3

I would like to transport several gigabytes (apx. 250 GB) worth of sensitive data from one location in the US to another. It seems at the moment the easiest way to do this is to ship an encrypted hard drive containing the data. What options are there for doing this? Security is the number one prioirty.

Improve this question
1
  • There is always RFC2549. :)
    – Zoredache
    Nov 15, 2009 at 6:26

4 Answers 4

Reset to default
5

Well, encrypting the data is the most important bit, assuming that you're keeping copies locally until you're sure that the data has arrived (so if the drives go missing, you haven't lost the data, and nobody else can get at it because it's encrypted). It's best to use an asymmetric algorithm, create the key at the destination and only ship the public key to the source, to ensure the security of the key.

Beyond that, just make sure that the drive is securely and properly packaged to prevent damage in transit, and if it's important that the data arrives in good order, perhaps ship two drives (in separate shipments), as a RAIS (Redundant Array of Inexpensive Shipments) -- that way, if one drives gets lost or damaged, you're still OK.

Finally, if you want the maximum security and speed, consider putting the drive in someone's carry-on and flying the person to the destination. Domestic flights (around the US, especially) aren't stupendously expensive.

Improve this answer
4
  • Flying was the original plan, but would the TSA request access to the data?
    – MiffTheFox
    Nov 14, 2009 at 22:45
  • Didn't happen when it was done for a project I was involved with recently. If it's encrypted, and the only copy of the secret key is on a server you don't have access to at the airport, you couldn't give them access to the data anyway.
    – womble ♦
    Nov 14, 2009 at 23:20
  • 1
    @womble - According to your profile you're from Australia? Was this done in the US? Also, I'm assuming they would just confiscate the drive or deny boarding if they couldn't read the data.
    – MiffTheFox
    Nov 15, 2009 at 22:10
  • SSH is no respecter of national borders. Yes, the disk transfer was in the US. If they confiscate the drives that's no problem, you just go and copy a couple more.
    – womble ♦
    Nov 16, 2009 at 9:32
3

Really depends on the data you're talking about; if it's extremely valuable vs. valuable, there are a couple options...how do you tell the difference? Easy. How much are you willing to pay to have it go from point A to point B? That'll tell you.

If you're going to ship something like that, create an encrypted volume file using TrueCrypt. Stick it on a ruggedized external drive like this.

Encrypted with Truecrypt means secure from theft, and cross-platform compatible (TEST THE ENCRYPTED VOLUME ON ANOTHER SYSTEM BEFORE SHIPPING).

Ruggedized drive means it'll take abuse.

The expensive part? Either ship it insured with your choice of carrier overnight, or your company pays for a ticket for you to personally hand off the device at the point of delivery. The most secure would be for you to carry it personally in a carry-on bag (with a laptop since they'll want to see that it works at the airport, if you fly) so you have chain of custody all the way. Otherwise, you need to send the device through UPS/FedEX/USPS while sending the key to the recipient via another channel.

Hope you find this useful!

Improve this answer
3
  • 1
    +1. If the data is valuable enough you may find that the cost of putting someone on a plane with it is not that high.
    – Maximus Minimus
    Nov 14, 2009 at 12:56
  • The plane was my original idea, until I realized that TSA might request a copy of the unencrypted data and/or key.
    – MiffTheFox
    Nov 14, 2009 at 22:46
  • 1
    @miffthefox-TrueCrypt actually has, as I recall, mechanisms to hide the encrypted partition if necessary, so there's fluff data to pad for appearances and encrypted data hidden. I doubt they'd care though as long as the drive worked as a drive and was shown not to be a bomb.
    – Bart Silverstrim
    Nov 15, 2009 at 0:06
1

If security (and not $) is the number one priority, then you may want to consider an armored truck.

Brinks provides secure data transporation. More info at:

brinkssecuredata.com/

So does Iron Mountain (they are pretty cool):

http://www.ironmountain.com/data-protection/dedicated-transportation.html

Obviously, these methods are going to cost you a lot more than encrypting and shipping but an encrypted drive in a Brinks truck is probably going to give you quite a bit of peace of mind.

Improve this answer
0

For ensuring data safety, while encryption, as already mentioned, is a fantastic idea, also look at your storage media.

Look at using flash drives - they're cheap enough, and will survive more-or-less any kind of rough shipment handling.

Improve this answer
2
  • While I would normally agree, at the 250 GB listed, it would likely be cheaper to have somebody personally carry it out. And that method certainly lowers the loss risk.
    – Scott Pack
    Nov 14, 2009 at 14:10
  • loss risk is lowered with a trusted employee carrying the drive. 128G flash drives are about $300, at the moment, on newegg, though :)
    – warren
    Nov 15, 2009 at 2:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .