DE102005041135A1 - Supplementary card e.g. add-in card, for computer, executes security instructions after basic input/output system and sets freeze instruction for preventing changing or setting of user password by operating system or application program - Google Patents

Abstract

The card (4) stores a user password and security-instructions of security feature protecting a hard disk of a computer, on an EEPROM (5). The card is invoked, during the booting-up of the computer, after the basic input/output system (BIOS) and before the operating system. The card executes the security instructions after the BIOS and sets a freeze instruction for preventing the changing or setting of the user password by the operating system or by an application program on the operating system. An independent claim is also included for a method for secured booting-up of a computer.

Description

The The invention relates to a plug-in card or supplementary card for a Computer.

Some Hard disks of computers, especially ATA or SATA (IDE and Serial ATA hard drives can use their record managed by the disk controller - i. below the BIOS level - through a password will be blocked. The passwords are part of a Security feature sets the ATA specification. It looks like z. For example, 32-byte passwords as User password and master password before. The latter is intended as a secondary key, thus z. B. in a company of the computer administrator the hard disk if necessary save even if the user forgot his user password Has. Both passwords can be independently set each other to any byte sequences.

Of the Hard disk protection is enabled by using the ATA command SECURITY SET - password a user password is set. Hereupon, the plate initially remains normal usable, but is after the next Switch on or hardware reset disabled. Allowed in this state they do not have access to their data and only accepts a few Commands, z. B. for querying type designation, serial number etc. The command SECURITY UNLOCK, together with the correct user password, unlock the plate temporarily, so that you can work normally with this. The safety function remains initially activated, so the hard drive automatically after the next cold start is locked again. Through the command SECURITY DISABLE, together with the correct password, the lock will be permanently disabled.

Around an unauthorized access to the security feature, in particular also an unauthorized locking of the hard disk by setting or Changing a user password to prevent is the command SECURITY FREE-ZE LOCK provided. Freezes the safety positions until the next cold start, so that the hard disk in particular no password changes or setting the Password accepted. Thus, z. B. a defective, self-copying Program such. As a virus, worm or Trojan horse, not illegally make such commands of the security feature set.

The Functions of the security feature set can be found in particular in the BIOS used to access the operating system or one under the operating system Prevent application. This can be in the BIOS a query of the password be provided, and / or it can after unlocking the disk when entering the correct user password before Start the operating system security settings through the FREEZE function be frozen, thus keeping the password safe under control of the BIOS remains.

The hard disk BIOS (Basic Input Output System) however, do not use this security feature consistently. Consequently can especially ATA and SATA hard drives for unauthorized activation of the security features cause problems. If a faulty Program has set the user password and the user does not know the master password is, can the data of the hard disk, if necessary, only through special treatment procedures to be saved.

The DE 102 52 265 A1 describes a network card for a computer with a reset device for outputting a hard reset output signal, a restore device for retrieving system files and a bus connection. When a Wake-on-LAN input signal is received, a Wake-on-LAN output signal is output to the computer's power supply. A hard-reset output signal is output via a hard-reset line to the computer-internal device.

Of the Invention is based on the object by complementary measures unauthorized changes on the hard disk or the hard disks of a computer to prevent or to complicate.

These The object is achieved by an expansion card according to claim 1. The under claims describe preferred developments.

Thus, according to the invention in the computer introduced an expansion card on which a control chip is mounted between the hard drive and the hard disk controller plugged in or switched.

The inventive expansion card can be plugged directly onto the hard drive or for better attachment occupy a normal slot in the computer. When used in one PCI slot can be the PCI connector directly to the power supply, without a data transfer over the PCI interface basically is required.

The control chip according to the invention is thus regarded by the corresponding hard disk controller or the plurality of hard disk controllers as a hard disk and acts against the hard disk or the connected hard disks in turn as a hard disk controller. The control chip can pass on routine data transfers uninfluenced, but intervene appropriately in safety-relevant functions. In particular, the control chip can block security-relevant access using the security feature set.

The Master password is advantageously in the expansion card firmly composed. The user password can be used by the user or also over a LAN or over an internal computer bus connection, e.g. PCI bus connection, to be entered. advantageously, are the passwords stored encrypted on a serial EEPROM of the expansion card.

For this can over a port of the expansion card, e.g. a USB port or also a reading device for reading flash cards or others recordable data carriers, the input of the key on the disk in question be requested. By entering the respective data carrier with the key Thus, the respective user can authenticate himself. Thus are the password and possibly other records on the card-internal Memory encrypted be stored, only by entering the key by corresponding user access to the hard disk.

