US5657445A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Apparatus and method for limiting access to mass storage devices in a computer system
Assignee: Dell USA LP
•
Filing: 1996-01-26
•
Granted: 1997-08-12
•
Expires: 2016-01-26
Abstract
Abstract A computer system is provided with the capability of protecting portions of the mass storage media therein from unauthorized access. The mechanism employed to protect portions of the mass storage media is advantageously operating system independent. Thus, the protection mechanism functions regardless of what operating system is installed or what particular application software is presently being executed. More particularly, the computer system includes a processor configured to execute code in an operational mode and in a system management mode. A mass storage device and a memory are coupled to the processor. At least one region of the mass storage device is designated as a protected region by the user or by the manufacturer. The computer system is configured to trap mass storage device I/O operations and, in response to a trapped mass storage device I/O operation, the processor enters a system management mode. The computer system is configured to prevent execution of the trapped mass storage device I/O operation if the trapped mass storage device I/O operation is directed to a protected region of the mass storage device. However, the computer executes the trapped mass storage device I/O operation if the trapped mass storage device I/O operation is not directed to a protected region of the mass storage device. In this manner, increased computer system security is provided to selected portions of the mass storage device without reliance on protective mechanisms within the operating system or within add-on application software.
Inventors
- 👤 John J. Pearce
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 07:12
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/70; G06F21/78; G06F21/80; G06F12/00; G06F12/14; G06F12/1458; G06F12/1491
Claims Analysis
Total Claims: 29
Claim 1
Independent Claim
126 words
A computer system comprising: a mass storage device for storing information, the mass storage device including a region which is designated as a protected region; a processor, coupled to the mass storage device, the processor being configured to execute code in an operational mode and in a system management mode (SMM), the processor being configured to enter the system management mode when an I/O instruction is encountered which is directed to the mass storage device; and a memory, coupled to the processor, the memory including SMM code which when executed by the processor upon entering system management mode causes the processor to prevent a write I/O instruction directed to the protected region from writing to the protected region and otherwise permitting I/O instructions to be executed.
Claim 2
Dependent Claim
126 words
A computer system comprising: a mass storage device for storing information, the mass storage device including a region which is designated as a protected region; a processor, coupled to the mass storage device, the processor being configured to execute code in an operational mode and in a system management mode (SMM), the processor being configured to enter the system management mode when an I/O instruction is encountered which is directed to the mass storage device; and a memory, coupled to the processor, the memory including SMM code which when executed by the processor upon entering system management mode causes the processor to prevent a write I/O instruction directed to the protected region from writing to the protected region and otherwise permitting I/O instructions to be executed.
Claim 3
Dependent Claim
41 words
The computer system of claim 1 wherein a system controller is coupled to the processor for trapping I/O instructions which are directed to the mass storage device thus resulting in trapped I/O instructions for which the processor enters system management mode.
Claim 4
Dependent Claim
78 words
The computer system of claim 2 wherein the SMM code is configured to test the trapped instructions to determine if a trapped I/O instruction is a write instruction directed to a protected region of the mass storage device, the SMM code not permitting the trapped I/O instruction to be executed if the trapped I/O instruction is a write instruction directed to a protected region of the mass storage device and otherwise permitting execution of the trapped I/O instruction.
Claim 5
Dependent Claim
44 words
The computer system of claim 2 further comprising a user input device coupled to the processor for permitting the user to indicate whether a particular trapped I/O instruction directed to a protected region of the mass storage device is to be permitted to execute.
Claim 6
Dependent Claim
139 words
A computer system comprising: a mass storage device for storing information, the mass storage device including a region which is designated as a protected region; a processor, coupled to the mass storage device, the processor being configured to execute code in an operational mode and in a system management mode (SMM), the processor being configured to enter the system management mode when a write I/O instruction is encountered which is directed to the protected region of the mass storage device; and a memory, coupled to the processor, the memory including SMM code which when executed by the processor upon entering system management mode causes the processor to prevent a write I/O instruction directed to the protected region from writing to the protected region and otherwise permitting a write I/O instruction not directed to the protected region to be executed.
Claim 7
Dependent Claim
139 words
A computer system comprising: a mass storage device for storing information, the mass storage device including a region which is designated as a protected region; a processor, coupled to the mass storage device, the processor being configured to execute code in an operational mode and in a system management mode (SMM), the processor being configured to enter the system management mode when a write I/O instruction is encountered which is directed to the protected region of the mass storage device; and a memory, coupled to the processor, the memory including SMM code which when executed by the processor upon entering system management mode causes the processor to prevent a write I/O instruction directed to the protected region from writing to the protected region and otherwise permitting a write I/O instruction not directed to the protected region to be executed.
Claim 8
Dependent Claim
43 words
The computer system of claim 5 wherein a system controller is coupled to the processor for trapping write I/O instructions which are directed to the mass storage device thus resulting in trapped write I/O instructions for which the processor enters system management mode.
Claim 9
Dependent Claim
93 words
The computer system of claim 6 wherein the SMM code is configured to test the trapped write I/O instructions to determine if a trapped write I/O instruction directed to a protected region of the mass storage device, the SMM code not permitting the trapped write I/O instruction to be executed if the trapped write I/O instruction directed to a protected region of the mass storage device and otherwise permitting execution of the trapped I/O instruction if the trapped write I/O instruction is not directed to a protected region of the mass storage device.
Claim 10
Dependent Claim
45 words
The computer system of claim 6 further comprising a user input device coupled to the processor for permitting the user to indicate whether a particular trapped write I/O instruction directed to a protected region of the mass storage device is to be permitted to execute.
Claim 11
Independent Claim
154 words
A method of operating a computer system including a processor configured to execute code in an operational mode and in a system management mode, a mass storage device and a memory being coupled to the processor, the method comprising the steps of: designating at least one region of the mass storage device as a protected region; trapping mass storage device I/O operations thus resulting in trapped mass storage device I/O operations; entering, by the processor, of the system management mode in response to the occurrence of a trapped mass storage device I/O operation; preventing execution of the trapped mass storage device I/O operation if the trapped mass storage device I/O operation is directed to a protected region of the mass storage device; and continuing with execution of the trapped mass storage device I/O operation if the trapped mass storage device I/O operation is not directed to a protected region of the mass storage device.
Claim 12
Independent Claim
154 words
A method of operating a computer system including a processor configured to execute code in an operational mode and in a system management mode, a mass storage device and a memory being coupled to the processor, the method comprising the steps of: designating at least one region of the mass storage device as a protected region; trapping mass storage device I/O operations thus resulting in trapped mass storage device I/O operations; entering, by the processor, of the system management mode in response to the occurrence of a trapped mass storage device I/O operation; preventing execution of the trapped mass storage device I/O operation if the trapped mass storage device I/O operation is directed to a protected region of the mass storage device; and continuing with execution of the trapped mass storage device I/O operation if the trapped mass storage device I/O operation is not directed to a protected region of the mass storage device.
Claim 13
Dependent Claim
24 words
The method of operating a computer system of claim 9 further comprising the step of loading an operating system prior to the trapping step.
Claim 14
Dependent Claim
24 words
The method of operating a computer system of claim 10 further comprising the step of loading an application program after loading the operating system.
Claim 15
Dependent Claim
58 words
The method operating a computer system of claim 9 wherein the trapping step comprises testing a current instruction in an instruction stream provided to the processor to determine if the current instruction is a mass storage device I/O operation and in response issuing a system management interrupt if the current instruction is a mass storage device I/O operation.
Claim 16
Dependent Claim
28 words
The method of operating a computer system of claim 12 further comprising the step of the processor entering system management mode in response to a system management interrupt.
Claim 17
Dependent Claim
65 words
The method of operating a computer system of claim 13 further comprising the step of testing the current instruction to determine if an I/O operation associated with the current instruction is a mass storage device I/O operation, and if so, further testing the current instruction to determine if the I/O operation associated therewith is a write to a protected region of the mass storage device.
Claim 18
Dependent Claim
36 words
The method of operating a computer system of claim 14 further comprising the step of executing the current instruction if the I/O operation associated with the current instruction is found not to be a write operation.
Claim 19
Dependent Claim
48 words
The method of operating a computer system of claim 14 further comprising the step of executing the current instruction if the I/O operation associated with the current instructions is found to be a write operation which is not directed to a protected region of the mass storage device.
