WO2007113455A1

WO2007113455A1 - Data security

Info

Publication number: WO2007113455A1
Application number: PCT/GB2006/050290
Authority: WO
Inventors: Adrian White
Original assignee: Adrian White
Priority date: 2006-03-31
Filing date: 2006-09-15
Publication date: 2007-10-11
Also published as: GB2436629B; GB0606485D0; GB2436629A

Abstract

An apparatus for managing data on a host computer, particularly a non-functional host computer, comprises means for coupling to the host computer, a power source, means for using said power source to power a memory device of the host computer, means for extracting data from and/or restoring data to the memory device and storage means for storing the data prior to restoration and/or after extraction on the apparatus and/or at a remote location.

Description

Data Security

This invention relates to data security. In particular, it relates to an apparatus for the extraction of data from and/or restoration of data to a hard disk drive of a non- working host computer directly.

The use of portable computers is increasingly common. The users of such computers often store important and/or sensitive data on their portable computer, generally on a hard disk drive located within the computer. This can cause problems should the computer stop working and require remedial work or removal to an external repairer. Unless the user is skilled, he or she will have no means of extracting and/or restoring the data from/to a non-functioning computer. Warranties typically require that a computer be returned to the manufacturer for repair, with no guarantee that any important data will be saved and the further risk that any sensitive data could be accessed.

WO 97/46940 discloses an apparatus that is capable of diagnosing and correcting faults in a host computer having a central processing unit (CPU) and ancillary units. The apparatus comprises a first part to be coupled to the host computer that is operable to disable the CPU and operate and/or interrogate the ancillary units and a second part coupled to the first part that is operable to diagnose faults in the computer and to effect at least some corrective measures through the first part and which can be operated remotely, for example over the Internet. There is however no provision made for accessing data on the host computer's hard drive when the host computer is in a non- working state. In addition to the above described apparatus, there are a number of further prior art devices available that are adapted to be connected to a host computer to give a user access to a hard disk drive, or other storage means, within the host computer. These devices, however, all require the host computer to be in a working state. Examples of such devices include, EP 1424244 and JP 2005038007.

There is no known device that provides a user with access to the hard disk drive of a non-working host computer.

The present invention arose in attempt to provide a solution to this problem.

According to the present invention in a first aspect there is provided an apparatus for managing data on a host computer, the apparatus comprising means for coupling to the host computer, a power source associated with the apparatus, means for using said power source to power a memory device of the host computer independently of the host computer, means for accessing the memory device directly from the apparatus, independently of the host computer, means for extracting data from and/or restoring data to the memory device and storage means for storing the data prior to restoration and/or after extraction on the apparatus and/or at a remote location.

The memory device is most preferably a hard disc drive (HDD) which will generally require its own power, but may instead be any other memory device, such as solid state memory, optical memory, etc. Preferably the apparatus includes means for causing data to be erased from the hard disk drive, or written over. Preferably the computer is a desktop or portable personal computer (PC).

According to the present invention in a further aspect there is provided a method of extracting and/or restoring data from and/or to a host computer, the method comprising coupling an apparatus comprising a power supply, a data extraction and/or a data restoration means and a storage means to the host computer, powering a memory device of the host computer independently of the host computer, using the power supply of the apparatus, accessing the memory device independently of the host computer, extracting data from and/or restoring data to the hard disk drive using the data extraction/restoration means and storing the data prior to restoration and/or after extraction using the storage means on the apparatus and/or at a remote location.

Embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings, in which:

Figure 1 is a block diagram of an apparatus according to the present invention shown attached to a host computer;

Figure 2 is a block diagram of an apparatus according to the present invention, without a local storage means, shown attached to a host computer;

Figure 3 is a perspective view of a typical SATA hard disk drive showing the configuration of power connector pins;

Figure 4 is a block diagram of an apparatus according to the present invention - A -

located within a host computer; and

Figure 5 is a block diagram of an apparatus according to the present invention, with an external power supply, located within a host computer.

Figure 6 is a block diagram of an apparatus according to the present invention.

Referring to Figure 1, a first embodiment of the invention is shown. A data - extraction/restoration apparatus 1 is shown connected to a host computer 3. The invention is especially useful with a portable computer but the host computer 3 may, of course, be any portable or desktop computer or other equipment which includes a hard drive or other memory (backing store). The host computer comprises a central processing unit (CPU) and a plurality of ancillary units (only a hard disk drive 23 is shown for clarity) connected to a system bus 27. The apparatus 1 comprises a storage means 5, a CPU 7, a memory 9, a battery 11, a communication means 13 and a connection port 15, each of which is connected to a data bus 17. The storage means 5 may be a disk-based or tape-based means (eg a hard disk drive, optical disk drive, tape drive, etc) or may be solid state memory or any other type of data storage medium.

