Contents - The Safe Program

Installation

Quick Start

Introduction To The NovaStor DataSAFE

Putting A File Into The Safe

Locking the Safe

Opening A Safe File

Using Data In A Safe

Copying Data In The Safe To The Clipboard

Alternate Ways To Add Data To The Safe

Saving Combinations

Adjusting the Contents of the Safe

Adding Lock Boxes to Your Safe

Compressing Source Data

Creating Self-Extracting Safe Files

Using Mail (MS Mail, Exchange, Netscape, cc:Mail, Notes, File/Send...)

Other Features

US and Canadian Law and Exportation of the DataSAFE

How The DataSAFE Works

Registering Your Copy

Receiving Updates Via the Internet

Contacting NovaStor

Other Products From NovaStor

NovaStor DataSAFE - Copyright 1998 - NovaStor Corporation


Installation

The DataSAFE program is shipped as a single self-extracting installation file.  To install the software, simply start the DataSAFE32.exe program running.  This is usually done by double clicking the file name from within the Explorer/File Manager window, or by using the Windows  Start/Run menu option.

The installation program is self-explanatory.  All of the necessary files will be copied to a directory of your choice on your hard disk and a program icon will optionally be added to your start menu or Program Manager group.  A un-install utility is automatically added to the destination directory in case you wish to remove the DataSAFE program from your hard disk.

Note: The DataSAFE program is always run from the client workstation, not from a LAN server.

If you obtained your copy via a download you will need to register your copy to continue using it:

Jump to Information on Registration


Quick Start

Follow these steps to try out the DataSAFE`s most basic features.  You will lock one file into the safe and set your own combination.  You will then open this safe using the same combination and recover the file.

1) Start the DataSAFE running by clicking the program`s icon in your Windows Start menu.

2) Make sure that the safe`s door is open.  You can open the safe door by clicking the safe`s handle.  The door will swing open, and you should hear the sound of an opening door if you have a sound card installed in your computer.

3) Click the Add File To Safe button to open the file selection window.

  (Add File To Safe button)

4) Select any file in the file selection window.  A text file is a good choice.  With the default startup options the file will not be deleted or altered in any way by the DataSAFE.

The file name will appear inside of the safe.  The icon next to the file name will depend on the type of file you have selected.

5) Close the safe door by clicking the open safe door on the left or use the close door button.

  (Close safe door button)

6) Click the combination knob to set the safe`s combination.

7) Enter a combination by typing eight letters on the keyboard.  The best combinations are random letters and characters.  You can use special characters like #&*{~.

8) Click the Lock button.  You will be asked to enter the combination a second time, just to make sure that you entered the combination you intended.  Enter the same combination again.

9) Click the Lock button again to lock the safe with this combination.  The safe door will close and the safe handle will be in the locked position.

10) The DataSAFE program will ask you if you want to save this combination.  For now just select NO.

11) Save your locked safe.  The default file name is NEWSAF1.SAF.

12) Exit the DataSAFE and restart it, or select the File New button to empty the save.

  (File New button)

13) Select the File Open button to load the NEWSAF1.SAF file.

  (File Open button)

14) The combination entry window will appear.  Enter the same combination you used to lock the safe.  Click the Unlock button to unlock the safe.  You will be given another chance to save the combination.  For now, just select NO to unlock the safe without saving the combination.

15) The safe door will open if you enter the correct combination.  Double-click the file in the safe to launch that file`s editor, and verify that the file`s contents have not been changed.

Note that the file you stored in the safe is now stored in the DataSAFE\data directory.  This is a copy of the file you originally placed in the safe.  You can change the directory the DataSAFE uses to hold these file copies using the Options/Directory For Files menu item.

16) Exit the DataSAFE.  The program will ask if you want to save the copy of the stored file that was created by the DataSAFE.  Select the Save All button to save the temporary file.

There are many other ways to use the DataSAFE.  The rest of the manual will give you a guided tour.

If you obtained your copy via a download you will need to register your copy to continue using it:

Jump to Information on Registration


Introduction
Introduction To The NovaStor DataSAFE

The NovaStor DataSAFE allows you to store and transmit electronic data and files securely.  Externally the program looks, acts, and sounds like a real combination safe.  Internally the program uses a state-of-the-art encryption engine to secure your data so that anyone without the combination cannot access the safe’s contents.

DataSAFE has some unique features that you will probably find useful:

1)  You can send secure collections of documents (a locked safe) to people who do not have the DataSAFE program.  They will only be able to open the safe they receive if they know the combination.  The only requirement is that the recipients be running some form of Microsoft Windows.  (The transmitted files are actually self-contained Windows programs containing both the encrypted data and the decryption logic but not the combination.)

2)  You can put locked safe deposit boxes inside the safe just like a lockbox in a real safe or vault.  People with access to the safe may only be able to open some of the safe deposit boxes.  This provides secure organization of data within the safe, much like having secure sub-directories on a hard disk.

3)  The DataSAFE program will remember combinations and associate them with a name (called a Memory Jogger.)  For example, you can establish combinations with names like “Executive committee” and “Personnel.”  When you send someone the safe they see the nickname, but will only know the real combination if you have passed this information to them separately.  The combination storage is just as secure as the safe’s data, so this feature does not compromise security.

Jump to a Description of DataSAFE Buttons

A big selling point for the DataSAFE is its versatility in accepting data.  You can select files to add from a list, drag and drop files from the Windows Explorer, cut and paste data from anther application into the Safe, drag selected text or data off of one application and drop it into the Safe (OLE 2.0), copy `scraps` of data off of the Windows desktop, or launch other applications from within the DataSAFE to create specialized data.  The DataSAFE keeps track of the type of data collected, and will launch the appropriate application to view the data after the safe has been unlocked.

Jump to Information on Adding Data to the Safe

The DataSAFE is so secure that you can mail confidential information to people who have their assistants open their E Mail. The secretary will see the locked safe in the mail message, and can save the safe as a file, but cannot access the safe`s data without the combination.  The supervisor can open the safe files at a later date to access their contents.

Although the DataSAFE was created primarily to make E Mail secure, it has other uses.  You can use the DataSAFE to lock up confidential files on your own PC, or on a LAN server.  This provides added protection so the even if a hacker breaks into your network, your files are still inaccessible.

Jump to Information on MS Mail, Exchange, Lotus cc:Mail, Lotus Notes


Buttons
Buttons, Handles, and Knobs

The safe will initially be open. Note that the cursor changes from an arrow to a pointing hand when you move the cursor over the left side of the open safe image.  If you click the open door on the left side you will see and hear the safe`s door close.  The safe will be initially closed but not locked. You can tell this by looking at the position of the safe`s handle.  If the handle points to the right, towards the word LOCKED, the safe is locked.  If the handle points down, towards the word OPEN, the safe is unlocked.  You can open the safe by just clicking the handle if the handle is in the OPEN position.

Like most Windows applications, the DataSAFE has both a button bar and a menu bar near the top.  The buttons are just shortcuts for the more commonly used menu items.  If a button shows only a gray image, that feature cannot be used (probably because the safe is closed or locked.)  If the button is in color, the button is active.  Here is a quick summary of the meaning of the buttons:

Safe File Buttons

These buttons control file operations for the safe.  The first button empties the safe and starts the DataSAFE from scratch, duplicating the File/New menu item.  The second button allows you to load a DataSAFE file (.SAF file) into the safe, duplicating the File/Open menu item.  The third button allows you to write the safe`s data to disk as a .SAF file, duplicating the File/Save As menu item.  You can only save the safe`s contents if the safe has been locked with a combination.  All saved .SAF files are saved locked.

Clipboard Cut, Copy, and Paste Buttons

These buttons implement Windows clipboard functions for the contents of the safe.  The scissors duplicate the Edit/Cut menu item, removing an item from the safe, and placing the item`s data in the Windows clipboard for another application to paste.  The second button duplicates the Edit/Copy menu item, which leaves the selected item in the safe, but puts a copy of the item`s data into the Windows clipboard.  The third button duplicates the Edit/Paste menu item, which copies data from the Windows clipboard into the safe.  These buttons will only be active if the safe is open.  The cut and copy buttons will only be active if an item in the safe is selected. The paste button will only be active if their is data in the Windows clipboard (usually from another application`s use of a cut or copy menu item.)

File Add and Remove Buttons

The first button duplicates the Contents/Add File To Safe menu item, and is only active if the safe door is open.  The button with a red cross is for the Contents/Delete Selected Item menu item, and will only be active if an item in the open safe is selected.

Show or Hide Safe Image

Normally the DataSAFE displays the image of a safe under the menu bar and tool bar.  You can reduce the program down to just the menu bar and tool bar using the Options/Hide Safe Image menu item or button.  This is handy if you want to leave the program running at the top of the screen, but without taking up too much screen area.  Selecting the button or menu item a second time reverses the process.  The program restarts in the same state as it was last shut down, so if you exit the program with only the tool bar showing it will startup in that same state the next time your start the DataSAFE.

Safe Open, Close, and Lock/Unlock Buttons

These buttons manipulate the safe`s door and combination.  You can also use the mouse pointer on the main window area of the DataSAFE to click on the open door, door handle, and combination knob, to achieve the same effects.  In case you need a keyboard alternative, there are also matching menu items for Safe/Open, Safe/Close, and Safe/Lock/Unlock.

Launch File

This button starts the appropriate program to edit a file you have selected within an open safe.  For example, if you have selected a XLS file and have Excel installed on your computer, then the DataSAFE will start Excel running and load the selected file into the Excel work area.  The same thing happens when you double-click a file within the open safe.

Information Button

This button opens up a small edit window that allows you to add plain-text information to a stored DataSAFE file.  This is useful if you have a lot of different files to keep track of.  Be sure to NOT put password information into the information area as it is not secure..

Help Button

This button starts the Windows help system, and loads the DataSAFE help file.


Putting Data Into The Safe
Putting A File Into The Safe

The first step is to open the safe`s door.  You can`t put anything into the safe unless the door is open.  Most people open the door by clicking the door handle with the mouse, although you can use the button bar or Safe/Open menu item.

The most common situation is where you want to put copies of one or more files into the Safe.  Select the

button, or use the Contents/Add File To Safe menu item, to start up the file selection dialog box.  As a simple example, select a text file, such as the README.TXT file that Windows puts in the Windows directory during installation.  Select the OK button to close the file selection dialog box.  The file you select will be added to the safe`s contents.  The default DataSAFE setup shows the file`s icon and the full path/file for each item in the safe.  You can customize the amount of data displayed for items in the safe using the Options menu.

Another way to add files to the DataSAFE is to select one or more files in the Windows Explorer (File Manager) and drag them over the open safe.  When you release the mouse button over the safe the files will appear inside.  You can also right-click one or more files within the Explorer window and select the Add to DataSAFE menu item to add those files to the safe.

The type of icon displayed next to items in the safe will depend on which applications you have installed on your computer.  For example the Windows Notepad application is the default editor for TXT files, so the Notepad icon appears.  If you have installed another text editor that registers itself as the editor of TXT files, that applications icon will appear.  If the file type is not recognized the DataSAFE displays a blank icon looking like a plain sheet of paper.

After you have added one or more files to the safe, close the safe door.  You can just click on the open door image (the left side of the DataSAFE Window when the door is open) or use the button bar or menu Safe/Open menu item.  Just closing the door does not lock the safe.  You must set a combination for the safe to be secure.  Click the round combination knob, or the lock button, and you will see the combination dialog box appear.

Adding a file to the safe does not delete the original file from you hard disk.  However, if you select the Options/Delete Source Files menu item the DataSAFE program will give you an opportunity to delete the original files after you have saved a copy into a locked safe.  The files are thoroughly deleted so that un-erase utilities and sector scan programs will not find any trace of the original data after the DataSAFE deletes the file.

Locking the Safe


Locking the Safe

Combinations are always eight digits long.  `Digits` is not completely accurate, as you can use numbers, uppercase and lowercase letters, and keyboard symbols as part of your combination.  You can simply type the combination using the keyboard, or use the entry arrows next to each of the eight digits.  A little later in the manual we will look at how to save combinations with a nickname for future use.

Once you have entered your combination, click the Lock button.

You will be prompted to enter the same combination again to verify that you entered the combination exactly as you intended.  Type the combination again the then click the Lock button.  (This verification step can be turned on an off from the Options menu.)

At this point the DataSAFE program will give you an opportunity to save the combination in a secure list.  We will skip this for now, but you can jump to a description by clicking here.

The combination dialog box will disappear, and the safe will be locked.  You can verify that the safe is locked by trying to open it.  The only way to open a safe is to enter the combination.  Anytime you try to open a locked safe the combination dialog box will reappear.  The safe will stay locked until you enter the correct combination.

Once you have locked the safe, you can save the contents of the safe as a .SAF file.  You cannot save an unlocked safe.  Select the

button, or use the File/Save As menu item to save the safe`s contents to a .SAF file.  You can save the file with any name you like, consistent with the limitations of the operating system you are using. Safe files are always saved with the file extension .SAF so that the DataSAFE can recognize the file type.

Information on Saving Combinations and Memory Joggers


Opening A Safe File

There are two ways to access a previously saved .SAF file.  One is to just double-click the file name inside of the Windows File Manager (Explorer) window.  The DataSAFE will automatically start and load the file.  The other option is to start the DataSAFE and then load the file into the safe.  Use the

button or the File/Open menu item to open an existing .SAF file.

The DataSAFE will be locked when a file is first loaded.  To open the safe you must enter in the appropriate combination.  Once unlocked you can access the data in safe just as if you had just placed it there.  You can close the safe and re-lock it with the same combination or a different one.  Only the most recently entered combination will open the safe file when it is next accessed.

At this point you should try exiting the DataSAFE, restarting it, and loading a .SAF file that you just saved.  Prove to yourself that the file cannot be opened unless the combination is entered correctly.  If you have a bit of the hacker in your blood, you may want to examine the contents of the .SAF file.  It is encrypted so that people cannot access the data by going around the DataSAFE.


Using The Data In A Safe
Using Data In A Safe

When you enter the correct combination and open a .SAF file, the DataSAFE decodes the information in the file and writes each of the files separately to your hard disk.  The files are written to one common directory.  By default the DataSAFE saves the files in the same directory with the DataSAFE itself  (SAFE.EXE.)  However, you can change where the temporary files are saved using the Options/Directory For Files menu item.

Because the safe`s contents are written as individual files, you can access them like any other disk file once the safe is open.  However, there is an easier way to access files in the safe.  Just double-click the file name inside of the open safe, and the DataSAFE will automatically launch the application matching the file type.  For example if it is a .XLS file, Windows will launch Microsoft Excel, assuming that application has been installed on your computer.  You can also use the Contents/Start Application menu item to launch the appropriate program to edit the selected file in the safe.

You will be able to tell if your program has the appropriate program to edit a file by looking at the icons inside the safe.  If a program`s icon is visible, such as Excel`s icon next to the file name, then your computer is ready to edit the file.  If a blank icon is shown there is not a default application to read this file type.  You may be able to access the file by loading another application and then reading the file directly from the directory where the DataSAFE stored the safe`s contents.


Copying Data In The Safe To The Clipboard

Sometimes you may want to take data out of the safe and paste it into another application.  For example, you may want to take a text file from the safe`s contents and add it in the middle of another document.  You can copy the data from an item in the safe into the Windows clipboard using the

button or the Edit/Copy menu item.  The DataSAFE will select the data format that is most appropriate for the item you have selected in the safe.  For example, if you select a .TXT file, the DataSAFE will copy text data to the clipboard.  You can then paste the text into another application using that program`s Edit/Paste menu item.

If you want to copy an item in the safe to the clipboard and simultaneously remove it from the safe, use the

button or the Edit/Cut menu item.  Cutting an item in the safe is equivalent to using the copy command followed by deleting the item from the safe.


Alternate Ways To Add Data To The Safe

Besides the conventional method of selecting files to be added to your open safe, the DataSAFE offers a number of alternatives that take advantage of the more advanced features of Windows such as the Drag and Drop interface and OLE 2.0 (Object Linking and Embedding.)

With the Windows 95/98 and Windows NT 4.0+ Explorer open you can:

Add Files By Right Mouse Clicking In Explorer

If you have the Windows Explorer open, you can use:

Drag and Drop File Names

If you have an OLE 2.0 server, such as Word or Excel running, you can use:

Drag and Drop Selections

All Windows applications support using the Windows clipboard to:

Copy and Paste

You can also use the clipboard to copy specialized (OLE) data to the safe:

Copy and Paste Special

The DataSAFE will launch any registered (OLE) application to create a safe entry:

Insert Object

Windows allows you to drop OLE data onto the Windows desktop, creating a `scrap`, and later drag the scrap into the safe:

Adding a Scrap


Right-Click Additions In Explorer

The DataSAFE program registers itself with the Windows 95/98 and Windows NT 4.0+ Explorer applications so that you can add files to a safe any time you are in Explorer.  Just select one or more files and then click the right mouse button on one of the selected files.  You will see a new menu item Add To DataSAFE in the popup menu.  Selecting this menu item will add every selected file to an open safe, ready to be locked and either saved or transmitted.

The beauty of the right-click method is that you do not need to start the DataSAFE yourself.  DataSAFE will start automatically when you right click and select Add To DataSAFE.  If the DataSAFE is already running the selected files will be added to those already in the safe.  Only one copy of DataSAFE will be running no matter how many times you add files.

One limitation is that if you already have the DataSAFE running and it is currently locked the Explorer will not be able to add the selected files.  Just unlock the DataSAFE or create a new DataSAFE file with the File/New menu item and the DataSAFE will be ready to accept input.


Drag and Drop File Names

If you have the Windows File Manager (Explorer) and the DataSAFE open at the same time, you can quickly drag and drop files into the safe.  Make sure the safe is open before starting.  Find the file you want to copy into the safe in the File Manager window, select it with the mouse, and drag the file over to the safe while holding down the left mouse button.  Release the mouse button when the mouse cursor is over the safe, and the file name will magically appear inside of the safe.  You can do this with more than one file at a time by holding down the control or shift key and selecting a number of files within the File Manager window.


Drag and Drop Selections

If you only want to copy part of a file into the safe, you have several options.  If the application holding the data is an OLE 2.0 server, such as Microsoft Word 6.0 or Excel 6.0, you can select a portion of the file using the mouse, drag the selection over the open safe, and then release the left mouse button.   As the data did not come from a disk file, the DataSAFE will prompt you to enter a file name for this new data.  The default names are SAFE0, SAFE1, SAFE2, and so on, but you can name the file anything you wish as long as it is a valid Windows file name.  The DataSAFE will automatically attach the extension OLE.

You can also select a portion of the document, use the Edit/Copy or Edit/Cut menu item to copy the selection into the Windows clipboard, and then use the DataSAFE`s Edit/Paste or Edit/Paste Special menu item to paste that data into the safe.

Jump to more information on clipboard Copy and Paste


Copy and Paste

If your source program containing the data does not support OLE 2.0, you can still copy portions of the file into the safe using the Windows clipboard.  Select the portion of the file you want to copy using the mouse, and then use the application`s Edit/Copy command to copy the selected data into the clipboard.  Switch to the DataSAFE and select the

button or the Edit/Paste menu item.  The DataSAFE will give you a list of the available data formats in the clipboard.  The number of formats available will depend on the application you used to copy the data.  Some applications only put one type of data on the clipboard, while others put several different data formats to chose from.


Copy and Paste Special

The Edit/Paste Special menu item is similar to Edit/Paste, except Paste Special allows complex data formats to be pasted into the Safe.  Not every application copies special data formats to the clipboard, but most do.  For example, word processors will copy the regular TEXT format to the clipboard in all cases, so that Edit/Paste can always be used.  However, the TEXT format does not include special formatting, such as bold face or italics.  Most word processors copy additional customized data formats to the clipboard so that all of the formatting is preserved.

The Edit/Paste Special menu item does not have a button equivalent, so you must use the menu item.  Copy some data into the clipboard, such as a selection in a Word document, and then select Edit/Paste Special.   The Paste Special dialog box will appear, displaying all of the available formats.  Select the format you want, and click the OK button.  You will be prompted to enter a file name for the data, and then the data will be stored using the .OLE file extension.


Insert Object

Another way to add data to the safe is to create the data from within the safe.  If you select the Edit/Insert Object menu item, the Insert Object dialog box will appear displaying every type of data object that your computer has installed.  If you then pick one of the listed data types and click OK, the DataSAFE will launch that application.  For example, if you select Bitmap Image, the DataSAFE will launch the Windows Paint program (unless you have installed another bitmap editor.)  You can think of the launched program as running as a slave for the DataSAFE.

Use the slave program to create the data you want, and then select the File/Exit and Return to Safe menu item in that application.  The DataSAFE grafts its own menu options onto the slave application (assuming that application is a modern OLE 2.0 server), which explains how this unusual menu item shows up in another program`s menu.  When the application exits, the data is passed back to the DataSAFE.  You will be prompted to name the data file you just created, so that it can be stored in the safe.


Adding a Scrap

Windows 95/98 and Windows NT 4.0 have extensive support of OLE.  If you select a block of text in a OLE 2.0 server application, such as Word or Excel, you can drop the data right onto the Windows desktop.  Windows will create an OLE object called a scrap from your data, and display the scrap on the desktop wherever you drop it.  The figure shows a scrap created from this paragraph of text.  The first few words from the paragraph show up in the Scrap`s text to identify its contents.

If you grab the scrap with the mouse and drop it into the open safe, the DataSAFE will create an OLE file from the scrap`s data and place the OLE data in the safe.  Using a scrap to temporarily hold the data is equivalent to dragging the data right off of the source application (Word) and dropping it into the safe without creating a scrap (as discussed above in the section Drag and Drop Selections.)  Use the technique with which you are most comfortable.  When you are done with the scrap you can delete it by right-clicking the scrap with the mouse, and selecting Delete from the pop up menu that appears next to the scrap.


Combination Lists

As discussed in the introduction, you will probably find it useful to have several different combinations for separate work groups.  Remembering multiple combinations is difficult, particularly if you follow the good practice of changing combinations fairly frequently - say once a month.  The DataSAFE allows you to save a list of combinations, each stored with a nickname or `memory jogger` to make it easier to remember.  For example, you might have the following list of combinations on your machine:

Memory Jogger	Actual Combination

ExecComm	58*Rb4!]

Personnel	Yx(-=#56

CompanyX	$$nF-KlQ

TeamY	590`APTZ

The Executive Committee would all use the first password for their communications between group members, but would not share that combination with other groups.  Your discussions with the personnel department would use a separate combination, which would be known only to you and your contact in that department.  You happen to be working with Company X on a secret project, so you and your contacts in Company X use the third combination.  You are also on Team Y, which uses the fourth combination for their team communications.

Note:  If you forget your user password you will lose all access to the saved combinations.  You can use the Safe/Utilities/Reset User PSW and Comb. List menu item to clear you user password and empty the old combination list.  The next time you start the DataSAFE program running you will be able to enter a new user password and start entering combinations.

Jump to Information on Saving Combinations


Saving Combinations For Future Use

Every time you enter a new combination you will be prompted to see if you want to save it.  Once saved, you will be able to use this combination in the future by just selecting it from the combination list:

The combination data is stored in encrypted form, so that even if your computer fell into the wrong hands, the combination list would not be accessible.  The encryption method used to encrypt the combinations is the same method used to encrypt files so there is no reduction in security by saving a combination.  Also note that the DataSAFE insists that you enter your personal password every time you start the DataSAFE when you attempt to access your password list.  This is an extra precaution against someone gaining access to your computer for a few minutes to read your password list from your copy of the DataSAFE.

You can change your personal password at any time using the Safe/Utilities/Change PSW menu item.  If you forget your password you can use the Safe/Utilities/Reset User PSW and Comb. List menu item.  However, this deletes all of your stored combinations so you will have to renter them.

The Safe/Utilities/Edit Combination List is handy if you want to delete old combinations, or add a number of new ones.

Jump to Information on Recalling Saved Combinations


Recalling a Saved Combination

Once you have saved one or more combinations, you can recall them at any time:

1) Click the combination knob on the safe to open the combination dialog box.

2) Select the blank combo box

labeled Combination List.   You will need to enter your personal password to access your combination list.

3) Select the memory jogger for the password from the combo box.  The related combination will automatically be added to the eight digit boxes, just as if you had typed the combination by hand.

4) Select the Lock or Unlock button to use this combination to lock or unlock the safe.

Jump to Information on Recognizing Which Combination To Use


Recognizing A Combination Memory Jogger

If a memory jogger is used to recall a combination when locking a safe, the memory jogger name (not the combination itself) will be written to the .SAF file when the safe contents are saved.  Later, when you or anyone else reads the .SAF file (or safe data embedded in another document) the memory jogger is reloaded.  You can see the memory jogger name in the title bar of the DataSAFE`s combination dialog box.

Memory joggers encourage good security practices, such as having separate passwords for different groups.  You should encourage your work groups to agree on common combinations and memory jogger names right from the start of a project.  One group can also use several different combinations as long as everyone in the group records the combination/memory jogger pairs.


Combination Security

The security of any DataSAFE file depends on the combination remaining a secret.  If the combination is known, the safe can be opened by anyone holing a copy of the DataSAFE.  The trick is not to get lazy in handling combinations.  Never use conventional mail or E Mail to transmit combinations as plain text, as you never know who will see or gain access to the text.  All too often mail ends up delivered to the wrong person, or opened by a secretary when the boss is not in the office.

There is no reason to keep any written records of combinations, as the DataSAFE does this for you.  The combination list feature of the DataSAFE was engineered to make remembering lists of eight digit combinations unnecessary.  Using this feature, rather than keeping written records of combinations, will greatly improve the security of your file transmittals.

The best way to transmit a combination is verbally - not in writing.  If your group is meeting together, and have their laptops in the meeting room, everyone should agree on the combination and enter it into the DataSAFE at that moment.  If someone must write down the combination, be sure to emphasize that the paper with the combination should be destroyed as soon as the combination is entered into the DataSAFE.

If you are working with someone at a remote location, call them on the telephone to transmit the combination.  Make sure that they are at their computer, so that they can enter the combination and memory jogger at that moment, and do not write it down.  Check that they are not using a speaker phone before saying the combination digits.  The security of your company`s information depends on these simple precautions.

Change combinations periodically.  Even though you have taken every precaution, there is still the chance of someone learning the combination.  The best time to change a combination is at group meetings, when everyone can learn and enter the new combination at the same moment, or soon thereafter.

For maximum security: Use a combination only one time and do not write it down or save it with a memory jogger.  This approach assures that the only record of the combination is in your head.  You can`t get much more secure than that.


Contents
Adjusting the Contents of the Safe

The Contents menu provides a number of convenient options for altering the contents of a safe.  The options are:

Add File to the Safe

This is the most common way of adding information to an open safe.  For full details: Putting A File Into The Safe

Delete Selected Item

This removes the currently selected item inside the safe from the Safe`s contents.  You can select items inside the safe by single-clicking the file name with the mouse.

Rename Item

Renames the currently selected item in the safe.  This has the affect of renaming the disk file referenced in the safe.

Clear Safe Contents

Empties all items from the safe.  If you copied data from the Windows clipboard, via OLE, or have the Options/Delete Source Files menu item checked, you will be prompted to determine if the disk files should also be deleted.  Deleting the disk files will leave you with only the secure copies held within the safe file.

Note that when the NovaStor DataSAFE deletes source files it also writes over the file area on the disk to remove any traces of the source file`s data.  This makes it impossible to recover the file using an un-erase or snooping utility.

Start Application

Launches the program associated with the currently selected file in the safe so that you can edit the file`s contents.  For example if you select a file named EXAMPLE.XLS the Excel program will be started to edit this file.  You can tell which file will be launched by looking at the file’s icon inside of the safe (assuming that you have the Options/Show Icon menu item set.)  The Contents/Start Application menu item has the same effect as double-clicking a file in the safe.