Claim 20
Dependent Claim
54 words
The method of operating a computer system of claim 14 further comprising the step of preventing a write I/O operation directed to a protected region of the mass storage device when the current instruction is found to be a write I/O operation which is directed to a protected region of the mass storage device.
Claim 21
Dependent Claim
51 words
The method of operating a computer system of claim 14 further comprising the step of outputting a question to the user asking if it is acceptable to continue execution of the current instruction when the current instruction is a write I/O operation to a protected region of the mass storage device.
Claim 22
Dependent Claim
32 words
The method of operating a computer system of claim 18 further comprising the step of executing the current instruction when the user indicates that it is acceptable to execute the current instruction.
Claim 23
Dependent Claim
35 words
The method of operating a computer system of claim 18 further comprising the step of preventing execution of the current instruction when the user indicates that it is not acceptable to execute the current instruction.
Claim 24
Independent Claim
106 words
A method of operating a computer system including a processor configured to execute code in an operational mode and in a system management mode, a mass storage device and a memory being coupled to the processor, the method comprising the steps of: designating at least one region of the mass storage device as a protected region; trapping a mass storage device write I/O operation targeted at a protected region of the mass storage device thus resulting in a trapped write I/O operation; and entering system management mode and executing system management mode code for preventing the trapped write I/O operation from writing to the protected region.
Claim 25
Independent Claim
106 words
A method of operating a computer system including a processor configured to execute code in an operational mode and in a system management mode, a mass storage device and a memory being coupled to the processor, the method comprising the steps of: designating at least one region of the mass storage device as a protected region; trapping a mass storage device write I/O operation targeted at a protected region of the mass storage device thus resulting in a trapped write I/O operation; and entering system management mode and executing system management mode code for preventing the trapped write I/O operation from writing to the protected region.
Claim 26
Independent Claim
173 words
A method of operating a computer system including a processor configured to execute code in an operational mode and in a system management mode, a mass storage device and a memory being coupled to the processor, the method comprising the steps of: designating at least one region of the mass storage device as a protected region; trapping mass storage device I/O operations thus resulting in trapped mass storage device I/O operations; entering, by the processor, of the system management mode in response to the occurrence of a trapped mass storage device I/O operation; determining if the trapped mass storage device I/O operation is a write I/O operation directed to a protected region of the mass storage device, and if so, requesting user input to indicate if the write I/O operation to the protected region should be permitted or not permitted; preventing the write I/O operation from writing to the protected region if user input so indicates; and permitting the write I/O operation to write to the protected region if user input so indicates.
Claim 27
Independent Claim
173 words
A method of operating a computer system including a processor configured to execute code in an operational mode and in a system management mode, a mass storage device and a memory being coupled to the processor, the method comprising the steps of: designating at least one region of the mass storage device as a protected region; trapping mass storage device I/O operations thus resulting in trapped mass storage device I/O operations; entering, by the processor, of the system management mode in response to the occurrence of a trapped mass storage device I/O operation; determining if the trapped mass storage device I/O operation is a write I/O operation directed to a protected region of the mass storage device, and if so, requesting user input to indicate if the write I/O operation to the protected region should be permitted or not permitted; preventing the write I/O operation from writing to the protected region if user input so indicates; and permitting the write I/O operation to write to the protected region if user input so indicates.
Claim 28
Dependent Claim
38 words
The method of operating a computer system of claim 22 further comprising the step of permitting the trapped mass storage device I/O operation to execute if the trapped mass storage device I/O operation is not a write operation.
Claim 29
Dependent Claim
50 words
The method of operating a computer system of claim 22 further comprising the step of permitting the trapped mass storage device I/O operation to execute if the trapped mass storage device I/O operation is a write operation which is not directed to a protected region of the mass storage device.
References Cited (Backward Citations)
US4821169A
Cited
US4868738A
Cited
US5257353A
Cited
US4926322A
Cited
US4991083A
Cited
US4961161A
Cited
US5056009A
Cited
US5522075A
Cited
US5483649A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-08-11 | 2001-02-10 | 2001-08-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-08-11 | 2005-02-10 | 2005-08-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-08-11 | 2009-02-10 | 2009-08-12 | $7700.00 | Window Closed / Lapsed |