Method and apparatus for storage and use of diagnostic software using removeable secure solid-state memory

• US 7,712,131 B1
• Filed: 02/09/2005
• Issued: 05/04/2010
• Est. Priority Date: 02/09/2005
• Status: Active Grant

• Current Assignee: David Lethe
• Original Assignee: David Lethe
• Inventors: Lethe, David
• Primary Examiner(s): Orgad; Edan
• Assistant Examiner(s): SCHMIDT, KARI L
• Application Number:
  US11/054,224
• Time in Patent Office: 1,910 Days
• Field of Search: 713/150, 713/189, 713/185, 726/20, 726/9, 701/29
• US Class Current: 726/20
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A method, an apparatus, and a computer program are provided to secure diagnostic software from a software or hardware manufacturer for a computer. Traditionally, diagnostic software was distributed to professionals and other personnel in limited numbers. However, it was still possible to obtain unauthorized copies of the diagnostic software. Therefore, to alleviate the possibility of having unauthorized copies, a Universal Serial Bus (USB) memory device containing identification number can be used and a hidden partition that is inaccessible by an end-user where an encrypted version of the identification number is stored. In order to use diagnostic software, the specific USB memory device must be physically interfacing a computer. Hence, by limiting the number of USB memory devices, unauthorized copies can be prevented.

Claims

1. A device for securing and enabling authorized operation of diagnostic software to diagnose computer storage-related equipment running on a host computer having an operating system pre-installed, comprising:

a removable solid-state memory device having an end-user-accessible first read-only reserved area that is at least configured to contain a unique and unchangeable identification sequence;

a second area in said solid-state memory device containing said diagnostic software, said diagnostic software being configured for operation on said operating system to diagnose said computer storage-related equipment while said host computer is operating using said pre-installed operating system and for a limited period without reauthentication with the memory device; and

a hidden partition, that is in-accessible to a user for reading or writing without special commands not readily available to the end-user and without entry of a password unknown to the end-user, said hidden partition having stored therein at least an encrypted version of the unique identification sequence to enable operation of diagnostic software only when the specific memory device having the unique and unchangeable identification sequence has been inserted into a communication port of either the host computer or a separate authentication computer in communication with the host computer.

2. The device of claim 1, wherein the communication port is a USB port.

3. The device of claim 1, wherein the memory device further comprises a user-accessible read/write partition configured to at least store information resulting from use of the diagnostic software to diagnose equipment running on said host computer.

4. The device of claim 1, wherein the hidden partition is at least configured to contain an authentication protocol to enable operation of the diagnostic software only when the specific memory device having the unique and unchangeable identification sequence is inserted into a communication port of a computer.

5. A method for securing and enabling authorized operation of diagnostic software for diagnosing computer storage-related equipment running on a computer having an operating system pre-installed, comprising:

interfacing a removable solid-state memory device with a computer, wherein the memory device is at least configured to have

an end-user-accessible first read-only reserved area that is at least configured to contain a unique and unchangeable identification sequence;

a second area in said solid-state memory device containing said diagnostic software, said diagnostic software being configured to operate on said operating system and

a hidden partition, that is in-accessible to an end-user for reading or writing without special commands not readily available to the end-user and without entry of a password unknown to the end-user;

storing in said hidden partition at least an encrypted version of the unique identification sequence to enable operation of diagnostic software only when the specific memory device having the unique and unchangeable identification sequence has been inserted into a communication port of a computer; and

retrieving the unique identification sequence from the first read-only reserved area;

retrieving the encrypted version of the unique identification sequence from the hidden partition;

authenticating the memory device by comparing the unique identification sequence with the encrypted version thereof; and

enabling operation of the said at least one diagnostic software only if the memory device is authenticated to diagnose said computer storage-related equipment while said host computer is operating using said pre-installed operating system and for a limited period without reauthentication with the memory device.

6. The method of claim 5, wherein the method further comprises:

storing the diagnostic software in the hidden partition; and

retrieving the diagnostic software from hidden partition if the memory device is authenticated.

7. The method of claim 5, wherein the unique identification sequence includes a serial number and information correlating to the memory device vendor.

