HydroBlockchain / community-brainstorming

A place for the Hydro Community to discuss ideas for the HCDP
1 stars 0 forks source link

Hydro Secured Flash Drive - Raindrop #10

Open milvinae opened 5 years ago

milvinae commented 5 years ago

Would it be possible to make a Hydro secured USB flash drive?

Being small, easily transported, and easily hidden, USB flash drives are often used for cold storage of documents. Adding Hydro would add a fantastic extra layer of security in the event of a drive being lost or stolen.

Access to files would only be granted once the Raindrop authentication has been passed by the correct person.

It could also make use of Ice document stamping to show that documents on the device are properly verified.

mitdralla commented 5 years ago

I see a lot of positive sides to this use case. Not only does it show practical use for the end user securing their assets, it utilizes and showcases many of the tools Hydrogen has in its portfolio. đź‘Ť

HarshRajat commented 5 years ago

I think the software on mac or windows alone can encrypt the drives so flash drive, external ssds and anything in between should not be a problem if we figure out how to get it decrypted using mfa which changes.

So the interface I am imagining is, you pop in any external drive and hydro software prompts you whether you want to encrypt the contents, if yes figure out a key that can remain consistent with the user’s wallet and can be retrieved by entering the correct mfa.

The figuring out of the decryption key based on user passing MFA on any device seems to me the only thing we need to figure out to make it happen.

MasterSensei commented 5 years ago

A community member suggested something similar with a YubiKey integration. I remember we poked some holes into the potential implementation and determined it would need to be integrated directly with the software provider (in this case Yubikey). if Hydrogen created it's own USB software it certainly is possible.

milvinae commented 5 years ago

Mike, was the Yubikey integration suggestion to make Yubikey MFA itself secured by Raindrop?

Meaning that when a Yubikey is inserted into a device it would itself need to be authenticated by Raindrop before a system is accessed (3FA?).

In the case of data storage on the flash drive itself, would this require specialist USB flash drives, with logic chips, or are there software workarounds?

This really started from a marketing suggestion. Flash drives are cheap and if you could secure them with Hydro 2FA it would make a nice marketing gimmick.

Of course this should all be possible with Raspberry Pi/Arduino, but that is not so accessible or cheap (I will write this up as a separate discussion point as it would be a nice project/proof of concept).