The IronKey is a USB flash drive offered in capacities of 1, 2, 4, or 8 GB that features at its core encryption and privacy functions including both an on-board hardware encryption chip and a self-contained (Firefox) Web browser.

The drives itself includes a built-in USB plug, enabling it to be inserted directly into the host computer's USB port. IronKey operates with machines running Windows 2000(sp4)/XP/Vista without requiring separate drivers (the Password Manager described below is unavailable for Windows 2000) and the vendor notes in their literature that Mac and Linux versions are in development.

The primary feature of the IronKey is its AES hardware-based encryption, facilitated via the on-board encryption chip which performs all cryptographic functions on the drive (encryption keys do not leave the chip itself). Upon initialization of the drive (when it is first plugged in) the user is prompted for an access password; from that point on the data stored on the drive is encrypted and cannot be accessed without that password. Upon 10 consecutive unsuccessful login attempts the drive "self-destructs," automatically deleting all encryption keys and scrubbing the drive data. This self-destruct sequence is activated in hardware, not a separate software application.

The drive itself is also physically designed to withstand both accidental or intentional tampering. Externally the drive is housed in a metal casing, and internally the drive is filled with an epoxy-like "potting" compound that seals/solidifies the internal chamber and components of the drive, making the drive waterproof and shockproof, as well as making intentional physical access difficult. Additionally, the cryptochip itself includes anti-tampering detection features (i.e., power attacks, electron microscopes, etc.), and will initiate its self-destruct sequence if such attacks are detected.

Several applications are included with the drive that assist in the protection of the user's data:

- Password Manager, which allows for the saving of Web user ID and password data (with auto-fillin) on the drive itself

- Secure Backup, which allows the user to perform an encrypted backup of the drive's passwords and data to a local machine (password data can additionally be saved to the user's online account). Such backups would then allow the restoration of the drive's data in the event it is lost or accidentally destroyed via the self-destruct mechanism

- Firefox, a version of the open-source browser that is contained in the drive itself and allows the user to browse the Web without having to use the apps on the host machine.

In addition to the drive's physical applications, the vendor offers online services in conjunction with the drive; including the ability to save passwords to an online repository (access to the user's online repository is two-factor, requiring both the IronKey itself as well as the password), as well as the vendor's Secure Sessions Service, a Tor- (The Onion Router) based anonymous proxy browsing platform that routes your Web communications via encrypted tunnels through the vendor's server's en-route to their target destinations, masking your IP and physical identity in the process. Though based on the Tor platform the Secure Sessions Service runs through the vendor's own servers and not through public Tor servers. According to the vendor, the Secure Sessions Service is offered without requiring identifiable information that can link a session back to the originating user or IronKey device.

Other features of the drive include dual channel SLC NAND flash memory (performance is listed at 30 Mb/sec read, 20 Mb/sec write), and encrypted communications between the device itself and the host computer (to prevent USB traffic sniffing attacks).

The IronKey is offered in three flavors, all of which support the encryption of drive data as described above. The Basic version of the drive includes only the Secure Backup feature; while the Personal version includes all features described above. Finally, the Enterprise drive adds a management service facilitating remote, policy-based management and enforcement; including self-service provisioning, administrator access to remote data, and more. The Enterprise IronKey additionally supports RSA SecurID-based one-time-password authentication.

New to the Enterprise version of the drive is support for the vendor's Trusted Network Policy, which restricts the use of the IronKey to only those IP addresses allowed by the administrator (preventing, for example, the device to be taken home and used on home networks). Also new for all flavors of the drive is the vendor's USB AutoRun anti-worm malware protection (which is also available as a firmware upgrade to existing Personal/Enterprise customers).

Basic pricing ranges from $79 to $299; Personal pricing is the same and includes the first year of online services (password backup, Secure Sessions) free. Contact the vendor for Enterprise version pricing.

Visit the IronKey Web site for further information.