BeCrypt

PDA Protect™ is a comprehensive security solution for PDAs.

PDA Protect is a software security solution for Personal Digital Assistants (PDAs) running Windows Mobile for Pocket PC 2003. It allows an enterprise to impose controls on PDA use (including synchronisation and data transfer) and to secure data stored in volatile or removable memory. PDA Protect is available a corporate version (PDA Protect), and a government version (PDA Protect Baseline, which is CAPS-approved to Baseline. This product is only available to organisations that have obtained sales approval.

A comprehensive security solution
PDA Protect allows the administrator to create a custom-built security policy, including setting a password policy; encrypting removable memory; setting a synchronisation policy; controlling the use of permanent (Flash) memory; and controlling the use of high-risk features, such as connection to other devices, audio facilities and infra-red capabilities. PDA Protect also supports the auditing of connection and data transfer events.

Password protection. The user is authenticated by password every time the PDA is switched on. If the password entered is incorrect, the device remains locked and the data is secure. However, PDA Protect provides a mechanism (Challenge-Response) which allows an authorised user, with the aid of an Administrator, to unlock the device without compromising data security. PDA Protect immediately forces a password change. Seek CESG advice for use within Government. Additionally, PDA Protect may be configured to perform a hard reset following repeated password failure.

Data encryption. PDA protect can be configured to transparently encrypt all data on the PDA’s removable Secure Digital and Compact Flash memory cards. Depending on device type, permanent storage may be encrypted or disabled. Volatile memory is protected by User Authentication, and PDA Protect may be configured to erase it following repeated password failure.

Secured synchronisation. PDA Protect controls synchronisation by defining either which user can connect the PDA to another machine, or which machine(s) the PDA can connect to. In addition, PDA Protect typically requires a user to enter his or her password before synchronisation can take place.