Data storage device with code scanning capability

• US 7,743,417 B2
• Filed: 02/28/2005
• Issued: 06/22/2010
• Est. Priority Date: 02/28/2005
• Status: Expired due to Fees

• Current Assignee: Western Digital Technologies Incorporated (Western Digital Corporation)
• Original Assignee: Hitachi Global Storage Technologies Netherlands BV (Western Digital Corporation)
• Inventors: Williams, Larry Lynn
• Primary Examiner(s): CERVETTI, DAVID GARCIA
• Application Number:
  US11/069,286
• Publication Number:
  US 20060195904A1
• Time in Patent Office: 1,940 Days
• Field of Search: 726/24, 726/22, 726/23, 726/25, 713/188
• US Class Current: 726/24
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00

Abstract

A disk drive according to the invention has a processor for executing a program for identifying harmful computer code (HCC). A communication protocol with the host computer according to the invention provides means for the host to control the HCC detection process, receive information about the HCC detection from the disk drive and preferably for the HCC detection program to be transmitted to the disk drive. In a preferred embodiment a disk drive has a scanning program for scanning data for harmful computer code (HCC) using a set of HCC signatures. In one embodiment, the disk drive has means for communicating with a controlling host computer which implements the HCC protocol and a user computer which does not implement the HCC protocol, to allow the user computer to be protected from HCC in a transparent way.

Claims

1. A disk drive comprising:

a processor and a memory for storing data and a program for the processor;

a nonvolatile memory for storing user data received from a host computer;

means for receiving, from the host computer, a scanning program for execution by the processor to scan data for harmful computer code in stored user data; and

means for signaling the host computer that harmful computer code has been found in stored user data, the means for signaling including means for sending a request for a diagnostic inquiry to the host computer and means for responding to the diagnostic inquiry by sending information to the host computer identifying the harmful computer code signature which was detected.

2. The disk drive of claim 1 wherein the scanning program scans stored user data for a set of harmful computer code signatures and the disk drive further comprises means for receiving a set of harmful computer code signatures from the host computer and for storing the set of harmful computer code signatures.

3. The disk drive of claim 2 wherein the means for receiving the set of harmful computer code signatures further comprises means for accepting the set of harmful computer code signatures as data in a write command which follows a diagnostic command.

4. The disk drive of claim 1 wherein the means for responding to the diagnostic inquiry further comprises means for sending information to the host including the user data in which the harmful computer code signature which was detected.

5. The disk drive of claim 1 wherein the means for scanning data operates off-line and the means for signaling a host computer initiates a communication to the host computer.

6. The disk drive of claim 1 wherein disk drive is connected to a user computer and the host computer and the means for signaling a host computer initiates a communication to the host computer when harmful computer code has been found in data requested by the user computer and responds to communications from the host computer to disposition of the user data requested by the user computer.

7. A method of operating a disk drive comprising the steps of:

receiving user data from a host computer;

storing the user in a nonvolatile memory;

receiving, from the host computer, a scanning program for execution by the disk drive to scan stored user data for harmful computer code; and

executing the scanning program to scan selected blocks of user data for the set of harmful computer code and upon detecting a harmful computer code signaling the host computer that harmful computer code has been found in a block of user data by sending a request to the host computer for a diagnostic inquiry, then receiving a read diagnostic command from the host computer and then responding to the diagnostic inquiry from the host computer with information identifying the user data in which harmful computer code has been detected.

8. The method of claim 7 wherein the step of receiving further comprises receiving a diagnostic command, then accepting data in a write command which follows the diagnostic command as the scanning program.

9. The method of claim 7 further comprising the step of receiving a set of harmful computer code signatures from a host computer, and wherein the step of executing the scanning program further comprises scanning the selected blocks of user data for the harmful computer code signatures.

10. The method of claim 9 wherein the step of receiving the set of harmful computer code signatures further comprises the step of resetting a set of status indicators for blocks of user data and the step of scanning selected blocks of user data further comprises setting a status indicator for each block of user data to record the results of scanning.

11. The method of claim 9 the step of receiving the set of harmful computer code signatures further comprises receiving a diagnostic command, then accepting data in a write command which follows the diagnostic command as the set of harmful computer code signatures.

12. The method of claim 7 wherein the step of responding to the diagnostic inquiry further comprises sending information to the host identifying the harmful computer code signature which was detected in the block of user data.

13. The method of claim 7 wherein the step of responding to the diagnostic inquiry further comprises sending information to the host including the block of user data in which the harmful computer code signature was detected.

14. The method of claim 7 wherein the step of executing the scanning program operates off-line and the step of signaling the host computer initiates a communication to the host computer.

15. The method of claim 7 wherein the disk drive is connected to a user computer and the host computer and the step of signaling the host computer when harmful computer code has been found in data requested by the user computer and the method further comprises responding to communications from the host computer to disposition of the data requested by the user computer.

16. The method of claim 7 wherein the disk drive is connected to a second data storage device and the method further comprises reading data from the second data storage device, scanning the data from the second data storage device for harmful computer code and signaling the host computer results of the scanning of the data from the second data storage device.