USB data leakage

Question

0.00/5 (No votes)

See more:

If i have a Public key saved in one of the files in a USB drive then how would help in authorised USB device access...
My problem is i need the system to allow authorised usb device and deny access to unauthorised usb devices ...all computers in the network are operating on windows

Posted 3-Jan-11 0:42am

anirban_sinha

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

#realJSOP · Accepted Answer · 2011-01-03T01:03:00

Solution 1

You have to write a Windows service and install it on all of the affected systems. The Windows service would check a database (on a separate database server) that contains the association data (which USB key is associated with which user and/or machine).

BTW, how are you planning on preventing users from tampering with the identifying key on the USB device?

Posted 3-Jan-11 1:03am

#realJSOP

Updated 3-Jan-11 1:10am

v3

Comments

#realJSOP 3-Jan-11 9:01am

From OP (posted in my blog of all places): I haven't thought of that.... i was hoping to get some assistance...I'm in college and really don't know how to make this work.... i have got to block unauthorized USB drives access to the system and for the authorized ones keep a log of activities.
pls pls...help me any which way through websites,freewares

#realJSOP · Accepted Answer · 2011-01-03T03:07:00

Solution 2

Since you marked my last answer as "the" answer, I'll answer your second question in a separate answer.

Unless the device has a serial number that you can retrieve programatically, the only thing I think you'll be able to do is create a key of some kind, put it on the drive, and register that key in a database. At that point, a computer would need to be able to query the database to see if the key found on the drive is "registered". You could further choose to tie a registered key with a specific machine or user.

I don't know of any software that does this, or any code that already exists that you could use. You do, of course, have the option of using google to research this stuff yourself.

Posted 3-Jan-11 3:07am

#realJSOP

Comments

#realJSOP 4-Jan-11 5:53am

From OP (posted in my blog AGAIN): thnx for all the help....just wanted to share with you this s/w and would need your comments....
http://www.munishluther.com/2010/08/31/usb-drive-guard
But the problem here is that just the demo is free (regretfully enough)...you said something regarding writing a windows service and installing it on the system...could you elaborate????
and does windows server 2008 have any such features?? Would Bit locker help???

#realJSOP 4-Jan-11 5:59am

I have no idea what your exact requirements are (and I really don't care to). I also have no desire to evaluate software for you other than to say that if the cited software does what you need, and it costs money, then buy it. If you're not a programmer trying to solve this problem on your own, maybe you should look elsewhere for an answer. I've given you enough of an answer to get you started (if you're a programmer). Lastly, BitLocker is a file system encryption application, and has nothing to do with what you apparently want to do.