Edit Note Attached To Safe

Every .SAF file has a plain-text (not encrypted) note attached to it so that you can store information about the file.  This menu item will display the attached note and allow you to edit the note if the safe is unlocked.  For obvious reasons you should NOT put information about the combination into the note as the note is not encrypted and can be read by anyone with access to the .SAF file.

Add Lockbox To Safe

Lockboxes provide an additional level of security and organization to the contents of the DataSAFE.

Adding Lock Boxes to Your Safe


Adding Lock Boxes To Your Safe

Lock boxes provide an additional level of security within your safe and also help organize the safe’s contents.  Each lock box has its own combination and is locked separately just like safe deposit boxes in a bank vault.  You can think of a lock box as a small version of the DataSAFE Program, with the same powerful encryption engine, but with a simpler user interface.

Use the Contents/Add Lockbox to Safe menu item to insert a lockbox into an open safe.  This will automatically start the Lockbox prograrm, ready to hold your files.  The Lockbox program works identically to the DataSAFE Program, so follow the procedures you are familiar with to add data and files, and to set the combination.  The Lockbox program and the DataSAFE share the same secure list of combinations and memory joggers, so you can use that feature to hold combinations if you like.

Once you have locked the lock box, use the File/Place Lockbox into DataSAFE (Exit) menu item to place the lockbox within the safe.  The lockbox will be plainly visible in the safe, and uses a padlock symbol as its icon.  You can access the lock box by just double-clicking the lock box image, which launches the Lockbox program.

You can put as many lock boxes in the safe as you like, and combine individual files with lock boxes.  Once you have everything loaded into the safe, set its combination and you have a completely secure collection of files and lock boxes all within one safe.

There are a few limitations in working with lock boxes that you should be aware of:

1)  You cannot create a self-extracting safe file from a safe that contains lock boxes.  The reason for this is that only people who own the DataSAFE program will have the Lockbox program.  If they have the DataSAFE program, there is no reason to create a self-extracting file - just send them a normal .SAF file.

2)  If your hard disk is damaged and the DataSAFE program stops recognizing the Lockbox application, just start LOCKBOX.EXE or LOCKBX32.EXE running once by itself.  The program will reinstall itself automatically, which will make it visible to the DataSAFE program.


Compressing Source Data

Many people use utilities such as PKZip and WinZip to compress files before saving them or transmitting them via a modem connection.  The NovaStor DataSAFE also has compression technology built in, although it is only used in creating DataSAFE files and self-extracting safe files.  (The DataSAFE program will not create or unZip standalone ZIP files.)  The compression process does a remarkable job of reducing the size of data files containing repetitive words and data such as text files and bitmaps from screen captures.  You will see size reductions between 50% and 75% on many files.

The DataSAFE’s compression function is not appropriate for compressing data of a more random nature such as audio files and images from digital cameras.  These require specialized compression routines such as fractal imaging.

Compression is activated with the Options/Compress When Saving menu item.  If this item is checked every .SAF and self-extracting safe file will be stored in compressed format.  Compression takes some time, although decompression (expansion) is almost instantaneous.

If you send a compressed file to someone else, that person’s copy of the DataSAFE will automatically detect that the source data was compressed and will expand the files after they are decrypted.  The same thing occurs automatically when someone enters the correct combination in a self-extracting file.  Compression is almost invisible to the recipient, although they may notice that the safe’s contents take up more space than the original .SAF or SE file.

Note:

DataSAFE uses the LZ77 compression algorithm developed in the late seventies by two Isreali researchers, Jacob Ziv and Abraham Lempel.  Compression improves the quality of the DataSAFE’s encryption by a small margin.  However, the real security of the locked files lies in the encryption algorithm which is the same (BLOWFISH) whether the source files are in their native format or compressed before being encrypted.


Self Extracting Safe Files
Creating Self-Extracting Safe Files

With most encryption programs the sender and receiver of the data must have the same encryption program.  This can be a nuisance if you need to get information to people, but have no idea what security program they are using.

The DataSAFE program provides an alternative.  Instead of just saving the contents of the safe as encrypted data, DataSAFE can also generate self-extracting files.  This amounts to wrapping a small Windows program around your encrypted data.  The Windows program has just enough logic to allow the recipient of the data to enter a combination and recover the safe’s contents.  After that the self-extracting file is discarded.

To create a self-extracting safe file:

1)  Add the files of interest to your safe, or copy and paste information into the safe.  You cannot send safe contents containing OLE data or lockboxes in self-extracting files as there is no guarantee that the recipients will have the programs needed to work with these data types.  However, any disk file can be transmitted.

2)  Lock the safe with a combination.

3)  Use the File/Create Self-Extracting File From Locked Safe menu item to create the SE file.  The file name will always have a .EXE extension, as it is a Windows program that contains your encrypted data.

4)  Transmit the SE file as an attachment using your mail system or FTP.  You can use the File/Send Self-Extracting File Just Created menu item to automatically launch your mail system to transmit the SE file.  This only works if you mail system is MAPI-enabled, such as Microsoft Mail, Exchange, or the latest releases of cc:Mail.

There are a few limitations in creating self-extracting (SE) safe files.  You cannot create SE files if your safe contains OLE objects or lock boxes.  The reason for this is that SE files can be sent to people who do not have the DataSAFE program installed.  Without the DataSAFE your recipients will have no way of dealing with OLE data or lock boxes, so there is no point in creating a SE file from the data.  If they already have the DataSAFE program, just send them a regular .SAF file, as it is equally secure and always smaller.

The only limitation at the recipient’s end is that they must be running some form of Microsoft Windows.  This includes Windows 3.1, Windows for Work Groups, Windows NT, and Windows 95/98.  The SE file is actually a self contained Windows program, so it requires Windows to run.

The maximum amount of data that can be placed in a single SE file is 8,355,840 bytes, or just short of eight megabytes.  SE files use exactly the same encryption engine as the DataSAFE program, and are equally secure.  The overhead in creating a SE file is about 65K of data, which is the size of the minimal Windows application that the DataSAFE program wraps around your encrypted data to create a SE file.


Mailing A Safe
Using Mail (MS Mail, Exchange, Netscape, cc:Mail, Lotus Notes)

When you mail a safe containing one or more data files, you are actually mailing a .SAF file that was created on your own computer`s hard disk by the DataSAFE.  .SAF files contain all of the information that was added to the safe, but in encrypted form.  With most mail systems the .SAF file appears as a small image of a safe, so we refer to the file transfer as `mailing a safe.`  Because a locked safe is nothing more than a disk file, you can transmit it with any mail or network system that supports file transfers.  This includes transmittal over local area networks (LANs), phone lines, and the old standard of mailing people disks.

Note that you can transmit either .SAF files or self-extracting files created by the DataSAFE program.  The procedure for sending the files is the same with either file format.  Use self-extracting files if you are not sure that the recipient has a copy of the DataSAFE program.

