Datawipe
Blackbelt 360 launches the datawipe application on to the device, whilst collecting serial information (make model and firmware etc from the device) the wipe is instigated. To complete the process, following the wipe and in order to remove the application on certain platforms a factory reset is performed and sometimes a software flash. This removes the app and restarts device, capturing a successful (auditable) recording of the sequence.
The solution is not "just a factory" reset and has been tested on commercially available forensic equipment (Oxygen, Cellebrite and X-ray), which confirmed that the data can’t be recovered from the device following the Pervacio data wipe process.
Smartphones (Apple iOS, Android, BlackBerry, Windows Phone, Symbian)
OS devices use a NAND flash disk protected by hardware file system encryption. During the wipe Blackbelt 360 performs the following operations:
-
hardware encryption keys are destroyed (EMF key)
-
new hardware encryption keys are generated (EMF key)
-
user partition is initialized with new data
-
3rd party applications
-
all other encryption keys including device transport key and IT Policy public key.
-
all PIN encryption information from the device
-
all user data
-
whole disk is reformatted
-
whole disk is repartitioned into two logical partitions
-
nvram is reset
-
hashes of user password
-
system partition is flashed onto the device
-
baseband memory is reset and flashed with a new firmware
-
authentication information
-
low level bootloader is flashed
Furthermore for enterprise devices that have content protection turned on Blackbelt 360 datawipe performs a full memory scrub process to overwrite the device heap that is in RAM, application storage, and the files that a user saved on the device.
