Simon Inns created a secure USB time stamp device.
This project implements a USB device which provides a real-time clock for the purpose of time-stamping events in an non-networked embedded computer environment. For embedded applications where a periodic time-stamp is required (such as entry-system logs, configuration audit logs, etc.) it is necessary to have a fairly accurate real-time clock (better than that typically provided by a PC’s motherboard) to generate time-stamps in logging and audit trails. Furthermore, it is preferable to have a method of confirming that the log/audit files have not been tampered with in anyway. The secure USB time-stamp device solves many of these issues in a very small form factor using minimal components
What exactly makes this secure?
Its a well designed and made device but I don’t see anything at all that makes it secure. The only “security” feature listed seems to be that it uses a supercap instead of a battery and its soldered on in an attempt to thwart tampering.
@Tiersten – It is capable of logging the last served time-stamp (and the last time the clock was set) to EEPROM on the PIC. This means if the host restarts (or is stopped and started for any reason) it can confirm that the log files haven’t had sections ‘deleted’ which is a common ‘cover your path’ trick for hackers. Since the device’s log is not on the PC, the hacker has no way to manipulate it. Hence the ‘secure’ part.
i think it is meant to be used with the internal logging as a way of confirming tampering.
Hi SQKYbeaver,
we are looking to develop something similar or ideally use off-the-shelf solutions for portable time stamping device. Can you get back to me with a direct contact?
Thanks,
faltmann at IDEO