Removable hard disk with embedded security card

• US 20080178007A1
• Filed: 01/22/2007
• Published: 07/24/2008
• Est. Priority Date: 01/22/2007
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Agarwal, Ajay, Pratt, Thomas L., Curtis, William A., Bumpus, Winston
• Granted Patent: US 8,549,619 B2
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A system and method is disclosed for authenticating a removable data storage device (RDSD) by implementing a removable trusted information module (TIM) comprising a non-volatile storage medium operable to securely store passwords, digital keys, digital certificates and other security credentials (“security credentials”). An RDSD enclosure comprising a disk storage drive, one or more interfaces, one or more connectors, and a TIM is implemented to be connected, disconnected and reconnected to a plurality of predetermined information handling systems. The RDSD is authenticated by the TIM initiating comparison and cryptographic operations between its contents and the contents of authentication files comprising the RDSD. Once the RDSD has been authenticated, the TIM performs similar operations to authorize access and usage of its contents by the information handling system. Other cryptographic operations are performed to determine whether the integrity of data files has been compromised. Removal of the TIM prevents an information handling system from accessing the contents of the RDSD.

Claims

1. A security system for a removable data storage device (RDSD), comprising:

one or more information handling systems, operable to access a plurality of data files comprising said RDSD; and

a trusted information module (TIM) comprising a non-volatile storage medium operable to securely store security credentials;

wherein said TIM is operable to initiate authentication and authorization processes to;

authenticate said RDSD to said information handling systems; and

authorize access and usage of said plurality of data files by said information handling system.

2. The system of claim 1, wherein said TIM is operable to initiate comparison and cryptographic operations using said authentication and authorization processes to authenticate said information handling system to said RDSD.

3. The system of claim 1, wherein said removable TIM is operable to initiate comparison and cryptographic operations using said authentication and authorization processes to authenticate a predetermined user to said RDSD.

4. The system of claim 1, wherein said TIM is operable to initiate said comparison and cryptographic operations to determine if the integrity of said plurality of data files has been compromised prior to authorizing their access and usage by said information handling systems.

5. The system of claim 1, wherein said TIM is operable to be coupled to said RDSD through a predetermined interface.

6. The system of claim 5, wherein said predetermined interface is operable to be internally coupled to said disk storage drive.

7. The system of claim 5, wherein said predetermined interface is operable to be externally coupled to said disk storage drive.

8. The system of claim 5, wherein said TIM is operable to be removed from said predetermined interface.

9. The system of claim 8, wherein said removable TIM is operable to be removed from said predetermined interface through said RDSD enclosure.

10. The system of claim 8, wherein removal of said removable TIM from said predetermined interface disables access to said plurality of data files by said information handling system.

11. A method for securing information stored in a plurality of data files on a removable data storage device (RDSD), comprising:

storing security credentials on a trusted information module (TIM) comprising a non-volatile storage medium; and

using said TIM to initiate authentication and authorization processes to;

authenticate said RDSD to an information handling systems; and

authorize access and usage of said plurality of data files by said information handling system.

12. The method of claim 11, further comprising:

using said TIM to initiate cryptographic operations using said authentication and authorization processes to authenticate said information handling system to said RDSD.

13. The method of claim 11, further comprising:

using said TIM to initiate cryptographic operations using said authentication and authorization processes to authenticate a predetermined user to said RDSD.

14. The method of claim 11, further comprising:

using said TIM to initiate said cryptographic operations to determine if the integrity of said plurality of data files has been compromised prior to authorizing their access and usage by said information handling systems.

15. The method of claim 11, wherein said TIM is coupled to said RDSD through a predetermined interface.

16. The method of claim 15, wherein said predetermined interface is internally coupled to said disk storage drive.

17. The method of claim 15, wherein said predetermined interface is externally coupled to said disk storage drive.

18. The method of claim 15, wherein said TIM is operable to be removed from said predetermined interface.

19. The method of claim 18, wherein said TIM is operable to be removed from said predetermined interface through said RDSD enclosure.

20. The method of claim 18, wherein removal of said removable TIM from said predetermined interface disables access to said plurality of data files by said information handling system.