Apparatus and method for protecting diagnostic ports of secure devices

• US 20060200682A1
• Filed: 03/03/2005
• Published: 09/07/2006
• Est. Priority Date: 03/03/2005
• Status: Active Grant

• Current Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Original Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Inventors: Hars, Laszlo, Beaver, Donald Rozinak
• Granted Patent: US 7,822,995 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 11/3656 using a specific debug interface
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

An electronic system comprises a processor, a diagnostic port, and a switching circuit, including a switch connected between the diagnostic port and the processor, for enabling and disabling the diagnostic port and for restricting access to contents of the electronic system prior to enabling the diagnostic port. A method for operating the electronic system is also included.

Claims

1. An electronic system comprising:

a processor;

a diagnostic port;

a switching circuit, including a switch connected between the diagnostic port and the processor, for enabling and disabling the diagnostic port and for restricting access to contents of the electronic system prior to enabling the diagnostic port.

2. The electronic system of claim 1, further comprising:

a secret root key stored in a non-volatile memory for encrypting and decrypting data in the electronic system, wherein the switching circuit restricts access to contents of the electronic system by masking the secret root key.

3. The electronic system of claim 2, wherein the switching circuit further comprises:

a multiplexer, wherein the switching circuit controls the operation of the multiplexer to alternatively enable or block the secret root key.

4. The electronic system of claim 1, further comprising a sensor circuit for detecting if a connector is attached to the diagnostic port.

5. The electronic system of claim 1, wherein the switching circuit periodically checks the operational status of the switch.

6. The electronic system of claim 1, wherein the switching circuit resets the system when the switch is closed.

7. The electronic system of claim 6, wherein resetting the system includes erasing memory.

8. The electronic system of claim 1, further comprising:

a tamper indicating device for indicating that the diagnostic port has been used.

9. The electronic system of claim 1, wherein the switching circuit closes the switch after the system has been reset.

10. The electronic system of claim 1, further comprising:

one or more user keys, generated by using the secret root key, for encrypting and decrypting data in the electronic system, wherein the switching circuit restricts access to contents of the electronic system by masking the user key.

11. A method of operating an electronic system, the method comprising:

providing a switching circuit, including a switch connected between a diagnostic port and a processor for enabling and disabling the diagnostic port;

determining the operational status of the switch; and

using the switching circuit to restrict access to contents of the electronic system in response to the operational status of the switch prior to enabling the diagnostic port.

12. The method of claim 11, wherein the switching circuit restricts access to contents of the electronic system by masking a secret root key.

13. The method of claim 11, wherein the switching circuit restricts access to contents of the electronic system by erasing memory.

14. The method of claim 11, wherein the switching circuit restricts access to contents of the electronic system by erasure or reset of a subset of memory.

15. The method of claim 11, wherein the switching circuit restricts access to contents of the electronic system by encrypting memory contents prior to erasing the memory.

16. The method of claim 11, further comprising:

detecting if a connector is attached to the diagnostic port.

17. The method of claim 11, wherein the switching circuit periodically checks the operational status of the switch.

18. The method of claim 11, wherein the switching circuit resets the system when the switch is closed.

19. The method of claim 18, wherein resetting the system includes erasing memory.

20. The method of claim 11, wherein the switching circuit restricts access to contents of the electronic system by masking a user key.