The most common mail systems in use today are Internet Mail (Netscape), Microsoft Mail, Microsoft Exchange, Lotus cc:Mail, and Lotus Notes.  Notes is actually much more than a mail system, but for our purposes you can think of it as another means of transferring .SAF files to other individuals.  Using each of these common systems with the DataSAFE is described below.  You can use the DataSAFE with any  mail system that supports file transfer, so don`t feel bad if your mail system is not described here.  Just look up how to embed or transfer file data using your system in your mail system or terminal emulator`s manual, and use that feature to transmit the .SAF files you create.

Microsoft Mail

Microsoft Exchange

Netscape (Internet) Mail

Lotus cc:Mail

Lotus Notes

Mailing a Safe Inside Another Document

If your computer has a mail system that supports the MAPI standard, such as Microsoft Mail or Exchange, you can mail your safe’s contents from within the DataSAFE using the File/Send... menu item.

File/Send Menu Item


Microsoft Mail

The easiest way to send a locked safe is by using the File/Send .SAF File menu item in the DataSAFE, which will automatically start your mail system if it is configured as a MAPI client on your computer.  You will be prompted to decide whether to send a .SAF file or a Self-Extracting DataSAFE.  The latter is the only reasonable choice if you are not sure your recipients have the DataSAFE program installed on their own computers.

There are other ways to transmit DataSAFE information using MS Mail:

1) 	You can use the Mail Attach menu item to attach a .SAF file or self-extracting file to your document.  The attached file will be transmitted with your message.

2) 	You can use the Mail Insert/Object menu item, and select the object type of DataSAFE.  This will embed a DataSAFE object in your mail message as an OLE object and allow you to add data and set the combination.  The embedded DataSAFE will be transmitted with your message.

NOTE: Embedding a DataSAFE within a mail document as an OLE object (Insert/Object) is not recommended unless all users are mail connected and all have the DataSAFE program installed.  There is no way to create a self-extracting DataSAFE using the Insert/Object command.  Also many mail servers will strip out embedded OLE objects prior to transmission, so your recipients may not get the DataSAFE.  When in doubt either use the DataSAFE’s File/Send .SAF File menu item or send the locked DataSAFE file as an attachment.

Be sure not to include any reference to the safe`s combination in the text of the document, as this would defeat the whole purpose of using the DataSAFE.


Microsoft Exchange

Microsoft Exchange is ideal for mailing data in a locked safe, as long as you remember that the message must be sent by electronic mail, and not by FAX. The easiest way to send a locked safe is by using the File/Send .SAF File menu item in the DataSAFE, which will automatically start your mail system if it is configured as a MAPI client on your computer.  You will be prompted to decide whether to send a .SAF file or a Self-Extracting DataSAFE.  The latter is the only reasonable choice if you are not sure your recipients have the DataSAFE program installed on their own computers.

There are other ways to transmit DataSAFE information using Exchange:

1)	You can use the Exchange Insert/File menu item (paper clip button) to attach a .SAF file or self-extracting file to your document.  The attached file will be transmitted with your message.

2)	You can use the Exchange Insert/Object menu item, and select the object type of DataSAFE.  This will embed a DataSAFE object in your mail message as an OLE object and allow you to add data and set the combination.  The embedded DataSAFE will be transmitted with your message.

NOTE: Embedding a DataSAFE within a mail document as an OLE object (Insert/Object) is not recommended unless all users are mail connected and all have the DataSAFE program installed.  There is no way to create a self-extracting DataSAFE using the Insert/Object command.  Also many mail servers will strip out embedded OLE objects prior to transmission, so your recipients may not get the DataSAFE.  When in doubt either use the DataSAFE’s File/Send .SAF File menu item or send the locked DataSAFE file as an attachment.

Be sure not to include any reference to the safe`s combination in the text of the document, as this would defeat the whole purpose of using the DataSAFE.


Netscape Navigator Mail Internet MIME POP3 SMTP
Netscape Navigator Mail

Netscape Navigator has a built in Mail system that is ideal for transmitting DataSAFE files via Internet.

1)	Use the DataSAFE to lock your data and save it as either a .SAF file or (more often) as a self-extracting DataSAFE file.

2)	Click the envelope button at the bottom right corner of the Navigator window to start mail.

3)	Click the To:Mail button to create a message.

4)	Click the Attachment button and attach either a .SAF file or self-extracting file to the message.

5)	Send the message when you are through adding plain text, addressing, and so on.

NOTE: The Internet POP3/MIME/SMTP mail systems have become a globally accepted standard for transmitting information.  The only problems occur when you are sending attachments from your Internet mail system to a recipient who is using a proprietary mail system such as CompuServe that does not fully support Internet mail.  CompuServe has the nasty habit of destroying attached files that it receives from the Internet.  CompuServe’s own mail system works fine if both the sender and recipients are all using CompuServe mail.

Be sure not to include any reference to the safe`s combination in the text of the document, as this would defeat the whole purpose of using the DataSAFE.


Lotus cc:Mail

With the 3.2 release, cc:Mail has only the most limited support of OLE.  Nevertheless, it is a simple matter to use the DataSAFE with cc:Mail.  The trick is to attach one or more .SAF files to your document, rather than trying to embed the a locked safe right into the cc:Mail message.  cc:Mail will transmit the .SAF file so that it can read using the recipients copy of the DataSAFE.  The basic steps are as follows:

1) Create a .SAF file or self-extracting file containing your confidential information by running the DataSAFE.

2) Start cc:Mail running.  Use the button bar or the Message/New Message menu item to compose a new message that will transmit your safe.

3) Use the cc:Mail Attach/Files menu item to attach the .SAF file you created in step one.  You can also type any relevant non-confidential information into the note.

4) Send the message.

The message will display the attached .SAF file when the message is received in the list of attachments.  To access an attached .SAF file in a received message:

1) Select the .SAF file by clicking it with your mouse, and then use the Message/Run Item (not View Item) menu item to start the DataSAFE running on that .SAF file.

2) cc:Mail minimize itself and leave the DataSAFE running.You will need to follow the normal procedure of unlocking the safe to access the file contents.

Be sure not to include any reference to the safe`s combination in the text of the document, as this would defeat the whole purpose of using the DataSAFE.


Lotus Notes

Although Lotus Notes has encryption built into its database system, the security is set up to be administered by one individual for each database.  You may still find it convenient to use the DataSAFE in conjunction with Notes, as this puts added the security in the user`s hands, rather than requiring constant intervention by the administrator.  This is particularly useful if you have a large group of people using a common Notes database for a variety of conversations.

Notes is a full OLE client, which makes it very simple to add a safe to a Notes document which contains Rich Text edit areas.  The only trick is that it is not obvious when looking at a Notes form which edit areas will accept OLE data.  For example, the figure shows a small portion of a Notes form which has three edit areas marked off with square brackets.  You can type in any of these edit areas, but only the third one will accept OLE data, such as an embedded safe.  You can find out which areas will accept OLE data by placing the mouse cursor in the edit area, and then attempting to select the Edit/Insert/Object menu item.  This menu item will only work if the selected edit area will accept OLE data.

To add a safe to a Notes database:

1) Use the Notes Compose menu item to create a new entry form.  Most Notes databases have several different types of entry forms, depending on the type of information you will be entering.

2) Fill in the data requested by the form, and then select a rich text input area that will normally be the main edit and data area for the form.