In use the apparatus 1 is connected to a host computer by means of link 19. Link 19 may be any suitable cable or indeed may be a wireless link (eg radio such as WIFI ™ or BLUETOOTH ™, an optical link or otherwise). Link 19 connects the connection port 15 of the apparatus 1 to a data port 21 of the host computer 3. The data port 21 is connected internally to a power connector 23f of the hard disk drive 23 and to a data cable 25 that connects the hard disk drive 23 to the system bus 27. Thus, the apparatus can be used with a completely non-functional computer. Its power-supply, motherboard or other means may be non-functional.

In order to extract or restore data the apparatus 1 provides power directly to the hard disk drive 23 of the host computer 3, isolates the hard disk drive 23 from the host computer 3 and validates the operation of an engineering cylinder of the hard disk drive 23. The engineering cylinder is then accessed and data is extracted from or restored to the hard disk drive 23. The data may be extracted or restored bit by bit, sector by sector or in any other manner. There may be provision made for the extraction or restoration of only specific types of data, for example only certain file types may be extracted or restored, such as those files with .doc, .wpd or .xls extensions, or perhaps only files made or modified after a certain date, or authorised by a particular person or group.

The data may or may not be verified before and/or after extraction or restoration. In the case of a data extraction operation, once the data has been extracted from the hard disk drive 23 of the host computer 3 the data on the hard drive 23 may be erased. More preferably, the data may be written over, as a means of encryption, using a standard binary pattern (in accordance with the relevant ISO standards). Using this method the data may still be accessible from the hard disk drive at a later stage, however, without the necessary expertise the data will be inaccessible and the risk of confidential or sensitive information being accessed would be significantly reduced.

The hard disk drive 23 of the host computer 3 may be attached to the system bus 27 through an AT Attachment-3 Interface (ATA-3). Details of such an interface may be found in the American National Standard of Accredited Standards Committee X3 working Draft no. X3T13 2008D, "Information Technology - AT Attachment-3 Interface (ATA-3)", ANSI X3.298 - 1997.

The data port 21 of the host computer 3 may be a dedicated port on a connector panel of the host computer 3. Alternatively, the data port 21 may comprise an existing port with the connection to the system bus perhaps being achieved through multiplexing. Any suitable existing data port may be used, such as but not limited to a universal serial bus (USB) port, Ethernet port, parallel port, serial port or VGA port. For example, in the case of a computer comprising at least one USB port, there may be provided a data switch (22) that is connected to the hard disk drive 23 of the host computer 3 to encode a data stream into a format as required by the USB port. Such a mechanism would be completely transparent to the normal operation of the computer and will require no intervention of the user.

Extracted data may be stored locally on the storage means 5 and/or remotely on a storage means at a remote location via the communication means 13. Communications means 13 may connect to any suitable communications network and may comprise any suitable modem or network adaptor. The connection may be a wired or wireless connection.

The storage means may comprise any suitable storage device capable of storing all or a proportion of the data stored on the hard disk drive 23. The storage means 5 may be any sort of disk or tape type drive or a solid state memory. Thus, the apparatus may have its own integral HDD or other memory/storage device. This may be one of the small form- factor devices as currently used in portable music or video players such as Ipod ™ for example.

The battery 11 may be connected to an external power source, such as a mains power supply. The battery may be rechargeable and in one embodiment is capable of providing power for at least 25 minutes between charges. The hard disk drive 23 may be a SATA (Serial Advanced Technology Attachment) hard disk drive operating on a 5v power supply, as found in the majority of portable computers, with unused power pins that constitute the power connector 23a.

Figure 2 shows schematically a typical SATA hard disk drive. This includes (typically) four power pins 23a to 23d. Two of these (eg 23a, 23b) are generally used, leaving the other pair free. The unused pins (23c, 23d) can therefore constitute the power connector 23f, as previously mentioned. Also shown is the connection 23b for data cable 25. The data cable may be split to provide the data stream for data port 21.

Figure 3 shows a second embodiment of the invention. This embodiment is similar to the first embodiment but is not provided with a local storage means.

Figure 4 shows a third embodiment of the invention in which the apparatus 1 is an internal component of a host computer 23. In a desktop computer the apparatus 1 may constitute a service card. In a portable computer the apparatus 1 may be formed on a motherboard as a cluster of components or alternatively may comprise a self-contained microchip.

Figure 5 shows a fourth embodiment of the invention. This embodiment is similar to the third embodiment but the battery 11 is located outside the host computer 3.