The inventive expansion card can In particular, each set the FREEZE mode, so that below no change of the password or passwords can be done on the hard drive. Only by the user entered key can pass the password to disk using the unlock command become.

advantageously, becomes the expansion card according to the invention on any relevant hard drive that is encrypted by setting passwords can, i. especially any ATA hard drive active; these can both IDE and SATA hard drives.

According to the invention, the Expansion card still with multiple hard disks connected a raid functionality carry out. This functionality can be integrated into the control chip or by an additional Lich on the expansion card provided further Raid chip are performed. For the Management of the raid and encryption of the hard drives can advantageously its own small CPU with its own work and program memory be used. Thus, a corresponding addressing of several connected hard drives as a common hard drive possible, without that the user dividing the total memory into several Hard disks noticed.

Of the control chip according to the invention is thus basically a full HDD control chip. Advantageously it also possible - except of the future commands or security features sets - also support SCSI disks if These are installed accordingly in the computer.

The Invention will be described below with reference to the accompanying drawings on some embodiments explained in more detail. It demonstrate:

1 an expansion card according to a first embodiment of the invention for controlling a hard drive;

2 an expansion card according to another embodiment for controlling two hard disks;

3 an expansion card according to another embodiment with Restore chip and LAN controller;

4 a hard disk according to another embodiment with respect 3 additional RAID control of multiple hard drives.

1 shows a block diagram of the basic structure of an expansion card according to the invention 1 , The expansion card 1 is preferably as a plug-in card 1 educated. It has a control chip 2 and a memory chip 3 , Preferably an EEPROM, and is used according to the embodiment shown in a conventional manner in a computer, ie with a form of a connector strip PCI interface 6 plugged into the motherboard or the mainboard of the computer. The power supply 6 can via the PCI interface 6 basically without a bus connection or data connection via the PCI interface 6 is required. Thus, the serves in 2 shown PCI interface 6 According to the invention initially only the power supply.

The control chip 2 is over a first line 8th with at least a first hard drive 10 , according to the embodiment of the 2 accordingly also over a line 9 with a second hard drive 11 connected. Furthermore, the control chip 2 over another line 12 with a hard disk controller 14 connected to the control of the hard disk 10 eg in a conventional manner on the motherboard 4 is provided.

In addition, as described below is written - peripheral devices via an interface of the expansion card 1 , eg a USB port 16 be controlled.

In the embodiment of the 2 become two disks 10 . 11 from the control chip 2 via lines 8th . 9 driven. The control chip is corresponding 2 via lines 12 . 13 with two hard disk controllers 14 . 15 on the motherboard 4 attached, connected.

• 1. SECURITY SET PASSWORD, wodurch ein User-Password UP und ein Master-Password MP eingegeben werden und die Festplatte 10, 11 automatisch beim nächsten Hochfahren, d.h. zumindest bei einem Kalt-Start, Password-geschützt bzw. verriegelt ist.
• 2. SECURITY UNLOCK, das zusammen mit dem korrekten User-Password eingegeben wird, entsperrt die Festplatte 10, 11 vorübergehend, so dass mit ihr normal gearbeitet werden kann und ein Zugriff auf die Daten möglich ist. Die Sicherheitsfunktion bleibt jedoch aktiviert, so dass die Festplatte nach dem nächsten Kaltstart automatisch wieder verriegelt ist,
• 3. SECURITY DISABLE PASSWORD, wodurch der Security-Modus mit Password-Schutz wieder dauerhaft aufgehoben wird und der Rechner beim nachfolgenden Starten nicht mehr passwordgeschützt ist.
• 4. SECURITY FREEZE LOCK, wodurch sowohl im passwordgeschützten Modus als auch im ungeschützten Modus ein Setzen des Passwords und/oder eine Veränderung des Passwords verhindert wird bis zum nächsten Kaltstart des Rechners, bei dem der Freeze-Modus zunächst nicht gesetzt ist. Im Freeze-Modus ist ein normaler Betrieb möglich, wobei Frozen Mode-Befehle verfügbar sind,
• 5. SECURITY ERASE PREPARE und SECURITY ERASE UNIT, wodurch der Password-Modus gelöscht wird und somit auch beim nächsten Starten des Rechners nicht mehr gesetzt ist. Die Erase-Funktionen erfolgt durch Eingabe des Master-Passwords. Hierbei kann z.B. zwischen einer High- und einer Maximum-Sicherheitsstufe differenziert werden, wobei in der High-Sicherheitsstufe die Erase-Funktion durch das Master-Password zur Entsperrung und zum nachfolgenden Zugriff auf die Daten führt und in der Maximum-Sicherheitsstufe bei Entsperren durch das Master-Password sämtliche Daten gelöscht werden.

