it is important to understand how Windows maps
the USBK to your computer and how the software on the USBK is run.
About Drive Mapping
The USBK is mapped to the host file system using two drive letters. These drive letters are
assigned dynamically on a free letter basis.
One drive is labeled “USBK”. It contains the software for Windows GUI and ‘Text Menu’
directory for operation of USBK via a text editor such a Notepad or any other.
The other Drive is labeled as “Removable Disk”.
Before
•initializing your USBK at first time usage,
•user authentication at day to day usage,
the “Removable Disk” is inaccessible. When you try to access it, the following message
displays, “insert a disk into drive E:” where E is for the drive letter associated with your
BackDisk. After successful user authentication, it opens for read/write as your BackDisk.
Control Panel of USBK Management Software
USBK contains the USBK Management Software for Windows GUI. The “Control Panel”
supplies you simple-to-use interface for USBK operations and settings.
See below the main page of USBK Management Software for Windows GUI and will be
referred as Control Panel at the instructions hereafter.

User Guide Ver:1.1 Page:
14
Initializing with a USBK
Personalizing a USBK
You must personalize a new USBK the first time you use it as it is in Fabric Default.
Personalizing USBK involves two main steps - setting your password and creating your
encryption key(s).
You are automatically prompted to set new password at first usage. After this password
setting, random encryption key(s) is assigned on your USBK. That’s why, it is strongly
recommended to set your encryption key(s).
To personalize a USBK
1. Plug the USBK into the USB port of the computer.
When USBK is plugged in computer, the operating system recognizes automatically
and the AutoRun window appears.

User Guide Ver:1.1 Page:
15
2. Select Run USBK Management Software and double-click .
NOTE: This screen may not appear if computer does not allow the devices to autorun. For
this case; double-click on the USBK disk icon in My Computer and run USBK.exe.
To set your password
1. Type your password on dialog boxes New Password and New Password Again,
and click OK.
When you click Cancel, this Change Password window is closed without
completing password setting and the Control Panel of USBK appears.
NOTE: Password should be minimum 4 characters long and not exceed 16 characters. It
may contain three different types of characters: letters, numbers and special characters such
as punctuation marks, etc..
NOTE: After new password setting, random encryption key(s) is generated by USBK and
assigned on it. That’s why, it is strongly recommended to set your encryption key(s).
To set your encryption key(s)
1. On the Control Panel of USBK, click Encryption Keys in Settings.

User Guide Ver:1.1 Page:
16
2. Select the key that you want to set from Key combobox. (Valid for A103 model. If
you are using A101 model, pass directly to the next step).
NOTE: You can optionally type a name for your key in box Key Name. It is not mandatory nd
see “Changing Key Name(s) on USBK” part of this guide for more info. Be sure that "Change
Only Key Name" checkbox is not signed at this stage as it disables the generating AES key.
3. Select the key size from Key Size combobox.
4. Select key type Text or Decimal, enter your key to AES Key box accordingly and
click OK.
NOTE: For 128-bit AES key size; encryption key in ‘Text’ type must be 16 characters long
with letters, numbers and special characters such as punctuation marks, etc. Decimal is
formed of 16 numeric digits between 0 and 255, each digit separated with a dot. You can
follow up shown examples below AES Key box.
NOTE: For 256-bit AES key size; encryption key in ‘Text’ type must be 32 characters long
with letters, numbers and special characters such as punctuation marks, etc. Decimal is
formed of 32 numeric digits between 0 and 255, each digit separated with a dot. You can
follow up shown examples below AES Key box.
NOTE: USBK can generate the encryption key(s) on behalf of user. If you wish that, click
Generate button. Then, USBK generates a random encryption key and shows the generated
key on AES Key box. It is just one time the key is showed you and will not be displayed
again during daily usage of USBK. Therefore, memorize or store the generated key in a
safe (For example; write it down in note to remember in future)
! CAUTION: After setting/changing your encryption key(s), write down encryption key(s) in
note for future reference, but remember to keep it confidential. There’s no way to recover
encryption key(s) as they are never exported or displayed during usage of USBK. A lost of
encryption keys results in lost of data on BackDisk. Therefore, it is very important that you
remember the encryption key(s) or store it in a safe place.