Referring now to figure 6 there is shown a fifth embodiment of the present invention. A data extraction/restoration apparatus 1 is again shown connected to a host computer 3. The hard disk drive 23 of the host computer is isolated from both the data bus of the host computer 3 and the power supply of the host computer 3. In this embodiment, control/interface circuitry 26, which forms part of the apparatus 1, is provided at the host computer that achieves this isolation using a buffer arrangement 24. The buffer arrangement 24 preferably comprises a dual buffer with a first buffer for the host computer hard disk drive 23 data interface (e.g. IDE interface) and the host computer power supply, and a second buffer for the apparatus 1. On connection of the apparatus 1 to the host computer the power and data buffers of the host computer are disabled, the apparatus buffer is enabled and the apparatus 1 powers and controls the hard disk drive 23 of the host computer 3 independently of the host computer 23, providing full access to the hard disk drive 23 in total isolation from the host computer 3. The only component of the host computer that is provided with power from the apparatus 1 is the hard disk drive 23.

The control circuitry 26 comprises a controller that converts requests to read and/or write information to the hard disk drive 23 into a communications protocol that the hard disk drive 23 understands.

The interface circuitry 26 consists of an apparatus 1 communications interface and a hard disk drive 23 interface.

The control/interface circuitry 26 within the host computer may comprise a service card or may alternatively be formed on the motherboard as a cluster of components or a self-contained microchip however, any suitable connection means may be implemented.

In order to prevent data loss resulting from interruption of the hard drive 23 whilst it is being accessed it is preferable, if the computer is in a semi- working state, that the host computer 3 is switched off or that a request line or register is implemented by the apparatus 1 so that software on the host computer 3 does not access the hard disk drive 23 whilst the apparatus 1 is accessing the hard disk drive 23.

According to this embodiment there is provided a user interface 6 that allows a user to select from a range of data extraction and restoration options and to interact with the apparatus. The data extraction options may be, but are not limited to: a) Hard disk drive image b) Hard disk drive image with secure erase of source backing store after verify c) Data file only backup d) Data file backup with secure erase of source data files after verify The user interface may comprise an LCD touch screen, an LCD screen and separate input means or any other suitable interface that allows a user to view and make selections related to the operation of the apparatus 1.

It is preferable that there are suitable safety measures provided in order to ensure that data extracted to the apparatus 1, which has not been restored, is not destroyed and likewise that null or invalid extracted data is not restored to the hard disk drive 23 of the host computer 3. Upon a user selecting data extraction or restoration, the system control preferably reads the source to ensure that it is valid and checks the destination to ensure it is suitable for the electronic data being copied to it. The user interface may further provide live information relating to the status of the data extraction or restoration operation, information relating to the memory status of the storage means 5, battery status etc.

The apparatus 1 comprises two interfaces. The first comprises an interface 28 for connection to the apparatus side of the interface circuitry 26 within the host computer 3, and allows communication between the control circuitry 28 in the apparatus 1 and the control circuitry 26 in the host computer 3. The second apparatus interface 30 consists of an interface for connection to the storage means 5 within the apparatus 1.

The apparatus control circuitry further comprises a controller 32 for controlling the operation of the apparatus 1. The controller 32 converts requests to read information from or write information to the hard disk drive 23 into a communications protocol that the hard disk drive 23 can understand. The user interface 6 is connected to the controller 32. Any suitable communication medium and protocol that allows the necessary communications to take place may be implemented, including but not limited to PCI bus and its derivatives, ISA bus, PCMCIA, Ethernet, PSTN or ISDN or DSL modem, RS232, RS485, wireless (eg blue tooth, 802.11).

The primary use for an apparatus according to the invention will be for emergency use after a computer fails. In the event of a critical failure of the host computer, eg a failure of its main processor, motherboard, boot record, power supply failure or other critical error, the apparatus, having its own power supply, for powering the hard disk independently of the host computer, and being able to access the host computer's HDD (or alternative memory device), independently of the host computer, can be used to safely remove data therefrom and/or restore data thereto, prior to repair or removal of the host computer.

The apparatus may of course also be used, perhaps for backup purposes, in other less critical situations.

Whilst various embodiments have been described above, it should be noted that the individual features of each embodiment may be taken in isolation and combined with any of the individual features of alternative embodiments.

Claims

1. Apparatus for managing data on a host computer, the apparatus comprising means for coupling to the host computer, a power source associated with the apparatus, means for using said power source to power a memory device of the host computer independently of the host computer, means for accessing the memory device directly from the apparatus, independently of the host computer, means for extracting data from and/or restoring data to the memory device and storage means for storing the data prior to restoration and/or after extraction on the apparatus and/or at a remote location.

