Apparatus and method for assuring secure disposal of a hard disk drive unit

• US 20080046998A1
• Filed: 07/27/2006
• Published: 02/21/2008
• Est. Priority Date: 07/27/2006
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Waltermann, Rod D., Locker, Howard Jeffrey, Springfield, Randall S., Cromer, Daryl
• Granted Patent: US 8,381,304 B2
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/805 using a security table for the storage sub-system
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A hard disk drive unit includes a microprocessor programmed to erase data stored within the drive unit if it is determined that a process potentially leading to a misuse of the data stored within the drive unit, and if secure disposal configuration data stored in nonvolatile storage within the drive indicates that the data is to be erased. Such a process includes initializing the drive unit for operation without providing a password matching a password stored in the drive unit, initializing the drive unit in a system not having CMOS configuration data matching the drive unit, and determining that a failure rate within the drive unit exceeds a threshold level.

Claims

1. A method for causing data stored within a hard disk drive unit to be erased, wherein the method comprises:

storing secure disposal configuration data in nonvolatile storage within the hard disk drive unit;

determining that a process potentially leading to a misuse of the data stored within the hard disk drive unit has occurred, wherein the process potentially leading to a misuse of the data is taken from a group consisting of initializing the hard disk drive unit for operation without providing a password matching a password stored within the hard disk drive unit, initializing the hard disk drive unit for operation in a computer system not having CMOS configuration data matching the hard disk drive unit, and determining that a failure rate occurring within the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level, and

erasing the data stored within the hard disk drive unit.

2. The method of claim 1, wherein a determination that the hard disk drive unit is being initialized for operation in a computer system not having CMOS configuration data matching the hard disk drive unit comprises determining that electrical power has been applied to the hard disk drive unit for a period of time exceeding a predetermined minimum time in a computer system not having CMOS configuration data matching the hard disk drive unit.

3. The method of claim 1, wherein

the hard disk drive unit is locked, so that the data stored within the hard disk drive unit cannot be read, before the hard disk drive unit is initialized for operation, and

the hard disk drive unit is unlocked, so that the data stored within the hard disk drive unit can be read, in response to determining that a password provided as an input during initializing the hard disk drive matches a password stored within the hard disk drive unit.

4. The method of claim 1, wherein a determination that the hard disk drive unit is being initialized for operation without providing a password matching a password stored within the hard disk drive unit comprises determining whether a password provided as an input matches either a user password or a master password stored in the hard disk drive unit.

5. The method of claim 4, wherein

the hard disk drive unit is locked, so that the data stored within the hard disk drive unit cannot be read, before the hard disk drive unit is initialized for operation, and

the hard disk drive unit is unlocked, so that the data stored within the hard disk drive unit can be read, in response to determining that a password provided as an input during initializing the hard disk drive matches the user password stored within the hard disk drive unit, and additionally in response to determining that the hard disk drive unit has not been configured for maximum security and that the password provided as an input during initializing the hard disk drive matches the master password.

6. The method of claim 1, wherein a determination that a failure rate occurring within the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level exceeds a threshold level includes determining that a soft error rate within the hard disk drive unit is excessive.

7. The method of claim 1, wherein

the secure disposal configuration data includes a plurality of variables, and

individual variables within the secure disposal configuration data indicate which individual processes are used to determine that a process potentially leading to a misuse of the data stored within the hard disk drive unit has occurred.

8. The method of claim 1, wherein a process for erasing the data stored within the hard disk drive unit includes setting a nonvolatile bit so that the erasing process will continue if electrical power is turned off and then restored to the hard disk drive uinit.

9. A hard disk drive unit comprising:

a disk assembly having data stored on the disk assembly;

a drive mechanism operable with the disk assembly for reading and writing data thereon;

nonvolatile storage storing secure disposal configuration data including a password; and

a microprocessor programmed to execute a method for erasing the data stored on the disk assembly in response to determining that a process potentially leading to a misuse of the data stored on the disk assembly, wherein the method is taken from a group consisting of;

determining that the hard disk drive unit is being initialized for operation without providing a password matching the password stored in nonvolatile storage, determining that the secure disposal configuration data enables erasing the data stored on the disk assembly when it is determined that the hard disk drive unit is being initialized for operation without providing a password matching the password stored in nonvolatile storage, and erasing the data stored on the disk assembly,

determining that the hard disk drive unit is being initialized for operation without connection to a computer system including CMOS configuration data matching the hard disk drive unit, determining that the secure disposal configuration data enables erasing the data stored on the disk assembly when it is determined that the hard disk drive unit is being initialized for operation without connection to a computer system including CMOS configuration data matching the hard disk drive unit, and erasing the data stored on the disk assembly; and

determining that a failure rate occurring within the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level, determining that the secure disposal configuration data enables erasing the data stored on the disk assembly when it is determined that the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level, and erasing the data stored on the disk assembly.

10. The hard disk drive unit of claim 9, wherein a determination that the hard disk drive unit is being initialized for operation without connection to a computer system having CMOS configuration data matching the hard disk drive unit comprises determining that electrical power has been applied to the hard disk drive unit for a period of time exceeding a predetermined minimum time without connection to a computer system having CMOS configuration data matching the hard disk drive unit.

