METHOD AND APPARATUS FOR PROTECTING A PASSWORD OF A COMPUTER HAVING A NON-VOLATILE MEMORY

• US 20130185789A1
• Filed: 12/10/2012
• Published: 07/18/2013
• Est. Priority Date: 01/15/2012
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: ARAKI, NAOYUKI, HAGIWARA, MIKIO, KASAMATSU, EITAROH, TSUKAMOTO, YASUMICHI
• Granted Patent: US 8,990,926 B2
• Time in Patent Office: Days
• US Class Current: 726/18
• CPC Class Codes: G06F 1/3203 Power management, i.e. event-based initiation of a power-saving mode
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss

Abstract

A method for protecting a password of a computer having a non-volatile memory is disclosed. A password is stored in a non-volatile memory of a computer. The computer is then transitioned to a power saving state. In response to a detection of an unauthorized access to the non-volatile memory during the power saving state transition, a password input is requested from a user. The computer returns to a power-on state from the power saving state when there is a success in authentication of the input password.

Claims

1. A method for protecting a password of a computer having a non-volatile memory, said method comprising:

storing a password in a non-volatile memory of a computer;

transitioning said computer to a power saving state;

in response to a detection of an unauthorized access to said non-volatile memory during said power saving state transition, requesting a password input from a user; and

returning to a power-on state from said power saving state in response to a success in authentication of said input password.

2. The method of claim 1, wherein said password requested to be input is identical to said password stored in said non-volatile memory.

3. The method of claim 1, further comprising transmitting a password to said non-volatile memory without requesting said password input in response to no detection of said unauthorized access.

4. The method of claim 1, wherein said returning to said power-on state further includes executing a first BIOS code that omits initialization of at least some devices among said devices to be initialized at said time of returning from said power-off state.

5. The method of claim 4, wherein said requesting said password input further includes executing a second BIOS code executed at said time of returning from said power-off state.

6. The method of claim 1, wherein said detecting said unauthorized access further includes detecting said non-volatile memory is being electrically disconnected from said computer.

7. The method of claim 1, wherein said detecting said unauthorized access further includes detecting a power supply being required to start said computer has stopped.

8. A computer readable device having a computer program product for protecting a password of a computer having a non-volatile memory, said computer readable device comprising:

program code for storing a password in a non-volatile memory of a computer;

program code for transitioning said computer to a power saving state;

program code for, in response to a detection of an unauthorized access to said non-volatile memory during said power saving state transition, requesting a password input from a user; and

program code for returning to a power-on state from said power saving state in response to a success in authentication of said input password.

9. The computer readable device of claim 8, wherein said password requested to be input is identical to said password stored in said non-volatile memory.

10. The computer readable device of claim 8, further comprising program code for transmitting a password to said non-volatile memory without requesting said password input in response to no detection of said unauthorized access.

11. The computer readable device of claim 8, wherein said program code for returning to said power-on state further includes program code for executing a first BIOS code that omits initialization of at least some devices among said devices to be initialized at said time of returning from said power-off state.

12. The computer readable device of claim 8, wherein said program code for requesting said password input further includes program code for executing a second BIOS code executed at said time of returning from said power-off state.

13. The computer readable device of claim 8, wherein said program code for detecting said unauthorized access further includes program code for detecting said non-volatile memory is being electrically disconnected from said computer.

14. The computer readable device of claim 8, wherein said program code for detecting said unauthorized access further includes program code for detecting a power supply being required to start said computer has stopped.

15. A computer comprising:

a first return circuit for performing return processing by requesting a password input at the time of returning from a power-off state;

a second return circuit for performing return processing without requesting said password input at the time of returning from a power saving state in which data stored in a main memory is being saved in a non-volatile memory;

a detection circuit for detecting an unauthorized access to said non-volatile memory occurred during said power saving state; and

a processor for requesting said password input in response to a detection of an unauthorized access by said detection circuit at the time of returning from said power saving state.

16. The computer of claim 15, wherein said first return circuit executes said request for said password input.

17. The computer of claim 15, wherein said second return circuit performs return processing in response to no detection of an unauthorized access by said detection circuit.

18. The computer of claim 15, wherein said detection circuit detects an unauthorized access when there is an electrical disconnection occurred between said computer and said non-volatile memory or when there is a stop of said power supply to said detection circuit.