Securing a computer against undesired write operations to or read operations from a mass storage device

• US 5,144,660 A
• Filed: 08/31/1989
• Issued: 09/01/1992
• Est. Priority Date: 08/31/1988
• Status: Expired due to Fees

• Current Assignee: Anthony M. Rose
• Original Assignee: Anthony M. Rose
• Inventors: Rose, Anthony M.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): CAIN, DAVID C
• Application Number:
  US07/401,032
• Time in Patent Office: 1,097 Days
• Field of Search: 380/3, 380/4, 380/25
• US Class Current: 726/24
• CPC Class Codes: G06F 11/327 Alarm or error message display
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2201/88 Monitoring involving counting

Abstract

A method of protecting a computer against "trojan" or "virus" programs is disclosed. A device 24 is connected in the bus between the disk controller card 16 and the disk drive 14 of the computer. The device monitors the bus and alerts the user when any illegitimate write attempts to a protected area of the disk is detected.

Claims

1. A method of securing a computer against unauthorized accessing of a predetermined set of the storage domains, where said computer comprises a mass storage device which includes:

a data storage medium divided into a series of storage domains, and a read-write head for read-write accessing of the data storage medium;

control means for controlling the mass storage device; and

a bus connecting the control means to the mass storage device, which bus includes a stepping line to which stepping signals are applied by the control means for stepping the read-write head from one storage domain to the next, and a direction control line to which direction control signals are applied by the control means for controlling the direction in which the read-write head is stepped,

which method comprises, in counting means connected to the stepping line and the direction control line between the control means and the mass storage device, and in response to the stepping signals and direction control signals, keeping a count corresponding to the position of the read-write head relative to the data storage medium, and in response to the count in the counting means, inhibiting access to said predetermined set of storage domains.

2. A method according to claim 1, wherein access to said predetermined set of storage domains is inhibited by inhibiting write operations by the read-write head to the data storage medium when the count in the counting means corresponds to a position of the read-write head within said predetermined set of storage domains.

3. A method according to claim 1, wherein access to said predetermined set of storage domains is inhibited by inhibiting the stepping signals from stepping the read-write head to a storage domain within the predetermined set of storage domains.

4. A method according to claim 1, wherein the mass storage device is a disk drive having a plurality of tracks, each track constituting one of said storage domains.

5. For use with a computer comprising:

a mass storage device which includes a data storage medium divided into a series of storage domains, and a read-write head for read-write accessing of the data storage medium;

control means for controlling the mass storage device; and

a bus connecting the control means to the mass storage device, which bus includes a stepping line to which stepping signals are applied by the control means for stepping the read-write head from one storage domain to the next, and a direction control line to which direction control signals are applied by the control means for controlling the direction in which the read-write head is stepped;

an accessory device for securing the computer against unauthorized accessing of a predetermined set of the storage domains, the accessory device comprising;

a bus connection for insertion in the bus between the control means and the mass storage device and including a stepping line connection for insertion in the stepping line and a direction control line connection for insertion in the direction control line;

counting means connected to the stepping line connection and the direction control line connection, which is operative in response to the stepping signals and direction control signals to keep a count corresponding to the position of the read-write head relative to the data storage medium; and

gate means for inhibiting access to said predetermined set of storage domains in response to the count in the counting means.

6. An accessory device according to claim 5, wherein the bus connection comprises a write gate line connection for insertion in a write gate line forming part of the bus, and wherein the gate means comprises a gate (54.1) in the write gate line connection, for gating a write enable signal from the control means to the mass storage means in response to the count on the counting means corresponding to a position of the read-write head within said predetermined set of storage domains.

7. An accessory device according to claim 5, wherein the gate means comprises a gate (54.2) in the step line connection, for gating the stepping signal from the control means to the mass storage means in response to the count on the counting means corresponding to a position of the read-write head in a storage domain adjacent said predetermined set of storage domains.

8. An accessory device according to claim 5, for a computer which comprises first and second complementary plug connectors in said bus for disconnectably connecting the control device to the mass storage device, the accessory device comprising a third plug connector connected to one end of the bus connection and a fourth plug connector connected to the other end of the bus connection, the third and fourth plug connectors being complementary to the first and second plug connectors so that the accessory device is disconnectably insertable in the bus.