3) Use the Edit/Insert/Object menu item in Notes to insert a Safe object into the Notes form.

4) Add whatever information you wish to the open safe and lock the safe.

5) Use the File/Drop Safe Into Document (Exit) menu item to exit the DataSAFE, embedding the safe into the Notes document.  The safe image will appear in the Notes form.

6) Use the Notes button bar or File/Save menu item to save the form`s data in the Notes database.

Anyone accessing this record in the Notes database can activate the safe by double-clicking the safe`s image.  The safe will remain locked unless the correct combination is entered.  Be sure not to include any reference to the safe`s combination in the text of the Notes document, as this would defeat the whole purpose of using the DataSAFE.

Self Extracting Files:

If you are not sure that the people receiving your data have the DataSAFE program, send a self-extracting file.  The procedure is:

1) Create a self-extracting file using DataSAFE using the procedure described earlier in the manual (jump to procedure)

2) Use the Notes Compose menu item to create a new entry form.  Most Notes databases have several different types of entry forms, depending on the type of information you will be entering.

3) Fill in the data requested by the form, and then select a rich text input area that will normally be the main edit and data area for the form.

4) Attach the self-extracting file as an attached file.

5) Use the Notes button bar or File/Save menu item to save the form`s data in the Notes database.


Using the File/Send... Menu Item

If your computer has a MAPI (Mail Application Programming Interface) compatible mail system installed, the DataSAFE will activate the File/Send... menu item every time you have a locked safe.  If the safe is unlocked, or if your mail system does not support MAPI, the File/Send... menu item will be grayed and inactive.

Selecting the File/Send... menu item will launch your mail system, with the normal addressing features.  You will be mailing the locked safe as an attachment to your message.  Anyone receiving the message will see the safe’s icon as an attachment, and will only be able to open the safe if they have a copy of the DataSAFE installed, and if they know the combination.

Cautions:

Advanced mail systems, like Microsoft Exchange, integrate both FAX and electronic mail in a single mail system.  This is great for text messages, but confusing when sending a locked safe.  There is no way to FAX a locked safe, and have the recipient be able to open its contents.  You must use electronic mail for the safe`s contents to be properly transmitted.


Mailing A Safe In Another Document

You can embed a safe in another document, such as a Word file or Excel spreadsheet, using the Insert/Object command in those applications.  The locked safe, and all of the data within it, will become part of your document.  You can then transmit the file containing the safe using your mail system.  The embedded safe will appear as a small image of a safe in the document when the document is opened.  The safe`s contents can be accessed by double clicking the safe image to start the DataSAFE running.

Usually it is easier to just mail a .SAF file than to insert a safe inside another document.  One reason to embed safes into a document is to use the master document to hold a number of .SAF files so that they can be transmitted at once.  You can also use the DataSAFE to hold other .SAF files.  This not recommended, as opening safes within safes becomes confusing.  Use Lockboxes inside the safe for this purpose.

Jump to Information About Adding Lockboxes to Your Safe


Other Features

The DataSAFE has a few options that allow you to customize how the program operates.  The safe appearance options are turned on and off from the Options menu.  The DataSAFE remembers these settings so that the same choices will be in effect the next time you start the program.

Directory For Files

The DataSAFE creates files on your hard disk to hold data copied into the Safe from the Windows clipboard and from OLE drag and drop operations, and when you open a locked .SAF file.  You can change which directory on your hard disk receives these files using the Options/Directory For Files menu item.  By default this directory is named \data and is a sub-directory of the directory containing the DataSAFE program files.

The DataSAFE will ask you if you would like to delete any temporary files created when you exit the DataSAFE, or when you delete a file inside the safe that reflects a temporary file.  You will not clutter up your hard disk if you always chose the Save None option.  However, there will probably be times when you want to leave the temporary file on your hard disk for a few days before deleting it, or moving it to a safe place.

Encryption Method

This menu item only exists for the North American version of the DataSAFE.  You can set the encryption method used by the DataSAFE using the Options/Encryption menu item.  If you need to transmit data from the USA to another country you will need to use the International Encryption  setting on the encryption engine.  Otherwise, you can use the default setting.  Internally these settings adjust how your combination is converted to a mathematical key.  The encryption algorithm is the same in all cases.

The next section describes US export law, and how it applies to the DataSAFE program.

Adding A Plain-Text Note to a Safe

If you are saving a large number of .SAF files, you may find that you forget what is inside each one.  Long file names help, but you can also put an un-encrypted note into the safe`s data.  The Info button, and Contents/ Edit Note Attached to Safe menu item will display any attached note and allow you to edit the note if the safe is unlocked.  For obvious reasons you should not put the combination into the note as the note is not encrypted and can be read by anyone with access to the .SAF file.

Sound Effects

If your computer is equipped with an audio board you can improve the realism of the DataSAFE by using the built in sound effects.  These sounds simulate the sound of a safe opening and closing, the combination knob clicking, and so on.  If you want to test out your speakers, turn the sound on and try the Safe/Utilities/Drop menu item.  Don`t have the sound turned up too loud when you try this...

Safe Contents Display

By default the DataSAFE displays the file`s icon and the full path/file name for each file.  You can customize the display using the Options/Show Full Path File Names and Options/Show Icon menu items.  If there is a check mark next to the item, it is selected.  Each time you pick one of these menu items, the option will toggle between on and off.

Hide Safe Image - Tool Bar Mode

Normally the DataSAFE displays the image of a safe under the menu bar and tool bar.  You can reduce the program down to just the menu bar and tool bar using the Options/Hide Safe Image menu item or button.  This is handy if you want to leave the program running at the top of the screen, but without taking up too much screen area.  Selecting the button or menu item a second time reverses the process.  The program restarts in the same state as it was last shut down, so if you exit the program with only the tool bar showing it will startup in that same state the next time your start the DataSAFE.

Remember Combination

If you set the Options/Remember Combination menu item the DataSAFE will remember combinations entered while the program is running.  Each time you need to enter a combination the last one you entered will be already filled in.  This is a time saver if you are using one combination for a number of files.  For security reasons this setting is not saved after you shutdown the DataSAFE.

Hide Combination Digits

When you enter a locking or unlocking combination the digits are visible as you type.  If you want to make sure that people looking over your shoulder cannot see your combination, set the Options/Hide Combination Digits menu item so that a check mark appears next to that item.  The combination digits will then be displayed as “*” characters.

Confirm New Combinations

When you enter a new locking combination there is always the chance of making a typing error.  By default the DataSAFE will ask you to reenter any new combinations a second time, but does not request verification of saved combinations.  You can turn the manual verification step off using the Options/Confirm New Combinations menu item so that only one combination input is required..

Changing Your User Password

The Safe/Utilities/Change PSW menu item allows you to change your user password at any time.  This is the password that allows you to gain access to your personal list of combinations.  The Change User Password dialog box, shown in Figure 1, will appear.  Note that you must enter your old password correctly to be allowed to change passwords.  You list of combinations will remain unchanged after you change your password.


