System and method for programming a data storage device with a password

• US 8,112,637 B2
• Filed: 07/12/2005
• Issued: 02/07/2012
• Est. Priority Date: 07/12/2005
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Spottswood, Jason, Piwonka, Mark A., Gibbons, Patrick L., Marcak, Scott B.
• Primary Examiner(s): Tran, Ellen
• Assistant Examiner(s): TRUONG, THONG P
• Application Number:
  US11/179,227
• Publication Number:
  US 20070016800A1
• Time in Patent Office: 2,401 Days
• Field of Search: 713/193, 713/182, 713/183, 713/164, 713/194, 713/189, 380/23, 380/25, 726/20, 726/2, 711/103, 455/403, 235/382
• US Class Current: 713/193
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

There is provided a system and method for programming a data storage device with a password. Specifically, there is provided a method comprising initiating a password programming routine for a data storage device, and programming the data storage device with the password associated with an external storage medium, wherein the data storage device is configured to condition access to the data stored on the data storage device based on the password.

Claims

1. A method comprising:

initiating a password programming routine for a data storage device;

determining whether an external storage medium comprises a password corresponding to the data storage device, and if the external storage medium does not comprise the password, generating the password and storing the password on the external storage medium;

receiving the password from the external storage medium;

automatically encrypting data stored on the data storage device with the password via the password programming routine; and

automatically programming the data storage device with the password via the password programming routine, wherein the data storage device is configured to condition access to the data stored on the data storage device based on the password.

2. The method, as set forth in claim 1, comprising:

generating a password using a random number generator; and

storing the generated password on the external storage medium, wherein programming the data storage device comprises programming the data storage device with the generated password.

3. The method, as set forth in claim 1, wherein receiving the password comprises downloading the password from the external storage medium.

4. The method, as set forth in claim 3, wherein downloading the password comprises downloading the password from a semiconductor memory.

5. The method, as set forth in claim 4, wherein downloading the password comprises downloading the password from a smart card.

6. The method, as set forth in claim 4, wherein downloading the password comprises downloading the password from a universal serial bus flash memory device.

7. The method, as set forth in claim 1, wherein the data storage device is an Advanced Technology Attachment (ATA) hard drive with an ATA Security password comprising the password received from the external storage medium.

8. The method, as set forth in claim 1, wherein the password comprises a 32-byte password.

9. A computer configured:

to initiate a password programming routine for a hard drive;

to determine whether an external storage medium comprises a password corresponding to the drive, and if the external storage medium does not comprise the password generate the password and store the password on the external storage medium;

to download the password from the external storage medium; and

to program the hard drive with the password, wherein the hard drive is configured to condition access to the data stored on the hard drive based on the password.

10. The computer, as set forth in claim 9, comprising a smart card reader, wherein the computer is configured to download the password from a smart card.

11. The computer, as set forth in claim 9, comprising a universal serial bus port, wherein the computer is configured to download the password via the universal serial bus port.

12. The computer, as set forth in claim 9, comprising a wireless transceiver, wherein the computer is configured to download the password via the wireless transceiver.

13. The computer, as set forth in claim 9, comprising a tangible machine readable medium storing:

code adapted to initiate a password programming routine for a data storage device;

code adapted to download a password from an external storage medium; and

code adapted to program a data storage device with the password, wherein the data storage device is configured to condition access to the data stored on the data storage device based on the password.

14. The computer, as set forth in claim 13, wherein the tangible medium comprises a BIOS ROM.

15. A method comprising:

downloading a password from an external storage medium;

comparing the downloaded password to a password programmed into a data storage device, wherein the data storage device is configured to condition access to the data stored on the data storage device based on the password;

prompting a user to manually enter a password if the downloaded password from the external storage medium does not match the password programmed into the data storage device, and comparing the user-entered password to the password programmed into the data storage device; and

granting access to the data stored on the data storage device if the downloaded password or the user-entered password matches the password programmed into the data storage device.

16. The method, as set forth in claim 15, wherein comparing the downloaded password comprises comparing the downloaded password to an Advanced Technology Attachment (ATA) Security password of an ATA hard drive.

17. The method, as set forth in claim 15, wherein comparing the downloaded password comprises comparing a password downloaded from a smart card to an Advanced Technology Attachment (ATA) Security password of an ATA hard drive.

18. The method, as set forth in claim 15, wherein comparing the downloaded password comprises comparing a password downloaded from a universal serial bus flash memory device.

19. A method comprising:

coupling an external storage medium to a computer associated with a data storage device;

initiating a routine to protect the data storage device, the routine comprising;

determining that the external storage medium does not comprise a password; and

, in response to the external storage medium not comprising a password;

generating a password using a random number generator;

storing the generated password on the external storage medium; and

using the generated password to encrypt the data storage device.

20. The method, as set forth in claim 19, wherein the routine further comprises using the generated password to program an Advanced Technology Attachment (ATA) Security feature of the data storage device, wherein the data storage device comprises an ATA hard drive.

21. A method comprising:

coupling a data storage device to a computer system;

coupling an external storage medium to the computer system, wherein the external storage medium contains a tangible machine readable medium configured to store a password;

determining, via a programming routine of the computer system, whether the external storage medium contains the password;

if the external storage medium contains the password, reading the password off the external storage medium;

if the external storage medium does not contain the password, generating the password and storing the password to the external storage medium;

programming the data storage device with the password contained in the external storage medium to condition access to the storage device based on the password; and

accessing data stored on the data storage device by using the password.

22. The method, as set forth in claim 21, wherein the password is an ATA security password associated with an ATA security feature of the data storage device, and wherein the ATA security feature conditions access to data stored on the data storage device based on the password.