8. The method of claim 5, wherein the method further comprises:

connecting the memory device to an authentication computer;

connecting the authentication computer to a host computer over a computer network; and

broadcasting the plurality of identification sequences and the encrypted version of the identification sequences to the host computer.

9. An apparatus for securing and enabling diagnostic software for diagnosing computer storage-related equipment running on a computer system having an operating system pre-installed, comprising:

means for interfacing a removable solid-state memory device with a computer, wherein the memory device is at least configured to have

an end-user-accessible first read-only reserved area that is at least configured to contain a unique and unchangeable identification sequence and

a hidden partition, that is in-accessible to a user for reading or writing without special commands not readily available to the end-user and without entry of a password unknown to the end-user;

a second area in said solid-state memory device containing said diagnostic software, said diagnostic software being configured to operate on said operating system; and

means for storing in said hidden partition at least an encrypted version of the unique identification sequence to enable operation of diagnostic software only when the specific memory device having the unique and unchangeable identification sequence has been inserted into a communication port of a computer; and

means for retrieving the unique identification sequence from the first read-only reserved area;

means for retrieving the encrypted version of the unique identification sequence from the hidden partition;

means for authenticating the memory device by comparing the unique identification sequence with the encrypted version thereof; and

means for enabling operation of the at least one diagnostic software only if the memory device is authenticated to diagnose said computer storage-related equipment while said host computer is operating using said pre-installed operating system and for a limited period without reauthentication with the memory device.

10. The apparatus of claim 9, further comprising:

means for retrieving the diagnostic software from the hidden partition.

11. The apparatus of claim 9, wherein the unique identification sequence includes a serial number and information correlating to the memory device vendor.

12. The apparatus of claim 9, further comprising:

means for connecting the memory device to an authentication computer;

means for connecting the authentication computer to a host computer over a computer network; and

means for broadcasting the plurality of identification sequence and the encrypted version of the identification sequence to the host computer.

13. A computer program product for securing diagnostic software for diagnosing computer storage-related equipment running on a computer system having an operating system pre-installed, the computer program having a medium with a computer program embodied thereon, the computer program comprising:

computer code for interfacing a removable solid-state memory device with a computer, wherein the solid-state memory device is at least configured to have

an end-user-accessible first read-only reserved area that is at least configured to contain a unique and unchangeable identification sequence and

a hidden partition, that is in-accessible to a user for reading or writing without special commands not readily available to the end-user and without entry of a password unknown to the end-user;

a second area in said solid-state memory device containing said computer diagnostic software, said diagnostic software being configured for operation on said operating system; and

computer code for storing is said hidden partition at least an encrypted version of the unique identification sequence to enable operation of diagnostic software only when the specific memory device having the unique and unchangeable identification sequence has been inserted into a communication port of a computer; and

computer code for retrieving the unique identification sequence from the first read-only reserved area;

computer code for retrieving the encrypted version of the unique identification sequence from the hidden partition;

computer code for authenticating the memory device by comparing the unique identification sequence with the encrypted version thereof; and

computer code for enabling operation of the at least one diagnostic software only if the memory device is authenticated to diagnose said computer storage-related equipment while said host computer is operating using said pre-installed operating system and for a limited period without reauthentication with the memory device.

14. The computer program product of claim 13, further comprising computer code for retrieving the diagnostic software from the hidden partition.

15. The computer program product of claim 13, wherein the unique identification sequence includes a serial number and information correlating to the memory device vendor.

16. The computer program product of claim 13, further comprising:

computer code for detecting connection of the memory device to an authentication computer;

computer code for detecting connection of the authentication computer to a host computer over a computer network; and

computer code for broadcasting the identification sequence and the encrypted version thereof to the host computer.

17. The computer program product of claim 13, wherein the computer program product further comprises:

computer code for detecting connection of a host computer over a computer network; and

computer code for broadcasting the identification sequence and the encrypted version thereof to the host computer.

18. The computer program product of claim 17, wherein the computer program product further comprises computer code for launching the diagnostic software from the host computer.