Apparatus and method for providing data security in a computer system having removable memory

• US 5,282,247 A
• Filed: 11/12/1992
• Issued: 01/25/1994
• Est. Priority Date: 11/12/1992
• Status: Expired due to Term

• Current Assignee: Maxtor Corporation (Seagate Technology Holdings Plc)
• Original Assignee: Maxtor Corporation (Seagate Technology Holdings Plc)
• Inventors: Cuccio, Allen B. J., McLean, Peter T.
• Primary Examiner(s): Cain, David C.
• Application Number:
  US07/974,957
• Time in Patent Office: 439 Days
• Field of Search: 380/3, 380/4, 380/23, 380/26, 380/25, 380/52, 340/825.34, 364/280.2, 364/280.8, 364/969.1, 364/969.4, 364/969.3, 364/975.2
• US Class Current: 711/164
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

A computer system having a memory card for storing data that is capable of being removed and reinserted and also having the capability of safeguarding the data stored thereon. A passward is stored on the memory card. The memory card is set in a secure mode to prevent unauthorized access to the data stored on the memory card. Once the memory card is set in secure mode, it remains in secure mode, even when removed from the computer system and subsequently inserted back into that or another computer system. Access to the data is permitted when the memory card is set in secure mode only if a valid password is provided to the memory card.

Claims

1. A computer system comprising an input means for inputting data, a processing means for processing data, a data storage means for storing data, and an output means for outputting processed data, said data storage means including a means for removing said data storage means from said computer system, a means for inserting said data storage means into said computer system, and a means for safeguarding data stored on said data storage means, said safeguarding means comprising:

a means for writing at least one password to said data storage means;

a means for setting said data storage means to a secure mode, wherein data transfer commands are not executed unless said data storage means receives said password;

a means for said data storage means to remain set in said secure mode if said data storage means is removed from said computer system.

2. The computer system of claim 1, wherein said safeguarding means further comprises a means for setting said data storage means in a non-secure mode only after said data storage means has received said password, wherein data commands are executed by said data storage means when set in said non-secure mode.

3. The computer system of claim 2, wherein said safeguarding means further comprises a means for generating a notification signal in response to data commands if said data storage means is set in said secure mode and said data storage means has not received said password.

4. The computer system of claim 3, wherein said safeguarding means further comprises a means for generating a signal indicating whether said data storage means is set in said secure mode.

5. The computer system of claim 4, wherein said data storage means comprises a hard disk memory card.

6. The computer system of claim 4, wherein said data storage means comprises a flash electrically erasable read-only memory card.

7. The computer system of claim 4, wherein said password is specified by a user.

8. The computer system of claim 4, wherein said password comprises a machine readable serial number.

9. The computer system of claim 4, wherein said password is encoded.

10. The computer system of claim 4, wherein a plurality of passwords are stored on said data storage means and more than one of said plurality of passwords must be received by said data storage means before data commands are executed if set in said secure mode.

11. The computer system of claim 4, wherein an emergency password is stored on said data storage means, wherein said data storage means executes any commands when said emergency password is received.

12. The computer system of claim 11, wherein said emergency password comprises personal information of a user.

13. The computer system of claim 4, wherein said safeguarding means further comprises a means for disabling said memory storage means whenever a predetermined number of data commands is received by said memory storage means while in secure mode and without receiving said password.

14. In a computer system having a data storage system for storing data, wherein said data storage system is removable from said computer system, a method of preventing unauthorized access to data stored on said data storage system, comprising the steps of:

storing a password on said data storage system;

setting said data storage system in a secure mode, wherein data commands from said computer system are not executed unless said password is provided to said data storage system;

retaining said secure mode by said data storage system if said data storage system is subsequently removed from said computer system.

15. The method of claim 14 further comprising the step of setting said data storage system in a non secure mode, wherein data commands from said computer system are executed and wherein said data storage system can only be set in said non secure mode when said password has been provided.

16. The method of claim 15 further comprising the step of generating a notification signal in response to data commands from said computer system if said data storage system is set in said secure mode and said password has not been provided.

17. The method of claim 16, wherein said data storage device comprises a hard disk memory card.

18. The method of claim 16, wherein said data storage system comprises a flash electrically erasable read-only memory.

19. The method of claim 16, wherein said password is specified by a user.

20. The method of claim 16 further comprising the step of transmitting a signal from said data storage system to said computer system indicating whether said data storage system is capable of being set in secure mode.

21. The method of claim 20, wherein said signal further indicates whether said data storage system is currently set in said secure mode.

22. The method of claim 21, wherein said signal further indicates whether said data storage system will execute received data commands.

23. The method of claim 16 further comprising the step of storing a second password onto said data storage system, wherein said data storage system does not execute data commands from said computer system if said data storage system is set in secure mode, unless both of said passwords are provided to said data storage system.

24. The method of claim 16 further comprising the step of encoding said password.

25. The method of claim 24, wherein said encoding step includes inverting a pre-determined portion of said password.

26. The method of claim 16, wherein said password is a machine readable serial number of said computer system and said computer system provides said machine readable serial number when said data storage system is inserted into said computer system so that said data storage system executes data commands.

27. The method of claim 26 further comprising the step of storing a second machine readable serial number of a second computer system as a second password onto said data storage system, wherein said data storage system executes data commands whenever inserted into either of said computer systems.

28. The method of claim 27, wherein said computer systems comprise a computer network.

29. The method of claim 16 further comprising the step of storing an emergency password on said data storage system, wherein said data storage system performs any commands from said computer system upon receipt of said emergency password from said computer system.

30. The method of claim 29, wherein said emergency password comprises personal information of a user.

31. The method of claim 16 further comprising the step of shutting off said memory storage system if more than a predetermined number of data commands are received by said memory storage system when in secure mode and no password has been provided.

32. A hard disk memory card having a security means for granting access to data stored on said memory card only to authorized users, comprising:

a means for storing at least one password on said memory card;

a means for setting said memory card in a secure mode, wherein data transfer commands are not executed while said memory card is set in said secure mode unless said memory card has been unlocked;

a means for unlocking said memory card by comparing a received password with said password stored on said memory card, wherein said memory card is unlocked if said received password matches said stored password;

a means for setting said memory card in a non-secure mode only when said memory card has been unlocked;

a means for said memory card to remain set in said secure mode even if power is not supplied to said memory card.

33. The memory card of claim 32 further comprising a means for generating a signal indicating whether said memory card is set in said secure mode.

34. The memory card of claim 33 further comprising a means for generating a notification signal in response to said data transfer commands if said memory card is set in secure mode and is locked.

35. The memory card of claim 34, wherein said data transfer commands include read, write, and erase commands.

36. The memory card of claim 35, wherein said password comprises 512 bytes of data.

37. The memory card of claim 35 further comprising a means for disabling said memory card whenever a predetermined number of data transfer commands are received while said memory card is set in secure mode and is locked.

38. The memory card of claim 35, wherein said password is encoded.

39. The memory card of claim 35, wherein said password is specified by a user.

40. The memory card of claim 35, wherein said password comprises a machine readable serial number of a computer system.

41. The memory card of claim 35, wherein a plurality of passwords are stored on said memory card and a pre-determined number of passwords must be received before said memory card is unlocked.

42. The memory card of claim 35, wherein an emergency password is stored on said memory card.

43. The memory card of claim 35 further comprising a means for disabling said memory card if a pre-determined number of data transfer commands are received by said memory card while said memory card is set in said secure mode and is locked.

44. The memory card of claim 35 further comprising a means for locking said memory card, wherein said data transfer commands are not executed.