Google unveils Project Vault, a microSD card for storing sensitive data

Google wants to help you protect your most sensitive data by offloading it to an encrypted microSD card.

Google announced the new initiative, called Project Vault, at its annual I/O conference for developers.

[aditude-amp id="flyingcarpet" targeting='{"env":"staging","page_type":"article","post_id":1738008,"post_type":"story","post_chan":"none","tags":null,"ai":false,"category":"none","all_categories":"business,security,","session":"A"}']

Google’s Advanced Technology and Projects (ATAP) group developed Vault with the goal of having at least 1GB available on the ARM-based chip, to support features like an immutable logging system, but the ATAP team members at Google have 4GB of “isolated sealed storage” in their own versions, ATAP’s Mudge Zatko explained in a talk today.

The chip runs a custom-built Real Time Operating System (RTOS), Zatko said. The chips can allow people to communicate without exposing cryptographically sensitive data, he said.

Regina Dugan, ATAP’s vice president of engineering, described Vault as “your digital mobile safe.”

There’s a Vault research-and-development hardware kit available on GitHub under an open-source license, too.

It’s not surprising that Google’s ATAP group — the team behind the Jacquard, Soli, and Ara projects — has allocated resources to a security project like this, given Google’s reported involvement with the National Security Agency’s Prism system for information collection.