Security system for hard disk drive

• US 6,012,145 A
• Filed: 07/10/1996
• Issued: 01/04/2000
• Est. Priority Date: 11/13/1993
• Status: Expired due to Fees

• Current Assignee: Calluna Technology Ltd. (Calluna Plc)
• Original Assignee: Calluna Technology Ltd. (Calluna Plc)
• Inventors: Mathers, Stewart, Stewart, Alec Donald
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Baderman, Scott T.
• Application Number:
  US08/640,919
• Time in Patent Office: 1,273 Days
• Field of Search: 395/186, 395/187.01, 395/188.01, 380/4, 380/25, 380/3, 713/1, 713/2, 713/100, 710/200, 707/9, 705/18, 711/164
• US Class Current: 726/17
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress

Abstract

A portable hard disk drive has an electrically erasable programmable read-only-memory (EEPROM) for storing a first password for allowing a user access to the disk and a random access memory (RAM) for temporarily storing a password entered by a user. A microprocessor is arranged to compare the user-entered passed with the password stored in the EEPROM and to generate a signal to allow a user access to the disk if a valid match is found and to prohibit access if there is no match.

Claims

1. A security system for a portable hard disk drive, the system comprising:

first, non-volatile, memory means (IC5) within the disk drive comprising memory for storing a first password;

second memory means (IC7) within the disk drive for transiently storing a second password which may be entered by a user after powering-up of the disk drive in a computer; and

comparison means (IC4) coupled to said first memory means and to said second memory means for comparing the stored first password with the second password, characterized in that;

software utility program means is provided externally of the disk drive for running on a computer in which the disk drive is used; and

said first, non-volatile, memory means (IC5) within the disk drive also includes memory for storing software code for;

(a) interacting with the software utility program means so as to enable the disk drive to be set by a user, in a chosen one of at least two disk protection modes from which the user may choose, in which the set mode of the disk drive is retained after powering off and re-powering up such that the drive is usable in the same set mode following re-powering up without having to input a password to the drive, said at least two disk protection modes being selected from;

a full data protection mode in which a user is prohibited from reading data from, and writing data to, a disk means of the disk drive,

a partial data protection mode in which a user is prohibited from writing data to and is permitted only to read data from the disk means, and

a no data protection mode in which a user is permitted to read data from, and write data to, the disk means;

provided that one of said at least two selected disk protection modes is the partial data protection mode; and

(b) controlling the disk drive when it has been set in the partial data protection mode so as to allow it to be used for reading only, without said software utility program means and without password entry after powering off and re-powering up, said comparison means (IC4) operating, when the disk drive has been set in one of the full and partial data protection modes and the user enters the second password, to;

permit a user to obtain full, namely read and write, access to the disk means, if the passwords match, permit a user to change the protection mode in which the disk drive is set if the passwords match, and prevent a user from obtaining full access to the disk means, and from changing the protection mode in which the disk drive is set, if the passwords do not match.

3. A system or a circuit board according to claim 1 or 2, wherein the first memory means is a non-volatile read-only-memory (ROM).

4. A system or circuit board according to claim 3, wherein the read-only-memory is an electrically eraseable programmable read-only-memory (EEPROM).

5. A system or a circuit board according to claim 4, which includes an EEPROM, which EEPROM requires a voltage to both write data to and erase data from the EEPROM, which voltage is in the range from 4.5 to 5.5 volts so that data can be erased from the EEPROM by a microcontroller.

6. A system or a circuit board according to claim 1 or 2, wherein the second memory means is random access memory (RAM).

7. A system or a circuit board according to claim 1 or 2, wherein the comparison means is a microprocessor arranged to fetch a code corresponding to said first password from the first memory means and to fetch a code corresponding to the second password from the second memory means and to store these codes in first and second registers prior to carrying out said comparison.

8. A system or a circuit board according to claim 1 or 2 which includes means for disabling the portable disk drive in the event that the second password does not match the first password so that a power-on reset is required before a new password can be entered by the user.

9. A system or a circuit board according to claim 1 or 2, wherein the first memory means comprises two solid state memory devices, one device being arranged to store said first password and the other device being arranged to store said software code.

10. A system, or a circuit board according to claim 1 or 2, wherein the first memory means is arranged to store a further, master key, password which, if successfully matched by a user-entered password, enables a user to obtain full access to the disk means, thus over-riding said first password.

