'Office on a stick' offers remote security

Nortel has developed a product for tackling security breaches by remote and home workers. The company has developed an "office on a stick," a USB drive that can link an employee's PC with a corporate VPN and keep all the information from a session encrypted.

The drive itself, similar to a typical USB drive with 1GB or 2GB of storage, is just one piece of the Nortel Secure Portable Office, a product that also includes a Nortel VPN gateway and services to help enterprises set up policies and user permissions.

As work becomes more mobile for many enterprises, IT departments are coming up against the simultaneous growth of privacy regulations and worries about data theft. They commonly use software VPNs to keep remote work secure, but Nortel is aiming to do so without the need for VPN client software or URLs that employees have to remember. With the software for a VPN session residing on the USB drive, users also can log in from almost any PC.

To use the USB stick, workers can simply plug it into a USB port and enter a username and password, said Rod Wallace, director of security services and solutions at Nortel. Software on the stick first checks the PC for viruses and required security mechanisms, and then sets up an encrypted remote session. It typically will provide access to remote applications via the browser or another method. It can completely take over the system using a remote desktop and block off printing, document-saving and remote drives, preventing employees from improperly copying sensitive data.

The remote session is encrypted and all data the employee enters or downloads can go direct from the PC's memory onto the encrypted USB drive, Wallace said. As a result, IT administrators can know that sensitive information isn't out in the world on PCs they can't control. Policies can be configured so that users who plug the drive into less-secure PCs get either limited or no access to applications, he said.

One place the Secure Portable Office has been deployed is with community-based midwives who work for Liverpool Women's Hospital in England. They can enter and access patient records while away from the hospital and keep them private, without needing client software or complex log-in procedures, Wallace said.

The Nortel Secure Portable Office is available worldwide. For a typical enterprise deployment supporting 100 or more concurrent users, it costs between US$30,000 (£16,000) and $60,000 (£32,000) for the complete package including services.