2. Apparatus as claimed in Claim 1, adapted for use with a non-functioning computer host.

3. Apparatus as claimed in Claim 1 or 2, wherein the memory device is a hard disk drive.

4. Apparatus as claimed in Claim 1, 2 or 3, including means for causing data to be erased from the memory device, or written over.

5. Apparatus as claimed in any preceding claim, adapted to extract all recoverable data from the memory device.

6. Apparatus as claimed in Claim 1, 2, 3 or 4, adapted to extract only specific portions of data from the memory device.

7. Apparatus as claimed in any preceding claim, comprising means for validating the data stored on the memory device of the host computer and/or the data extracted onto the storage means of the apparatus.

8. Apparatus as claimed in any preceding claim, wherein the storage means comprises a disk or tape type drive and/or a solid-state memory.

9. Apparatus as claimed in any preceding claim, further comprising a communication means for communication with a remote storage means, the communication means comprising a wired or wireless modem or network adaptor.

10. Apparatus as claimed in any preceding claim, wherein the power source comprises at least one battery and/or a mains power supply.

11. Apparatus as claimed in Claim 10, wherein the battery comprises a rechargeable battery.

12. Apparatus as claimed in any preceding claim, wherein the power provided to the host computer from the apparatus is a low voltage power.

13. Apparatus as claimed in any preceding claim wherein the host computer is a portable or desktop personal computer (PC).

14. Apparatus as claimed in any preceding claim, comprising a user interface.

15. Apparatus as claimed in Claim 14, wherein the user interface allows a user to select a predetermined data extraction and/or data restoration operation for the apparatus to perform.

16. Apparatus as claimed in Claim 14 or Claim 15, wherein the user interface comprises a touch screen or a screen and input device.

17. Apparatus as claimed in any preceding claim wherein the apparatus is a standalone unit for attachment to the host computer.

18. Apparatus as claimed in any preceding claim, wherein the apparatus is an internal component of the host computer.

19. Apparatus as claimed in Claims 1 to 17 in combination with a host computer, the host computer comprising a data port through which the apparatus is connected to the host computer, the data port being connected to a data connection and a power connection of the memory device of the host computer.

20. Apparatus as claimed in Claim 19, wherein the data port is an existing data port provided on the host computer with the connections to the data connection and the power connection of the memory device of the host computer being achieved through multiplexing the data port.

21. Apparatus as claimed in Claim 19, wherein the data port is a dedicated port and is connected only to the data connection and the power connection of the memory device of the host computer.

22. Apparatus as claimed in Claims 1 to 16 in combination with a host computer, the host computer comprising a connector/interface through which the apparatus is connected to the host computer, the interface/connector being connected to a data connection and a power connection of the memory device of the host computer through data and power buffers.

23. Apparatus as claimed in Claim 19, wherein there is further provided a multiplexer between the data and power buffers and the memory device of the host computer.

24. Apparatus as claimed in Claim 19, comprising a dual buffer arrangement allowing the data and power connections of the host computer for the storage means to be disabled and data and power connections of the apparatus to be enabled so as to provide independent control of the memory device of the host computer.

25. A method of extracting and/or restoring data from and/or to a host computer, the method comprising coupling an apparatus comprising a power supply, a data extraction and/or a data restoration means and a storage means to the host computer, powering a memory device of the host computer, independently of the host computer, using the power supply of said apparatus, accessing the memory device independently of the host computer, extracting data from and/or restoring data to the memory device using the data extraction/restoration means and storing the data prior to restoration and/or after extraction using the storage means on the apparatus and/or at a remote location.

26. The method of Claim 25, wherein the host computer is non-functioning.

27. The method of Claim 26, wherein the host computer has a power supply which is non-functioning.

28. The method of any of Claim 25 to 27, wherein the memory device comprises a hard disk drive and once the hard disk drive is provided with power, the operation of an engineering cylinder of the hard disk drive is validated and then accessed to extract data from and/or restore data to the hard disk drive.

29. The method of any of Claims 25 to 27, wherein the memory device is isolated from power and data connections of the host computer and connected to data and power connections of the apparatus using a buffer arrangement.

30. The method of any of Claims 25 to 27, wherein the apparatus switches off the host computer or implements a request line or register to software on the host computer to prevent the host computer accessing the memory device whilst the apparatus is connected to the host computer.

31. A method of extracting data from or restoring data to a non-functioning host computer, the method comprising coupling an apparatus according to Claims 1 to 23 to the host computer, powering a memory device of the host computer from a power supply associated with the apparatus, communicating directly with the memory device from the apparatus, extracting data from the memory device and storing the data and/or storing data and restoring the data to the memory device.

32. A method and apparatus of extracting data from a host computer as hereinbefore described with reference to, and as illustrated by, Figures 1, 2, 4, 5 and 6.