Removable computer security device

• US 5,533,125 A
• Filed: 07/18/1995
• Issued: 07/02/1996
• Est. Priority Date: 04/06/1993
• Status: Expired due to Term

• Current Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Pacheco, Joaquin F., Bensimon, Daniel, Osborn, Neal A.
• Primary Examiner(s): CAIN, DAVID C
• Application Number:
  US08/503,536
• Time in Patent Office: 350 Days
• Field of Search: 380/3, 380/4, 380/23, 380/25, 380/49, 380/50, 235/379, 235/380, 235/382
• US Class Current: 711/163
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect

Abstract

An intelligent removable information storage device (100), for coupling to a host microcomputer system (10), includes a local processor unit (106) including apparatus for preventing the microcomputer system from reading from, or writing to, the storage device absent the entry of an appropriate password by a user of the host microcomputer system. The storage device also includes a storage medium (e.g., a magnetic disk) for storing information including at least one password. The local processor unit includes apparatus for preventing access to the information stored in the storage means absent receipt of a valid password.

Claims

1. An information storage system, for use in a computer or other information processing system, said information storage system comprising:

an information storage device for storing information including a read-only password and a read/write password;

said storage system having selectable read-only and read/write password protected modes of operation;

when said read-only mode is selected, said storage system being unlocked to permit read-only access to said storage device in response to a match between an incoming password and a read-only password stored in said storage device; and

when said read/write mode is selected, said storage system being unlocked to permit read/write access to said storage device in response to a match between an incoming password and a read/write password stored in said storage device;

whereby, when one or more of said password protected modes have been selected, and in the event the information storage system is removed from the information processing system, access to the storage device will be locked until a password is sent to said storage system that matches one of said read-only or read/write passwords stored in said storage device.

2. The information storage system of claim 1, further comprising means for programming, the read-only and read/write passwords stored in said storage device.

3. The information storage system of claim 1, further comprising a selectable unprotected mode of operation wherein access to said storage device is not password protected when said unprotected mode is selected.

4. The information storage system of claim 1, further comprising:

a selectable unprotected mode of operation wherein access to said storage device is not password protected when said unprotected mode is selected; and

means for disabling said read-only and read/write passwords, such that said unprotected mode is selected in response to both read-only and read/write passwords being disabled.

5. The information storage system of claim 1, further comprising a backup password, wherein access to said storage device is enabled in response to a match between a received password and said backup password.

6. A computer or other information processing system comprising a processor, a memory, a data input device, a data output device, and an information storage system for storing information including a read-only password and a read/write password, said information storage system further comprising:

read-only and read/write password protected modes of operation;

wherein said storage system is unlocked in said read-only mode to permit read-only access to the information stored in said storage system in response to a match between an incoming password and a read-only password stored in said storage system; and

wherein said storage system is unlocked in said read/write mode to permit read/write access to said storage system in response to a match between an incomimg password and a read/write password stored in said storage system;

whereby, when one or more of said password protected modes have been selected and when said storage system has been removed from said computer or other information processing system, access to the storage system is locked until a password is sent to said storage system that matches one of said read-only or read/write passwords stored in said storage system.

7. The computer or other information processing system of claim 6, further comprising means for programming the read-only and read/write passwords stored in said storage system.

8. The computer or other information processing system of claim 6, further comprising a selectable unprotected mode of operation wherein access to said storage system is not password protected when said unprotected mode is selected.

9. The computer or other information processing system of claim 6, further comprising:

a selectable unprotected mode of operation wherein access to said storage system is not password protected when said unprotected mode is selected; and

means for disabling said read-only and read/write passwords, such that said unprotected mode is selected in response to both read-only and read/write passwords being disabled.

10. The computer or other information processing system of claim 6, further comprising a backup password, wherein access to said storage system is enabled in response to a match between a received password and said backup password.