The hard disk 10 , or the hard disks 10 . 11 are controlled by a security feature using a security command set. The hard disks 10 . 11 In particular, ATA, ie IDE or SATA hard disks 10 . 11 be. The ATA or SATA command set has a Security Mode feature set with at least the following commands:

• 1. SECURITY SET PASSWORD, whereby a User-Password UP and a Master-Password MP are entered and the hard disk 10 . 11 automatically at the next boot, ie at least during a cold start, password protected or locked.
• 2. SECURITY UNLOCK, which is entered together with the correct user password, unlocks the hard disk 10 . 11 temporarily, so that it can be used normally and access to the data is possible. However, the security feature remains enabled so that the hard disk is automatically locked again after the next cold start,
• 3. SECURITY DISABLE PASSWORD, whereby the security mode with password protection is permanently canceled again and the computer is no longer password-protected on subsequent startup.
• 4. SECURITY FREEZE LOCK, which prevents both password protected mode and unprotected mode from setting the password and / or changing the password until the next cold start of the computer, in which the freeze mode is initially not set. In Freeze mode, normal operation is possible, with Frozen Mode commands available,
• 5. SECURITY ERASE PREPARE and SECURITY ERASE UNIT, which clears the password mode and thus will not be set the next time the computer is started. The Erase functions are performed by entering the master password. Here, for example, can be differentiated between a high and a maximum security level, in the high security level, the Erase function by the master password for unlocking and subsequent access to the data leads and in the maximum security level when unlocked by the Master Password all data will be deleted.

advantageously, the master password is set to a specific one during manufacture Value set and can subsequently by the appropriate security Set password command to be changed.

On the EEPROM 3 are the ATA or SATA instruction set of the hard disk 10 . 11 saved with the security features set, with which the control chip 2 performs the security functions or security functions.

Thus, the expansion card 1 perform the FREEZE function so that no changes to the user password or the master password can be made subsequently. Advantageously, the expansion card asks 1 continue the stored user password UP. Here, the user password UP and the master password MP on the EEPROM 3 be stored encrypted. The decryption key may be on the expansion card 1 be saved yourself. Advantageously, however, the key is placed on a removable disk inserted by the user 20 provided, for example, a flash card 20 or a USB stick 20 which is in a corresponding drive of the expansion card 1 , eg the USB port 16 or a corresponding flash card holder is inserted. Via the USB port 16 or the card reading connection according to the invention thus a hardware authentication by means of the on the removable disk 20 stored key possible.

If in an application program, for example, also online via the Internet, unauthorized access to the User-Password UP or the Master-Password MP on one of the hard disks 11 . 12 This access is prevented in each case due to the set FREEZE mode.

Since the expansion card according to the invention 1 between the respective disks 10 respectively. 10 . 11 and their hard disk controllers 14 respectively. 14 and 15 switched on, it can when accessing the disk 10 or hard disks 10 . 11 not be bypassed. The hard disk controller 14 . 15 basically also on the disks 10 . 11 be arranged by yourself. The hard disks can eg IDE or SATA hard disks 10 . 11 be.

The BIOS installed in the computer also accesses the hard disk controllers 14 respectively. 14 and 15 to the hard drive 10 respectively. 10 and 11 back; Accordingly, the operating system running on the BIOS and running on the operating system application programs in which, for example, viruses, worms, Trojan horses or other self-copying or self-installing programs can be active, which may have access to the hard drives 10 . 11 search and permanently delete or change data here.

In the embodiment of the 3 is on the expansion card 1 additionally a LAN controller 24 for controlling a LAN connection 25 intended. Furthermore, the PCI interface 6 not only used for power supply but also for data transmission; Here is a PCI controller 28 for controlling the data traffic via the PCI interface 6 and the computer-internal PCI bus. The PCI controller 28 can basically with the control chip 2 be formed integrated, ie that the control chip 2 also takes over the PCI control with. Advantageously, however, according to 3 a separate chip as a PCI controller 28 on the expansion card 1 assembled. Via the PCI bus, the PCI interface 6 and the PCI controller 28 can thus be a data transfer via the LAN controller 24 and the LAN done. Here is a restore chip 30 on the expansion card 1 mounted and with the LAN controller 24 connected.