11. A system or circuit board according to claim 10, wherein said comparison means is arranged to compare said second password with each of said stored first password and further, master key, password and to permit the user to obtain full access to the disk means if the second password matches either one of the stored passwords.

2. A circuit board (10), for use in a portable hard disk drive for controlling access to information on a disk means of the disk drive, the circuit board comprising disk drive control means for controlling rotation of the disk means and for reading and writing information to and from the disk means;

first, non-volatile, memory means (IC5) disposed on the circuit board for storing a first password;

second memory means (IC7) disposed on the circuit board for transiently storing a second password which may be entered by a user after powering-up of the disk drive in a computer in which a software utility program means, provided externally of the hard disk, is running;

said first, non-volatile, memory means disposed on the circuit board having stored therein software code for;

(a) interacting, in use of the disk drive, with the software utility program means, said interaction between the software code and the software utility program means enabling a user to set the disk drive in a chosen one of at least two disk protection modes from which the user may choose, in which the set mode of the disk drive is retained after powering off and re-powering up such that the drive is usable in the same set protection mode following re-powering up without having to input a password to the drive, said at least two disk protection modes being selected from;

a no data protection mode in which a user is permitted. to write data to, and read data from, the disk means of the disk. drive,

a partial data protection mode in which a user is prohibited from writing data to and is permitted only to read data from the disk means, and

a full data protection mode in which a user is prohibited from writing data to, and reading data from, the disk means;

provided that one of said at least two selected disk protection modes is the partial data protection mode; and

(b) controlling the disk drive, when it has been set in the partial data protection mode, so as to allow it to be used for reading only, without said software utility program means and without password entry after powering off and re-powering up;

and comparison means (IC4) mounted on the circuit board and coupled to the first and second memory means for comparing the first and second passwords and for generating a signal which, when the disk drive has been set in one of the full and partial data protection modes and the user enters the second password;

allows a user to obtain full, namely read and write, access to the disk means, if the passwords match, allows a user to change the protection mode in which the disk drive is set if the passwords match, and prevents a user from obtaining full access to the disk means, and from changing the protection mode in which the disk drive is set, if the passwords do not match.

12. A method of controlling access to a portable hard disk drive for use in a computer, comprising the steps of:

storing a first password in a first non-volatile memory means (IC5) located in the disk drive,

storing a second user-entered password in a second memory means (IC7) located in the disk drive, and

comparing the first and second passwords;

characterized by the further steps of;

running a software utility program on the computer;

running the software utility program to interact with software code stored in said first non-volatile memory means (IC5) within the disk drive, in order to enable a user to set the disk drive in one of at least two disk protection modes from which the user may choose, in which the set mode of the disk drive is retained after powering off and re-powering up such that the drive is usable in the same set mode following re-powering up without the need to input a password to the drive, said at least two disk protection modes being selected from;

a no data protection mode in which a user is permitted to read data from, and write data to, a disk means of the disk drive,

a partial data protection mode in which a user is prohibited from writing data to and is permitted only to read data from the disk means, and

a full data protection mode in which a user is denied any access to the disk means;

provided that one of said at least two selected disk protection modes is the partial data protection mode such that once the disk drive is set in the partial data protection mode the disk drive continues to permit read only access without password entry after powering off and re-powering up;

and, when the disk means is set in one of the full and partial data protection modes and the user enters the second password, if a valid match is found upon comparison of the first and second passwords, allowing a user to obtain full, namely read and write, access to the disk means, and to change the protection mode in which the disk drive is set.

13. A method according to claim 12 and including the step of allowing a user access to one of the plurality of powering-up protection modes by entering a code corresponding to the protection mode, together with the password.

14. A method according to claim 12 or claim 13 and including the step of altering the password stored in the non-volatile memory by entering a code corresponding to a password change, together with a password which matches the existing password stored in the non-volatile memory and the new password to be stored, whereby the new password replaces the existing password.

15. A method according to claim 12 or claim 13, further comprising the steps of:

storing a further, master key, password in the non-volatile memory means located in the disk drive; and

entering a password which matches the stored, master key, password so as to enable the first password stored in the non-volatile memory means to be changed.

16. A method according to claim 12 or claim 13, further comprising the steps of:

storing a further, master key, password in the non-volatile first memory means located in the disk drive; and

altering said further, master key, password by entering a code corresponding to a password change, together with a password which matches the existing master key password stored in the non-volatile memory means and the new master key password to be stored, whereby the new master key password replaces the existing master key password.