11. The hard disk drive unit of claim 9, wherein

the hard disk drive unit is locked, so that the data stored within the hard disk drive unit cannot be read, before the hard disk drive unit is initialized for operation, and

the hard disk drive unit is unlocked, so that the data stored within the hard disk drive unit can be read, in response to determining that a password provided as an input during initializing the hard disk drive matches a password stored within the hard disk drive unit.

12. The hard disk drive unit of claim 9, wherein a determination that the hard disk drive unit is being initialized for operation without providing a password matching a password stored within the hard disk drive unit comprises determining whether a password provided as an input matches either a user password or a master password stored in the hard disk drive unit.

13. The hard disk drive unit of claim 12, wherein

the hard disk drive unit is locked, so that the data stored within the hard disk drive unit cannot be read, before the hard disk drive unit is initialized for operation, and

the hard disk drive unit is unlocked, so that the data stored within the hard disk drive unit can be read, in response to determining that a password provided as an input during initializing the hard disk drive matches the user password stored within the hard disk drive unit, and additionally in response to determining that the hard disk drive unit has not been configured for maximum security and that the password provided as an input during initializing the hard disk drive matches the master password.

14. The hard disk drive unit of claim 9, wherein a determination that a failure rate occurring within the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level exceeds a threshold level includes determining that a soft error rate within the hard disk drive unit is excessive.

15. The hard disk drive unit of claim 9, wherein

the secure disposal configuration data includes a plurality of variables, and

individual variables within the secure disposal configuration data indicate which individual processes are used to determine that a process potentially leading to a misuse of the data stored within the hard disk drive unit has occurred.

16. The hard disk drive unit of claim 9, wherein a process for erasing the data stored within the hard disk drive unit includes setting a nonvolatile bit so that the erasing process will continue if electrical power is turned off and then restored to the hard disk drive unit.

21. The hard disk drive unit of claim 12, wherein

the hard disk drive unit is locked, so that the data stored within the hard disk drive unit cannot be read, before the hard disk drive unit is initialized for operation, and

the hard disk drive unit is unlocked, so that the data stored within the hard disk drive unit can be read, in response to determining that a password provided as an input during initializing the hard disk drive matches the user password stored within the hard disk drive unit, and additionally in response to determining that the hard disk drive unit has not been configured for maximum security and that the password provided as an input during initializing the hard disk drive matches the master password.

17. A computer system comprising a system microprocessor, nonvolatile storage storing CMOS configuration data and a system initialization subroutine, and a hard disk drive unit operably connected to the system microprocessor, wherein

the hard disk drive unit includes a disk assembly having data stored on the disk assembly, a drive mechanism operable with the disk assembly for reading and writing data thereon, nonvolatile storage storing secure disposal configuration data including a password;

and a microprocessor programmed to execute a method for erasing the data stored on the disk assembly in response to determining that a process potentially leading to a misuse of the data stored on the disk assembly, wherein the method is taken from a group consisting of;

determining that the hard disk drive unit is being initialized for operation without providing a password matching the password stored in nonvolatile storage, determining that the secure disposal configuration data enables erasing the data stored on the disk assembly when it is determined that the hard disk drive unit is being initialized for operation without providing a password matching the password stored in nonvolatile storage, and erasing the data stored on the disk assembly;

determining that the hard disk drive unit is being initialized for operation without connection to a computer system including CMOS configuration data matching the hard disk drive unit, determining that the secure disposal configuration data enables erasing the data stored on the disk assembly when it is determined that the hard disk drive unit is being initialized for operation without connection to a computer system including CMOS configuration data matching the hard disk drive unit, and erasing the data stored on the disk assembly; and

determining that a failure rate occurring within the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level, determining that the secure disposal configuration data enables erasing the data stored on the disk assembly when it is determined that the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level, and erasing the data stored on the disk assembly.

18. The computer system of claim 17, wherein a determination that the hard disk drive unit is being initialized for operation without connection to a computer system having CMOS configuration data matching the hard disk drive unit comprises determining that electrical power has been applied to the hard disk drive unit for a period of time exceeding a predetermined minimum time without connection to a computer system having CMOS configuration data matching the hard disk drive unit.

19. The computer system of claim 17, wherein

the hard disk drive unit is locked, so that the data stored within the hard disk drive unit cannot be read, before the hard disk drive unit is initialized for operation,

the hard disk drive unit is unlocked, so that the data stored within the hard disk drive unit can be read, in response to determining that a password provided as an input during initializing the hard disk drive matches a password stored within the hard disk drive unit, and

the system initialization subroutine causes a request for a password to be displayed.

20. The computer system of claim 17, wherein a determination that the hard disk drive unit is being initialized for operation without providing a password matching a password stored within the hard disk drive unit comprises determining whether a password provided as an input matches either a user password or a master password stored in the hard disk drive unit.

22. The computer system of claim 17, wherein a determination that a failure rate occurring within the hard disk drive unit during operation of the hard disk drive unit exceeds a threshold level exceeds a threshold level includes determining that a soft error rate within the hard disk drive unit is excessive.

23. The computer system of claim 17, wherein

the secure disposal configuration data includes a plurality of variables, and

individual variables within the secure disposal configuration data indicate which individual processes are used to determine that a process potentially leading to a misuse of the data stored within the hard disk drive unit has occurred.

24. The computer system of claim 17, wherein a process for erasing the data stored within the hard disk drive unit includes setting a nonvolatile bit so that the erasing process will continue if electrical power is turned off and then restored to the hard disk drive uinit.