System and method for secure O.S. boot from password-protected HDD
AssigneeLenovo (Singapore) Pte. Ltd.
InventorsMark Charles Davis, Randall Scott Springfield, David Carroll Challener, Rod D. Waltermann
Life of this patent
Estimating the term…
Abstract
If a user forgets the power-on password of his computer, he can depress the “enter” key or “access” key once to cause the BIOS to locate the power-on password in memory and attempt to unlock the HDD using the power-on password to boot a secure O.S. The HDD password either can be the same as the power-on password or the HDD can recognize the power-on password for the limited purpose of allowing access to the secure O.S. In any case, the secure O.S. is booted for password reset.
Claims21
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the key signal is generated by one and only one press of a single input element on the input device.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the HDD password is different from the power-on password, and the HDD recognizes the power-on password only for the purpose of granting access to the secure O.S.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the HDD password is the same as the power-on password, with access to the HDD being granted upon reception of the power-on password.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein if the HDD is not at least conditionally unlocked by the power-on password, at least one of:
- an optical disk associated with the computer, or a network associated with the computer, is accessed to obtain a boot copy of the secure O.S.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the secure O.S. is located on the HDD using at least a logical block address (LBA) in a master boot record (MBR) sector.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the key signal is generated upon initial use of the computer as indication of the user agreeing to register the computer.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the computer is registered to the user at a vendor facility and the power-on password is set to a random value at the vendor facility, the key signal being generated by the user to reset the power-on password to a user-defined value.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the power-on password is set to a random value at a vendor facility and a supervisor password associated with the BIOS is set to a registration value at the vendor facility, an attempt to reset the power-on password by generating the key signal and booting the secure O.S. failing, the method then entering a registration mode.
A method for booting a computer with a secure operating system (O.S.), comprising:
- in lieu of a power-on password, receiving a key signal from an input device operatively connected to the computer;
- in response to the key signal and without further user interaction, executing a basic input output system (BIOS) in the computer to retrieve from a memory associated with the computer the power-on password;
- if a hard disk drive (HDD) associated with the computer is locked with a HDD password, sending the power-on password to the HDD to attempt to at least conditionally unlock the HDD;
- and
- booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the power-on password is set to a random value at a vendor facility and a supervisor password associated with the BIOS is cleared at the vendor facility, a registration bit being set to “register” to cause booting of the secure O.S. in a registration mode in response to an initial generation of the key signal by the user.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the HDD password is different from the power-on password, and the HDD recognizes the power-on password only for the purpose of granting access to the secure O.S.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the HDD password is the same as the power-on password, with access to the HDD being granted upon reception of the power-on password.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein if the HDD is not at least conditionally unlocked by the power-on password, logic is executed such that at least one of:
- an optical disk associated with the computer, or a network associated With the computer, is accessed to obtain a boot copy of the secure O.S.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein die secure O.S. is located on the HDD using at least a logical block address (LBA) in a master boot record (MBR) sector.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the key signal is generated upon initial use of the computer as indication of the user agreeing to register the computer.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the computer is registered to the user at a vendor facility and the power-on password is set to a random value at the vendor facility, the key signal being generated by the user to reset the power-on password to a user-defined value.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the power-on password is set to a random value at a vendor facility and a supervisor password associated with the BIOS is set to a registration value at the vendor facility, an attempt to reset the power-on password by generating the key signal and booting the secure O.S. failing, the method then entering a registration mode.
A computer bootable with a secure operating system (O.S.), comprising:
- a key signal generating element on an input device of the computer, the key signal generating element generating a key signal when a user manipulates the key signal generating element once and only once during a basic input output system (BIOS) boot sequence;
- logic implemented on a computer readable medium in the computer for, in response to the key signal and without further user interaction, retrieving from a memory associated in the computer an power-on password;
- logic implemented on a computer readable medium in the computer for sending the power-on password to a hard disk drive (HDD);
- and
- logic for booting a secure O.S. from the HDD if the power-on password at least conditionally unlocks the HDD, wherein the power-on password is set to a random value at a vendor facility and a supervisor password associated with the BIOS is cleared at the vendor facility, a registration bit being set to “register” to cause booting of the secure O.S. in a registration mode in response to an initial generation of the key signal by the user.
Dependencies are inferred from the claim text.