Secure control of access to data stored on a storage device of a computer system

A method comprising the steps of:

• executing, in a computer system having an accessible read/write storage device, program instructions effective on powering on of the system to initiate system operation;
• generating in response to powering on of the system a nonce string in the read/write storage device;
• distinguishing by execution of the program instructions between a requirement for entry of at least one password to access the read/write storage device and no requirement for entry of a password;
• prompting an operator of the system to enter a password by the execution of the program instructions in response to a determination that entry of a password is required to access the read/write storage device;
• generating a hash value from the nonce string, the password and a system binding key for the read/write storage device;
• supplying the hash value to the read/write storage device;
• verifying in the read/write storage device that the hash value is derived from the nonce string, the password and the system binding key;
• and
• granting read/write access to the read/write storage device on verification of the hash value.

A method comprising the steps of:

• on installation of a read/write storage device in a computer system,
• executing, in the computer system receiving the read/write storage device, program instructions effective on powering on of the system to initiate system operation;
• identifying the presence of the read/write storage device and generating a binding key linking the read/write storage device specifically to the computer system;
• prompting a designated user to enter a password for controlling access to the read/write storage device;
• and
• generating a hash value from the binding key and password and storing the hash value in a protected area of the read/write storage device for subsequent retrieval in exercising control of system access to the read/write storage device;
• then
• on subsequent powering on of the computer system;
• executing, in the computer system having the read/write storage device, program instructions effective on powering on of the system to initiate system operation;
• generating in response to powering on of the system a nonce string in the read/write storage device;
• prompting an operator of the system to enter a password by the execution of the program instructions;
• generating a hash value from the nonce string, the password and the system binding key for the read/write storage device;
• supplying the hash value to the read/write storage device;
• verifying in the read/write storage device that the hash value is derived from the nonce string, the password and the system binding key;
• and
• granting read/write access to the read/write storage device on verification of the hash value.

Apparatus comprising:

• a computer system;
• a read/write storage device accessible to the system;
• a system binding key stored accessibly to said system and said storage device and identifying said system and said storage device as being specifically linked;
• and
• program instructions stored accessibly to said system and said storage device and operative when executing on said system and said storage device to:
• generate in response to powering on of the system a nonce string in the read/write storage device;
• prompt an operator of the system to enter a password by the execution of the program instructions;
• generate a hash value from the nonce string, the password and said system binding key;
• supply the hash value to the read/write storage device;
• verify in the read/write storage device that the hash value is derived from the nonce string, the password and the system binding key;
• and
• grant read/write access to the read/write storage device on verification of the hash value.

Apparatus comprising:

• a computer readable media;
• and
• program instructions stored on said media accessibly to a computer system and effective, when executed on said computer system, to cause the system to:
• respond to powering on of the computer system by;
• executing, in a computer system having an accessible read/write storage device, program instructions effective on powering on of the system to initiate system operation;
• generating in response to powering on of the system a nonce string in the read/write storage device;
• prompting an operator of the system to enter a password by the execution of the program instructions;
• generating a hash value from the nonce string, the password and the system binding key for the read/write storage device;
• supplying the hash value to the read/write storage device;
• verifying in the read/write storage device that the hash value is derived from the nonce string, the password and the system binding key;
• and
• granting read/write access to the read/write storage device on verification of the hash value.

Apparatus comprising:

• a computer readable media;
• and
• program instructions stored on said media accessibly to a computer system and effective, when executed on said computer system, to cause the system to:
• respond to installation of a read/write storage device in a computer system by,
• executing, in the computer system receiving the read/write storage device, program instructions effective on powering on of the system to initiate system operation;
• identifying the presence of the read/write storage device and generating a binding key linking the read/write storage device specifically to the computer system;
• prompting a designated user to enter a password for controlling access to the read/write storage device;
• and
• generating a hash value from the binding key and password and storing the hash value in a protected area of the read/write storage device for subsequent retrieval in exercising control of system access to the read/write storage device;
• then causing the system to;
• respond to subsequent powering on of the computer system by;
• executing, in the computer system having the read/write storage device, program instructions effective on powering on of the system to initiate system operation;
• generating in response to powering on of the system a nonce string in the read/write storage device;
• prompting an operator of the system to enter a password by the execution of the program instructions;
• generating a hash value from the nonce string, the password and the system binding key for the read/write storage device;
• supplying the hash value to the read/write storage device;
• verifying in the read/write storage device that the hash value is derived from the nonce string, the password and the system binding key;
• and
• granting read/write access to the read/write storage device on verification of the hash value.