Spec to curb USB plug-ins

The IEEE standards body is to address security for personal storage devices

A new standard for authenticating USB Flash drives and other plug-in storage hardware is being drawn up by the Institute of Electrical and Electronics Engineers (IEEE). The move will help firms secure USB devices in the workplace and avoid having to ban them.

USB Flash drives are a popular and convenient way to move files, but they can be a threat to data security. Analyst Gartner last year warned that uncontrolled use is putting firms at risk

The IEEE's P1667 spec, due in July 2006, will define methods for authenticating plug-in storage devices. Many firms that provide Flash drives are involved in developing the standard.

"The IEEE P1667 standard will deliver the necessary control over USB Flash drives using uniform authentication methods," said Ariel Sobelman, chair of the IEEE's working group. Sobelman is also vice-president of Flash disk maker M-Systems.