US Law and Exportation of Encryption
US/Canadian Law And Exportation Of The DataSAFE

Many people are concerned about using encryption programs such as the DataSAFE because the have heard that it is a serious offense to illegally export encryption technology.  This is true, as the US Government treats encryption as a munition, just like exporting guns and bombs.  The reasons for this date back to WWII, when the ability to crack enemy codes was a key element of the allied strategy in both the Atlantic and Pacific theaters.  Canada also controls encryption technology.

The US and Canadian Governments provide a process by which companies can register encryption programs and receive permission to export outside of North America. The DataSAFE received an approval for exportation (CJ 254-96.)  Copies of this ruling are available on request from NovaStor.  You can use the DataSAFE to protect information that crosses US/Canadian borders without any fear of violating the law.  However, you must use the International Encryption option to create any .SAF or self-extracting safe file if you plan to transmit the data from the USA or Canada to another country.  This option is set from the Options/Encryption menu item.


How The Safe Program Works
How The DataSAFE Works

The DataSAFE works by combining two technologies: encryption and OLE 2.0 (Object Linking and Embedding version 2.0.)  Using these technologies together allows the program to create the illusion of locking objects in a safe and later retrieving them.  What really happens “under the hood” is a bit more complex.

When you first add a file to the safe`s contents, the DataSAFE simply makes a record of the file`s name and directory path.  The file is not read until the combination is set and you save the contents as a .SAF file.  During the process of saving the .SAF file the DataSAFE reads the source files, encrypts the data, and then writes the scrambled bytes to the .SAF file.  When you later read the .SAF file, the DataSAFE does not access the file`s contents until you enter the combination.  The combination is then applied to unscramble the .SAF file`s bytes. Only the exact combination will decode the contents.

If you add data to the safe using the Windows clipboard, or one of the many OLE techniques (Insert Object, dragging a selection from a Word document, etc.) the DataSAFE has a bit more work to do.  The data is initially written to a temporary file in your “save” directory until you set the combination.  Once you set the combination and save the .SAF file, the DataSAFE cleans up all of the temporary files.  You can tell when the DataSAFE creates a temporary file because the file`s icon will be a blue box with the letters “OLE” written on the sides, the file extension will be .OLE.

If you create a Safe object from within another application (using the application`s Insert Object menu item) the DataSAFE must read and write data to/from that document`s data instead of a separate .SAF disk file.  The OLE data is stored scrambled within the container document, using the same techniques used to write .SAF files. When the OLE data is read from the container document the DataSAFE leaves the data scrambled until you enter the combination.  This avoids the risk of anyone being able to read the safe`s contents in memory using a debugging tool.  Data is only decoded after the combination has been entered.

Self-extracting safe files add another level of sophistication to the DataSAFE program.  To create these files the DataSAFE wraps a small 16 bit Windows program around your encrypted data.  The included program has just enough intelligence obtain a combination and decrypt the data, but cannot create new locked safe files.

The underlying encryption engine was developed by Bruce Schneier, a well known expert in the field of cryptography.  The algorithm is code named “BLOWFISH” and depends on a 16 pass, 64 bit block encryption that has not been broken.  Those interested in more details should reference Mr. Schneier’s excellent book Applied Cryptography, Second Edition, John Wiley and Sons, 1996.

The biggest security risk in using the DataSAFE is the most obvious one - someone learning your combination.  Security experts have compiled a wealth of data showing that most users are amazingly relaxed about protecting their log-on passwords and access codes.  There is not much point in using the DataSAFE, or any other security device, if you do not protect and routinely change the combinations you use.

One other point worth noting is that the saved lists of combinations are encrypted using the same algorithm used to encrypt .SAF files.  This makes the stored combinations no more vulnerable than the .SAF files themselves.  If you change your password your list of combinations is re-encrypted using your password as the encryption key.


Registering Your Copy

If you have a trail version you will need to obtain a registration number from NovaStor to continue using the DataSAFE.  Both individual and group registrations are available.  You can call NovaStor Inc. via phone at the following numbers in Canada:

Phone: 805-579-6700

Fax: 805-579-6710

Or use our Internet site:

 http://www.novastor.com

or Email

sales@novastor.com


Receiving Updates

One of the installation options for the DataSAFE is whether to enable the Easy Update feature.  Easy Update allows you to check for updated copies of the DataSAFE via the Internet.  Easy Update connects to the NovaStor server and compares the version number of the DataSAFE on your computer to the latest version.  If a newer version exists the Easy Update feature will download the upgrade for you (assuming you chose to do so.)

You will need to establish an Internet connection before using Easy Update.  For most people this means having their computer dial an Internet Service Provider using a modem connection.  In a large company your Internet connection is probably provided via your network (LAN).  Make sure that you have a live Internet connection by using your web browser (Internet Explorer, Netscape, etc.) to check an Internet page.

Once you are connected, select the Help/Check For Updates menu item.  Easy Update will be activated and will perform the following steps:

1)	Connects to a secure server at NovaStor.

2)	Compares the version number of DataSAFE you now have to the latest release available from NovaStor.

3)	If a newer release exists Easy Update will ask if you wish to upgrade now.  If you select “Yes”…

4)	Easy Update will download the appropriate files and guide you through the simple upgrade process.

When you are through you can disconnect your Internet connection.

Notes On Easy Update

Easy Update is a specialized form of the latest Internet “push” technology.  The advantage of this approach is that the user does not need to locate the correct web page, manually decide if an update is necessary, select the right file, etc.  Easy Update also updates itself each time an update is performed so that the local version number remains up-to-date.

For large corporate installations the Easy Update feature can be configured to point to an internal Intranet page instead of the external Internet.  Contact NovaStor if you wish to set up a local upgrade page.  The upgrade process works identically with internally sourced updates.

 Contacting NovaStor


Contacting NovaStor

You can call NovaStor Corp. via phone at:

Phone: 805-579-6700

Fax: 805-579-6710

Or use our Internet site:

 http://www.novastor.com

or Email

sales@novastor.com

Or via surface mail:

NovaStor Corporation

80-B West Cochran Street

Simi Valley, CA 93065-6219

http://www.novastor.com

ftp://ftp.novastor.com


Other Products
Other Products from NovaStor

OTHER PRODUCTS FROM NOVASTOR

NovaBACKUP

A professional, quality backup and restore package that runs with all types of tape drives, disk drives and removable disk drives. NovaBACKUP is the #1 retail backup package on the market today.

ThunderBYTE AntiVirus

This powerful program is a world leader in virus detection and elimination on floppies and hard disks, or from the Internet, including e-mail attachments.

DataSAFE Encryption

Backup and anti-virus utilities protect data from loss. But just because data is there does not make it secure -- DataSAFE Encryption completes the defense. The intuitive data encryption software looks, acts, sounds and feels like a real combination safe, enabling users to lock-up their data and send it securely through e-mail, intranets, or the Internet.

NovaWORKS Security Suite

All three great programs in one box. Backup, Anti-Virus, and Encryption.  Get complete data protection all in one place.

For more information on these great products contact NovaStor Corporation at:

(805) 579-6700

(805) 579-6710 (FAX)

e-mail: sales@novastor.com

On The Internet:

General: http://www.novastor.com

Purchase: http://www.novastor.com/novastore