User Guide Ver:1.1 Page:
17
5. Type your password in appeared password window and click OK.
If the password is correct, setting your encryption key(s) on USBK is done
successfully. Bubble message on notification area indicates this setting as “Changed
Successfully”.
Starting with your BackDisk
After you personalize your USBK, it is needed to format your BackDisk with your USBK.
NOTE: You must format your BackDisk when it is the first time use with your new encryption
key(s).
! CAUTION: Formatting your BackDisk erases all data on it. Before formatting it, be sure to
back up your files on it.
To start with your BackDisk
1. Plug your BackDisk port of your USBK.
2. Activate your USBK. To activate your USBK;
2.1. On the Control Panel of USBK, click Activate Key.
2.2. Select the key that you want to activate from Key combobox and click
Select.(Valid for A103 model. If you are using A101 model, pass directly to the
next step).
2.3. Type your password in appeared password window and click OK.
If the password is correct, activating your USBK is done successfully. Bubble
message on notification area indicates this as “Activated”.
Tip: You can also activate your USBK by right-clicking the USBK icon on the
notification area and clicking Activate Key. And then, follow up the same instructions
explained above starting from 2.2 Step.
3. Find Removable Disk in My Computer. When you double-click Removable Disk,
the operating system recognizes it as unformatted.
4. Format it by using one of following methods:
1. Disk Formatting Method
1. Right-click on labeled Removable Disk in My Computer, select Format.
2. There is a checkbox for Quick Format. Check it and click Start button.
! CAUTION: If you are formatting a used BackDisk which contains data currently, Quick
Format leaves file tracks on it. To clear all tracks from your Backdisk, not check the Quick
Format option

User Guide Ver:1.1 Page:
18
NOTE: If the 1. disk format method is not successful in anyway, try 2. disk format method
explained below.
2. Disk Formatting Method
1. Right-click on My Computer, select Manage and Computer Management window
appears.
2. Click Disk Management in the left pane of Computer Management window.
3. Choose your removable disk, right-click it and select Format.
4. There is a checkbox for Perform a quick format. Check it and click OK.
At this point, you are ready to use your USBK and your BackDisk encryption key(AES key)
activated here in this part of guide at step 2.2.

User Guide Ver:1.1 Page:
19
Day to Day Using of USBK
After you initialized your USBK, you can securely use your BackDisk together with USBK at
any time.
Activate / Deactivate your USBK
Activate your USBK
Activate your USBK, before you use your BackDisk and access the information on it.
To activate your USBK
1. On the Control Panel of USBK, click Activate Key.
2. Select the key that you want to activate from Key combobox and click Select.(Valid
for A103 model. If you are using A101 model, pass directly to the next step).
3. Type your password in appeared password window and click OK.
If the password is correct, activating your USBK is done successfully. Bubble
message on notification area indicates this as “ Activated”.
Tip: You can also activate your USBK by right-clicking the USBK icon on the notification
area and clicking Activate Key. And then, follow up the same instructions explained above
starting from 2. Step.
You can check the status of your USBK at on the Control Panel of USBK. It is represented as
Activate in green.
Deactivate your USBK
Deactivate is tantamount to removing your BackDisk. It is equivalent in effect with removing
your BackDisk although it is plugged-in your USBK.
Deactivate your USBK, before you
•leave your USBK plugged-on your computer,
•want to use ‘Settings’ menu
•activate another key(Valid for A103 model)
To deactivate your USBK
1. On the Control Panel of USBK, click Deactivate Key. Bubble message on
notification area indicates this change as “Deactivated”.
Tip: You can also deactivate your USBK by right-clicking the USBK icon on the
notification area and clicking Deactivate Key.
You can check the status of your USBK at on the Control Panel of USBK. It is represented as
Deactivate in red.

User Guide Ver:1.1 Page:
20
NOTE: If you deactivate your USBK before removing your BackDisk safely, a warning
message displays, “Please safely remove the disk firstly” as below. Click Cancel and remove
your BackDisk safely. For safely remove, right-click on your BackDisk and click Eject.
! CAUTION: Disconnecting the devices either accidentally or on purpose, without using the
safely remove hardware operation, could corrupt the data on the devices.
NOTE: If you try to access your BackDisk when the status of your USBK is Deactivate, the
following message displays, “insert a disk into drive E:” where E is for the drive letter
associated with your BackDisk.
Usage of BackDisk
Once you activate your USBK, you can save files to your BackDisk same as regular usage of
ordinary USB sticks. USBK encrypts data transferred to/from your BackDisk using the AES
algorithm (FIPS PUB 197). Data is automatically decrypted when you open the file.
Data can be copied to/from a mounted BackDisk at back of USBK just like they are copied
to/from any normal USB drive (for example, by simple drag-and-drop operations or right click
send etc.)
NOTE: To access to your BackDisk, the status of your USBK must be “Activate”. If it is
“Deactivate” and you try to access your BackDisk, the following message displays, “insert a
disk into drive H:” where H is sample for the drive letter associated with your BackDisk.
! CAUTION: Any person, any application or software that use the open platform of computer
can access the BackDisk and become a user when USBK is in “Activate” state
! CAUTION: If you leave your USBK plugged-on your computer in “Activate” state, any user
can access your data on your BackDisk while you are away from the computer.
Understanding USBK status via LEDs
USBK has two LEDs in red color for indicating its operational status.
The positions of LEDs are as following figure and states are explained in Table 1- Led Status
of USBK.