Random password automatically generated by bios for securing a data storage device

• US 20070234073A1
• Filed: 03/31/2006
• Published: 10/04/2007
• Est. Priority Date: 03/31/2006
• Status: Abandoned Application

• Current Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Locker, Howard, Cromer, Daryl, Springfield, Randall, Waltermann, Rod
• Application Number:
  US11/396,267
• Publication Number:
  US 20070234073A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A system, method, and computer readable medium are disclosed. The method includes automatically generating a set of security data. The security data is stored in non-volatile memory. The set of security data is also programmed into the data storage device as a security code.

Claims

1. An automated method comprising:

automatically generating a set of security data;

storing the set of security data in non-volatile memory; and

programming the set of security data into the data storage device as a security code.

2. The method of claim 1, further comprising:

encrypting, prior to the storing, the set of security data, and wherein the non-volatile memory stores an encrypted set of security data.

3. The method of claim 1, wherein the storing stores the set of security data in one of an encrypted and an unencrypted state, the method further comprising:

initializing, after the programming the data storage device;

retrieving the set of security data from non-volatile memory, wherein the retrieving comprises one of decrypting, in response to storing the set of security data in an encrypted state, the security data, and encrypting, in response to storing the set of security data in a decrypted state, the security data; and

automatically transmitting, in response to the initializing, the set of security data to the data storage device.

4. The method of claim 1, wherein the automatically generating further comprises:

determining that the data storage device is lacking the set of security data.

5. The method of claim 1, wherein the set of security data is at least one of:

automatically generated at the first initialization of the data storage device;

automatically generated by a test fixture;

automatically generated after a predefined interval of time; and

automatically generated in response to receiving an instruction for securing the data storage device.

6. The method of claim 1, wherein the set of security data and the security code are inaccessible to a user.

7. The method of claim 1, wherein the set of security data is automatically generated independent of any user interaction.

8. An information processing system comprising:

a motherboard;

a security data generator, communicatively coupled to the motherboard, the security data generator automatically generating at least one set of security data; and

at least one data storage device, communicatively coupled to the motherboard, the data storage device requiring a programmed security code to access data stored therein,

wherein the security data generator programs, a security code associated with the set of security data into the at least one data storage device as a programmed security code.

9. The information processing system of claim 8, wherein the security data generator further comprises:

a basic input/output system for programming the security code into the data storage device as the programmed security code.

10. The information processing system of claim 9, wherein the basic input/output system:

initializes the data storage device;

retrieves the set of security data from non-volatile memory;

one of decrypts, in response to storing the set of security data in an encrypted state, the security data, and encrypts, in response to storing the set of security data in a decrypted state, the security data; and

automatically transmits the security code to the data storage device in response to initializing the data storage device.

11. The information processing system of claim 8, wherein the set of security data is a password.

12. The information processing system of claim 8, wherein the security data generator comprises a trusted platform module and further encrypts the set of security data.

13. The information processing system of claim 8, wherein the security data generator automatically generates the set of security data in response to at least one of:

a first initialization of the data storage device;

a predefined interval of time passing;

determining that the data storage device is lacking the set of security data; and

receiving an instruction for securing the data storage device.

14. The information processing system of claim 8, wherein the set of security data and the security code are inaccessible to a user.

15. A computer readable medium comprising instructions for:

automatically generating a set of security data;

storing the security data in non-volatile memory; and

programming the set of security data into the data storage device as a security code.

16. The computer readable medium of claim 15, further comprising instructions for:

encrypting, prior to the storing, the set of security data, and wherein the non-volatile memory stores an encrypted set of security data.

17. The computer readable medium of claim 15, further comprising instructions for:

initializing, after the programming the data storage device;

retrieving the set of security data from non-volatile memory, wherein the retrieving comprises one of decrypting, in response to storing the set of security data in an encrypted state, the security data, and encrypting, in response to storing the set of security data in a decrypted state, the security data; and

automatically transmitting, in response to the initializing, the set of security data to the data storage device.

18. The computer readable medium of claim 15, wherein the automatically generating further comprises instructions for:

determining that the data storage device is lacking the set of security data.

19. The computer readable medium of claim 15, wherein the set of security data is at least one of:

automatically generated at the first initialization of the data storage device;

automatically generated by a test fixture;

automatically generated after a predefined interval of time; and

automatically generated in response to receiving an instruction for securing the data storage device.

20. The computer readable medium of claim 15, wherein the set of security data and the security code are inaccessible to a user.