System and method for delivering versatile security, digital rights management, and privacy services from storage controllers

Abstract

A method for providing enhanced security features in a storage device involves partitioning a storage media in the storage device into a hidden partition and a storage partition in the storage media. A base class is written to the hidden partition. A security provider base class is instantiated from the base class. The security provider base class is adapted to control access to the storage media.

Description

CROSS REFERENCE TO RELATED APPLICATION(S) [0001] This application is a continuation in part of pending application Ser. No. 09 / 912,931, filed on Jul. 25, 2001, entitled “METHODS AND SYSTEMS FOR PROMOTING SECURITY IN A COMPUTER SYSTEM EMPLOYING ATTACHED STORAGE DEVICES,” which is incorporated herein by reference in its entirety.BACKGROUND OF THE INVENTION [0002] The present invention generally relates to methods and systems for securing computer systems. More particularly, the present invention relates to methods and devices containing a security partition and a disc drive architecture for securing information in a system, which may be connected to a networked environment. [0003] Computer operating systems or platforms play a central role in electronic commerce, as well as in day-to-day business operations for large and small companies alike. As more computer systems become connected to networks (private and public), the need to secure information has become critical. Unfortunately, ...

AI Technical Summary

Benefits of technology

[0018] In one embodiment, a storage media of a storage device is partitioned into a hidden partition and a storage partition. A base class is written to the hidden partition. A security provider base is instantiated from the base class. The security provider base class is adapted to control access to the storage media.

[0019] In another embodiment, the storage device has a processor and firmware adapted to access data stored on a storage media. Disc drive firmware is written to a controller of the storage device. The storage media of the storage device is partitioned into a hidden portion and a data portion. A security provider object template is written to the hidden partition. Security pro

Problems solved by technology

Unfortunately, traditional operating systems provide limited security.

However, no overall corresponding improvement in client platforms has been implemented, in part, because of the variety of client platforms and because of the cost.

However, current computing platform technologies do not allow a local or remote user to test whether a platform can be trusted with sensitive information.

For example, a host system can verify that a particular user is accessing the system, but it is difficult (if not impossible) to establish with certainty whether the particular user's computing platform is a corporate machine and whether it runs the required software and configurations.

With the advent and widespread deployment of the Internet, the deficiencies of conventional computer security systems have been exposed and sometimes exploited.

A disadvantage of the Internet is that it permits many ways to infiltrate the perimeter defenses of conventional computer systems.

Generally, infiltration of these perimeter defenses can compromise data and computer programs, which can impact derivative capabilities, such as digital rights management.

Virus detection software, however, can be susceptible to exploitation by, for example “spoofing” or “wrappering” strategies.

This highlights a fundamental problem with conventional computer security systems, namely that the security system operates within the same environment as the operating system.

Software security implementations (such as virus detection software) may be impacted by software that has already been executed on the software platform.

Even tightly controlled software cannot vouch for its own integrity.

For example, if malicious software, such as a virus, has bypassed the perimeter defenses or security features of the OS and has managed to corrupt its operation, the OS cannot be expected to recognize the security breach, reliably.

These

Images