Hard disk password security system

• US 5,375,243 A
• Filed: 03/07/1994
• Issued: 12/20/1994
• Est. Priority Date: 10/07/1991
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Compaq Computer Corporation (HP Inc.)
• Inventors: Douglas, David M., Tomaszewski, Richard, Anderson, Roger P., Parzych, James D., Brown, Norman P., Stufflebeam, Kenneth W.
• Primary Examiner(s): Chan, Eddie P.
• Application Number:
  US08/208,052
• Time in Patent Office: 288 Days
• Field of Search: 395/425, 395/575, 395/725, 380/4, 380/23, 380/25, 380/50, 380/52, 340/825.31, 340/825.34
• US Class Current: 726/17
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/1097 Boot, Start, Initialise, Power

Abstract

A hard drive which prevents data access operations on the hard drive upon power up until the user enters a password. When the computer system is powered up, the hard drive spins up and is tested, responding only to a limited set of commands that do not permit data storage or retrieval operations. The password is located on the hard disk itself to prevent bypassing the hard drive'"'"'s security using a new computer environment. When the user enters the correct password, the hard drive unlocks and operates as a conventional hard drive. If the user chooses, the hard drive may be unlocked by either of two passwords, one defined by the user and the other by the manufacturer. To obtain access to data areas during a locked state, a wipe data command is provided which overwrites all user data on the drive and unlocks the drive.

Claims

1. A hard disk drive having LOCKED and UNLOCKED states for use in a computer system, the hard disk drive comprising:

means on the hard disk drive for storing user data and a password value for operating of the hard disk drive;

means on the hard disk drive for receiving a plurality of commands including at least one password value from the computer system;

means on the hard disk drive for locking access to the hard disk drive to all but selected ones of said received plurality of commands while in a LOCKED state, one of said selected commands being an UNLOCK command and another of said selected commands being a WIPE DATA command;

means on the hard disk drive for comparing a password value received from the computer system with a stored password value upon receipt of said UNLOCK command and unlocking the hard disk drive if the compared password values are equal;

means for coupling to a microprocessor and for providing a WIPE DATA command to the hard disk drive from the microprocessor; and

means on the hard disk drive while in a LOCKED state for overwriting all user data on said hard disk drive and then reset said hard disk drive to its UNLOCKED state upon receipt of said WIPE DATA command.

2. The hard disk drive of claim 1, wherein said unlocking means unlocks the hard disk drive after completion of operation of said means for overwriting.

3. The hard disk drive of claim 1, wherein one of said plurality of commands which is not one of said selected commands is a change password command;

and

the hard disk drive further comprising;

means on the hard disk drive for changing said stored password value upon receipt of said change password command.

4. The hard disk drive of claim 3, wherein one of said plurality of commands which is not one of said selected commands is a disable password change command;

and

the hard disk drive further comprising;

means on the hard disk drive for disabling said means for changing said stored password value after receipt of said disable password change command.

5. The hard disk drive of claim 1, further comprising:

means for storing a second password value; and

wherein said means for comparing compares said received password value with said second stored password value and unlocks the hard disk drive if equal.

6. The hard disk drive of claim 1, wherein said hard disk drive includes a serial number and said second stored password is an encrypted portion of said serial number.

7. The hard disk drive of claim 1, further comprising:

means on the hard disk drive for setting the hard disk drive in a LOCKED state upon power on the hard disk drive.

8. The hard disk drive of claim 1, wherein none of said selected commands allow user data to be obtained from the hard disk drive.

9. A computer system comprising:

a microprocessor;

means coupled to said microprocessor for storing program steps;

means coupled to said microprocessor for receiving a password value from a user;

means coupled to said microprocessor and said user password value receiving means for providing an UNLOCK command with said user password value;

a hard disk drive coupled to said microprocessor and said user password value receiving means, said hard disk drive having LOCKED and UNLOCKED states and including;

means on the hard disk drive for storing user data and a password value for operation of said hard disk drive;

means on the hard disk drive for receiving a plurality of commands from said microprocessor;

means on the hard disk drive for locking access to said hard disk drive to all but selected of said plurality of commands while in a LOCKED state, one of said selected commands being said UNLOCK command and another of said selected commands being a WIPE DATA command;

means on the hard disk drive for comparing a received user password value with a stored password value upon receipt of said UNLOCK command and unlocking said hard disk drive if the compared password values are equal;

means coupled to said microprocessor for providing a WIPE DATA command to said hard disk drive via said microprocessor; and

means on said hard disk drive while in a LOCKED state for overwriting all user data on said hard disk drive and then reset said hard disk drive to its UNLOCKED state upon receipt of said WIPE DATA command.

10. The computer system of claim 9, wherein said WIPE DATA command means unlocks said hard disk drive after completion of said overwriting.

11. The computer system of claim 9, further comprising means coupled to said microprocessor and said user password value receiving means for providing a change password command and new password values to said hard disk drive via said microprocessor, said change password command being one of said plurality of commands which is not one of said hard disk drive selected commands;

and

wherein said hard disk drive further includes;

means on said hard disk drive for changing said stored password value upon receipt of said change password command.

12. The complete system of claim 9, further comprising:

means coupled to said microprocessor for providing a disable password change command to said hard disk drive via said microprocessor; and

wherein said hard disk drive further includes;

means on said hard disk drive for disabling said means the change said stored password value after receipt of said disable password change command.

13. The computer system of claim 9, wherein said hard disk drive further includes:

means on said hard disk drive for storing a second password value; and

wherein said means for comparing further said received password value with said second stored password value and unlocks said hard disk drive if the compared password values are equal.

14. The computer system of claim 9, wherein said hard disk drive includes a serial number and said second stored password is an encrypted portion of said serial number.

15. The computer system of claim 9, said hard disk drive further including:

means on said hard disk drive for setting the hard disk drive in a LOCKED state upon power on the hard disk drive.

16. The computer system of claim 9, wherein none of said hard disk drive selected commands allow user data to be obtained from said hard disk drive.

17. The computer system of claim 9, further comprising:

means for storing a password value for operation of said computer system; and

means coupled to said computer system password storing means and said user password value receiving means for comparing a received password value from said user password value receiving means with said stored computer system password value and disabling computer system operation until said stored password value is received.

18. The computer system of claim 17,

wherein said computer system stored password value and said hard disk drive stored password value are identical.