Information Storage Device Having Auto-Lock Feature

• US 20100011427A1
• Filed: 07/10/2008
• Published: 01/14/2010
• Est. Priority Date: 07/10/2008
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Zayas, Fernando A.
• Application Number:
  US12/171,274
• Publication Number:
  US 20100011427A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2139 Recurrent verification

Abstract

An information storage device is protected from unauthorized access by requiring periodic re-authentication of user credentials. Failure to correctly re-authenticate within a time window results in the automatic locking of the portions of the storage device that have been previously enabled for the user so that they are no longer accessible.

Claims

1. A method for protecting contents of an information storage device carried out by the information storage device, comprising:

authenticating a user;

monitoring time elapsed from the time the user is authenticated; and

disabling access to portions of the information storage device associated with the user if the time elapsed exceeds a maximum.

2. The method according to claim 1, wherein the information storage device enables the portions of the information storage device associated with the user for access when the user is authenticated for the first time.

3. The method according to claim 1, wherein, after portions of the information storage device associated with the user have been enabled for access, the information storage device resets the time elapsed each time the user is authenticated.

4. The method according to claim 3, wherein the user is authenticated through a user credentials that includes one of an alphanumeric code, biometric inputs, and a smart card.

5. The method according to claim 3, wherein the user is authenticated through a user credential that includes a combination of at least two of an alphanumeric code, biometric inputs, and a smart card.

6. The method according to claim 1, further comprising:

after disabling access to portions of the information storage device associated with the user, transmitting an error message in response to a request to access one of the portions of the information storage device associated with the user.

7. The method according to claim 1, further comprising:

after disabling access to portions of the information storage device associated with the user, re-enabling the portions of the information storage device associated with the user if the user is re-authenticated.

8. A computer system comprising:

a host unit; and

an information storage device configured to;

(i) enable portions of the information storage device for access by the host unit when a user has been authenticated by the information storage device, and (ii) disable the portions of the information storage for access by the host unit if the user has not been re-authenticated within a predetermined time period.

9. The computer system according to claim 8, wherein the host unit and the information storage device are components of a laptop or desktop computer.

10. The computer system according to claim 8, wherein the host unit and the information storage device are connected over a computer network.

11. The computer system according to claim 8, wherein the information storage device includes a timer that is reset each time the user is authenticated and the information storage device disables the portions of the information storage for access by the host unit if the timer exceeds the predetermined time period.

12. The computer system according to claim 8, wherein the host unit includes input devices for receiving inputs of user credentials for authenticating the user at the information storage device, the input devices including a keyboard and at least one of biometric input device and a smart card reader.

13. The computer system according to claim 12, wherein the information storage device is configured to authenticate a user based on combination of user credentials that are input through at least two of the keyboard, the biometric input device, and the smart card reader.

14. The computer system according to claim 8, wherein the host unit is programmed with an operating system that includes host-level user authentication.

15. The computer system according to claim 14, wherein the operating system issues user credentials for authenticating the user at the information storage device in response to a successful host-level user authentication.

16. A computer-readable storage medium comprising instructions that are executable by a controller of an information storage device to carry out the steps of:

authenticating a user;

monitoring time elapsed from the time the user is authenticated; and

disabling partitions of the information storage device associated with the user if the time elapsed exceeds a maximum.

17. The computer-readable storage medium according to claim 16, further comprising instructions that are executable by the controller of the information storage device to carry out the steps of:

enabling the partitions of the information storage device associated with the user when the user is authenticated for the first time.

18. The computer-readable storage medium according to claim 16, further comprising instructions that are executable by the controller of the information storage device to carry out the steps of:

after the partitions of the information storage device associated with the user have been enabled, resetting the time elapsed each time the user is authenticated.

19. The computer-readable storage medium according to claim 18, further comprising instructions that are executable by the controller of the information storage device to carry out the steps of:

after disabling the partitions of the information storage device, transmitting an error message in response to a request to access one of the partitions of the information storage device associated with the user.

20. The computer-readable storage medium according to claim 18, further comprising instructions that are executable by the controller of the information storage device to carry out the steps of:

after disabling the partitions of the information storage device associated with the user, re-enabling the partitions of the information storage device associated with the user if the user is re-authenticated.