US 7,743,241 B1Granted

Securing the contents of data storage devices within a computer

AssigneeAmerican Megatrends, Inc.

InventorKevin Moore

Life of this patent

Estimating the term…

Loading patent…

Abstract

Each data storage device that supports the standard security features and is enabled with a security password may be locked when power is removed from the device. When power is returned, a determination is made as to whether the data storage device is locked and returning from a powered off state or a hardware reset. If locked, a password may be received from a user. After the security password is received, the data storage device is unlocked, allowing access to the data on the device. A setup utility is provided for manipulating the security and backup passwords for each device. Other features include: presenting locked devices to the operating system, the use of a backup password to unlock a device in lieu of the security password, requiring or not requiring password entry from a user to unlock a device when returning from a sleep state, setting maximum or high security, an automatic hardware reset upon exiting the setup utility, and disabling change password capabilities for devices without an enabled security password.

Claims11

Dependent claims

A method for securing contents of one or more data storage devices within a computer capable of storing a security password for unlocking and locking the data storage devices and of supporting one or more security features, the method comprising:

reading from each of the data storage devices within the computer a data storage device identifier, the data storage device identifier indicating whether the data storage device supports the security features and whether the data storage device is locked or unlocked;
determining from the data storage device identifier whether the data storage device supports the security features and is locked;
in response to determining that the data storage device supports the security features and is locked, determining whether the data storage device is returning from a powered off state, a hardware reset, or a sleep state;
in response to the data storage device being locked and returning from a powered off state or a hardware reset, determining whether a backup password may be used to unlock the data storage device;
in response to determining that a backup password may be used, determining whether a request to enter a backup password has been received;
in response to receiving a request to enter a backup password, receiving from a user the backup password for unlocking the data storage device and unlocking the data storage device, allowing access to data stored on the data storage device;
in response to determining that the data storage device is locked and returning from a powered off state or a hardware reset and that the backup password may not be used or a request to enter the backup password has not been received, receiving from the user a password for unlocking the data storage device;
in response to receiving the password, determining whether the received password is the security password;
in response to the received password being the security password, unlocking the data storage device and thereby allowing access to data stored on the data storage device;
in response to determining that the data storage device is locked and returning from a sleep state, determining whether the data storage device was unlocked prior to the sleep state;
and
in response to determining that the data storage device was unlocked prior to the sleep state, retrieving the security password from the memory and utilizing the security password to unlock the data storage device.

9 more elements

A computer storage medium comprising computer executable instructions which, when executed by a computer, cause the computer to:

read from each of the data storage devices within the computer a data storage device identifier, the data storage device identifier indicating whether the data storage device supports the security features and whether the data storage device is locked or unlocked;
determine from the data storage device identifier whether the data storage device supports the security features and is locked;
in response to determining that the data storage device supports the security features and is locked, determine whether the data storage device is returning from a powered off state, a hardware reset, or a sleep state;
in response to the data storage device being locked and returning from a powered off state or a hardware reset, determine whether a backup password may be used to unlock the data storage device;
in response to determining that a backup password may be used, determine whether a request to enter a backup password has been received;
in response to receiving a request to enter a backup password, receive from a user the backup password for unlocking the data storage device and unlock the data storage device, allowing access to data stored on the data storage device;
in response to determining that the data storage device is locked and returning from a powered off state or a hardware reset and that the backup password may not be used or a request to enter the backup password has not been received, receive from the user a password for unlocking the data storage device;
in response to receiving the password, determine whether the received password is the security password;
in response to the received password being the security password, unlock the data storage device allowing access to data stored on the data storage device;
in response to determining that the data storage device is locked and returning from a sleep state, determine whether the data storage device was unlocked prior to the sleep state;
and
in response to determining that the data storage device was unlocked prior to the sleep state, retrieve the security password from the memory and utilize the security password to unlock the data storage device.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/660,981Filed 12 Sep 2003
Granted: 22 Jun 2010
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/81
Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer: by…
G06F 21/45
Authentication, i.e. establishing the identity or authorisation of security principals: structures or tools for the administration of authentication
G06F 21/6209
Protecting access to data via a platform, e.g. using keys or access control rules: to a single file or object, e.g. in a secure envelope,…
G06F 21/78
Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer: to…