In this embodiment, the computer with its expansion card 1 thus with other computers over the LAN line 26 , eg a telephone line or even a wireless data connection, form a LAN. The data connection can be made via a router accordingly. In addition to star connections, bus systems are also possible.

If the LAN controller 24 over the LAN connection 25 a wake-on-LAN input signal is supplied, he is - directly or via a controlled by him connection device - a wake-on-LAN output signal via a separate Wake-on-LAN line to z. B. a power supply of the computer, by which it can be converted from a sleep state to an operating mode.

The restore chip 30 is used to prevent irreversible changes to the operating system's stored system files. When system program changes are entered by the program, after physically storing the new system files and assigning the addresses to these new system files, the restore chip first issues a request to the user as to whether the changes are desired. Only after confirming that the new system files are to be used instead of the previous system files are they adopted by assigning the addresses of the system files to the stored data. The restore chip 30 - Is advantageously on the LAN control chip 24 with the PCI interface 6 the expansion card 1 or network card 1 connected via the connection to the PCI bus of the computer.

4 shows another embodiment in which the hard disks 10 . 11 , if necessary also further hard disks, can be configured as Raid. This is a Raid Encrypt Decrypt chip 40 on the extension card 1 provided that the connected hard drives 10 . 11 as a total memory of eg 1 terabyte storage capacity addressed together.

Claims (14)

Expansion card for a computer that has at least one hard disk ( 10 . 11 ) and a hard disk controller ( 14 . 15 ) for controlling the hard disk ( 10 . 11 ), wherein the hard disk (10) is protected by a security feature that has access restrictions for application programs, characterized in that on the expansion card ( 1 ) a control chip ( 2 ) is mounted between the hard disk ( 10 . 11 ) and the hard disk controller ( 14 . 15 ), on the expansion card ( 1 ) at least the user password (UP) and at least one set of security commands of the security feature are stored, the control chip ( 2 ) Executes security commands from the stored set of security commands. Expansion card according to claim 1, characterized in that the control chip ( 2 ) sets a freeze command that prevents changes and / or setting at least the user password (UP). An expansion card according to claim 1 or 2, characterized in that on the expansion card ( 1 ) also the master password (MP) is stored. Expansion card according to one of the preceding claims, characterized in that the at least one password (UP, MP) on the expansion card ( 1 ) is stored encrypted. An expansion card according to claim 4, characterized in that it comprises a recording or reading device ( 16 ) for a removable device ( 20 ), z. As a flash card or a USB stick, and a key for decrypting the at least one stored password (UP, MP) from the expansion card ( 1 ) via the recording or reading device ( 16 from the imported removable disk ( 20 ) is read out. Expansion card according to one of the preceding claims, characterized in that on it the complete instruction set (ATA, SATA) for controlling the hard disk ( 10 . 11 ) is stored. Expansion card according to claim 6, characterized characterized in that the instruction set is an ATA or SATA instruction set. Expansion card according to one of the preceding claims, characterized in that it comprises an erasable storable read only memory, e.g. B. EEPROM ( 3 ) for storing the at least one password (UP, MP) and possibly the security instruction set. Expansion card according to one of the preceding claims, characterized characterized in that they are provided on each in the computer, through a password lockable disk executes security commands and at least sets the freeze command. Expansion card according to one of the preceding claims, characterized in that a raid-encrypted-decrypt device ( 40 ), which has several connected hard disks ( 10 . 11 ) addressed together. Expansion card after one of the previous ones Claims, characterized in that it has a recovery function. Expansion card after one of the previous ones Claims, characterized in that it has a wake-on-LAN function. Expansion card according to one of the preceding claims, characterized in that it is used as a plug-in card ( 1 ) is designed for insertion in a slot of the computer and via a plug-in interface ( 6 ) of a computer-internal bus system is supplied with power. An expansion card according to claim 12 and claim 13, characterized in that it has a LAN connection ( 25 ) and when recording a wake-on-LAN input signal via the LAN port ( 25 ) outputs a wake-on-LAN output signal via a separate wake-on-LAN line, by which it can be converted from a sleep state to an operating mode