Drive/host locking system

• US 7,216,235 B1
• Filed: 08/17/2000
• Issued: 05/08/2007
• Est. Priority Date: 10/19/1999
• Status: Expired due to Term

• Current Assignee: TiVo Solutions Inc. (Adeia Inc.)
• Original Assignee: TiVo Inc. (Adeia Inc.)
• Inventors: Platt, David
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): PARTHASARATHY, PRAMILA
• Application Number:
  US09/642,617
• Time in Patent Office: 2,455 Days
• Field of Search: 713/182
• US Class Current: 713/182
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An authentication system for securing information within a disk drive to be read and written to only by a specific host computer such that it is difficult or impossible to access the drive by any system other than a designated host is disclosed. While the invention is similar in intent to a password scheme, it significantly more secure. The invention thus provides a secure environment for important information stored within a disk drive. The information can only be accessed by a host if the host can respond to random challenges asked by the disk drive. The host'"'"'s responses are generated using a cryptography chip processing a specific algorithm. This technique allows the disk drive and the host to communicate using a coded security system where attempts to break the code and choose the correct password take longer to learn than the useful life of the disk drive itself.

Claims

1. A computer implemented method for providing access between a first party and a second party, said method comprising the steps of:

generating a challenge value using a disk drive controller at said first party;

transmitting said challenge value to said second party;

generating, using a secure hash algorithm, a response value using a combination of a lock value and said challenge value at said second party;

wherein said lock value indicates a desired access mode;

transmitting said response value to said first party, wherein said disk drive controller receives the challenge and lock value; and

validating said response value by said first party, wherein said validating step further comprises;

computing a duplicate response value on said disk drive controller by performing a duplicate secure hash algorithm;

comparing said response value to said duplicate response value; and

granting said second party access to said first party in accordance with the desired access mode indicated by the lock value if the response and duplicate response values match.

2. The method of claim 1, wherein said first party is a disk drive and said second party is a host computer.

3. The method of claim 2, wherein said disk drive is locked when not accessed.

4. The method of claim 1, further including:

using 512 bits for said challenge value and using 512 bits for said lock value.

5. The method of claim 1, further including:

randomly generating said challenge value.

6. The method of claim 1, wherein said step of generating said response value further includes:

using an exclusive OR (XOR) to combine said challenge and said lock value.

7. The method of claim 1, wherein said step of generating said response value further includes:

using 160 bits for said response value.

8. The method of claim 1, wherein said step of generating said response value further includes:

using a cryptography circuit to generate said response value.

9. The method of claim 8, wherein said step of generating said response value further includes:

using an algorithm to generate said response value.

10. The method of claim 3, wherein step of granting said second party access to said first party further includes:

unlocking the disk drive in accordance with the desired access mode indicated by the lock value if the response value is valid.

11. An apparatus for providing access between a first party and a second party, said apparatus comprising:

means for generating a challenge value using a disk drive controller at said first party;

means for transmitting said challenge value to said second party;

means for generating, using a secure hash algorithm, a response value using a combination of a lock value and said challenge value at said second party;

wherein said lock value indicates a desired access mode;

means for transmitting said response value to said first party, wherein said disk drive controller receives the challenge and lock value; and

means for validating said response value by said first party, wherein said validating means further comprises;

means for computing a duplicate response value on said disk drive controller by said disk drive controller executing a duplicate secure hash algorithm;

means for comparing said response value to said duplicate response value;

means for granting said second party access to said first party in accordance with the desired access mode indicated by the lock value if the response and duplicate response values match.

12. The apparatus of claim 11, wherein said first party is a disk drive and said second party is a host computer.

13. The apparatus of claim 12, wherein said disk drive is locked when not accessed.

14. The apparatus of claim 11, further including:

means for using 512 bits for said challenge value and using 512 bits for said lock value.

15. The apparatus of claim 11, further including:

means for randomly generating said challenge value.

16. The apparatus of claim 11, wherein said means for generating said response value further includes:

means for using an exclusive OR (XOR) for combining said challenge and said lock values.

17. The apparatus of claim 11, wherein said means for generating said response value further includes:

means for using 160 bits for said response value.

18. The apparatus of claim 11, wherein said means for generating said response value further includes:

a cryptography circuit for generating said response value.

19. The apparatus of claim 18, wherein said means for generating said response value further includes:

an algorithm for generating said response value.

20. The apparatus of claim 13, wherein said means for granting said second party access to said first party further includes:

means for unlocking the disk drive in accordance with the desired access mode indicating by the lock value if the response value is valid.