Hard Disk Data Protection via POST Computer ID Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data protection methods for hard disks are inadequate as they do not prevent unauthorized access when a stolen hard disk is installed in another computer, allowing thieves or hackers to access sensitive data.
Innovation Solution
A method that checks for protection description data during the power-on self test (POST) and only allows access to the hard disk if the computer ID matches the hard disk ID, otherwise clearing the disk partition table to prevent access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a password protection program is added into the operating system to protect data, then data access is controlled through password authentication, but the hard disk can still be accessed by unauthorized persons using recovery tools or hacker tools when installed in another computer
Solution Approach 1:
The patent applies preliminary action by embedding protection description data directly into the hard disk's master boot sector during manufacturing or initial setup, before the hard disk is ever used. This pre-configured protection data includes encrypted computer ID codes that will be automatically verified during the POST stage, eliminating the need for complex runtime password authentication systems and providing inherent protection against unauthorized access when the hard disk is installed in an unauthorized computer.
Solution Approach 2:
The patent introduces protection description data as an intermediary element between the hard disk and the computer system. This intermediary contains encrypted computer ID codes that act as a mediator to verify whether the hard disk is installed in an authorized computer during the POST stage, preventing unauthorized access without requiring complex user-level authentication mechanisms.
2Reliability
If the computer ID code matching mechanism is implemented during POST stage, then only authorized computers can access the hard disk, but the system complexity increases due to additional verification steps
Solution Approach 1:
The patent applies self-service by designing the protection verification mechanism to operate automatically during the POST stage without requiring user intervention. The basic input/output system automatically reads the protection description data from the hard disk, decrypts and compares the computer ID codes, and determines whether to enable or clear the disk partition table based on the matching result, providing autonomous security enforcement.
Solution Approach 2:
The computer ID code matching mechanism is implemented during the POST stage, which occurs before the operating system loads. This preliminary verification ensures that unauthorized computers cannot even boot the operating system with the protected hard disk, providing security at the earliest possible stage without adding complexity to the operating system itself.
3Reliability
If the disk partition table is cleared when ID codes do not match, then unauthorized computers cannot access data, but the hard disk becomes inaccessible even to the authorized computer until reprotected
Solution Approach 1:
The patent applies dynamics by making the disk partition table's accessibility dynamic based on the computer ID code verification result. When the computer ID codes match, the partition table is created or maintained, allowing normal access. When they don't match, the partition table is cleared, preventing access. This dynamic state change provides effective security control.
Solution Approach 2:
The patent applies preliminary anti-action by clearing the disk partition table as a preventive measure when computer ID codes don't match, before any unauthorized data access can occur. This proactive clearing of the partition table ensures that even if unauthorized persons gain physical access to the hard disk, they cannot access the data without the proper computer ID code matching.
Data Source
AI summary
The present invention discloses a method for protecting data in a hard disk, such that when a computer executes a power-on self test (POST) of a basic input/output system (BIOS), completes initialization of memories and calls an interrupt routine of the BIOS to read a hard disk area after initialization program codes of interface devices of all hard disk are executed, the computer will determine whether or not the hard disk has added a protection description data with a portion that matches with a computer identification code of the computer before accessing data in the hard disk.