Patent Application
20080222718
Computer systems may be targeted for unauthorized access to information that resides on the computer system. Some recovery techniques enable users to generate a backup of system data, which may result in a security risk to the date that resides on the computer system.
The computing system 100 includes a computer 108 and one or more accompanying input/output devices 106, which may include a display 102 having a screen 104, a keyboard 110, other I/O device(s) 112, and a mouse 114. The other device(s) 112 may include, for example, a touch screen, a voice-activated input device, a track ball, and any other device that allows the system 100 to receive input from a developer and/or a user. The computer 108 includes system hardware 120 including a processing unit 126, a disk controller 128, and random access memory and/or read-only memory 130.
A file store 180 is communicatively connected to computer 108. File store 180 may be internal such as, e.g., one or more hard drives, or external such as, e.g., one or more external hard drives, network attached storage, or a separate storage network. File store 180 comprises a master boot record 182. In some embodiments, the MBR may be a dedicated sector or sectors of the file store 180. For example, in some computer systems the master boot record is the first sector of a data storage device such as on the hard disk.
Memory 130 includes an operating system 140 for managing operations of computer 108. In one embodiment, operating system 140 includes a hardware interface module 154 that provides an interface to system hardware 120. In addition, operating system 140 includes a kernel 144, one or more file systems 146 that manage files used in the operation of computer 108 and a process control subsystem 148 that manages processes executing on computer 108. Operating system 140 further includes one or more device drivers 150 and a system call interface module 142 that provides an interface between the operating system 140 and one or more application modules 162 and/or libraries 164. The various device drivers 150 interface with and generally control the hardware installed in the computing system 100.
In operation, one or more application modules 162 and/or libraries 164 executing on computer 108 make calls to the system call interface module 142 to execute one or more commands on the computer's processor. The system call interface module 142 invokes the services of the file systems 146 to manage the files required by the command(s) and the process control subsystem 148 to manage the process required by the command(s). The file system(s) 146 and the process control subsystem 148, in turn, invoke the services of the hardware interface module 154 to interface with the system hardware 120. The operating system kernel 144 can be generally considered as one or more software modules that are responsible for performing many operating system functions.
The particular embodiment of operating system 140 is not critical to the subject matter described herein. Operating system 140 may be embodied as a UNIX operating system or any derivative thereof (e.g., Linux, Solaris, etc.), a Windows® brand operating system, or any other operating system.
Computing system 100 further includes a basic input/output system (BIOS) 160. In one embodiment, BIOS 122 may be implemented in flash memory and may comprise a power-on self-test (POST) module for performing system initialization and tests. In operation, when activation of computing system 100 begins processing unit 126 accesses BIOS 122 and shadows the instructions of BIOS 122, such as power-on self-test module, into operating memory. Processor 126 then executes power-on self-test operations to implement POST processing.
In some embodiments, computer system 100 is adapted to implement a secure operating system loader.
In other embodiments the logic instructions may be invoked from another location in the boot vector including, for example, a hook 156 in the operating system 140 or in the boot loader. For example, in some embodiments operating system 140 may represent a system restore operating system which may be used to boot computer system 100 when the primary operating system crashes or the computer system 100 otherwise fails.
In one embodiment, the operations of
Referring to
If, at operation 215, authentication is not required, then control passes to operation 240 and the boot process is continued in accord with normal operations. By contrast, if authentication is required, then control passes to operation 220 and an authentication challenge is presented. In some embodiments the authentication challenge may include requesting a password, personal information, a product key, or another identifier. In other embodiments the authentication challenge may require a user to connect a device such as, e.g., a flash memory that stores an authentication key. The authentication challenge may be presented to a user via the monitor 102. At operation 225 a response is received from the user. For example, a user may enter a response to the authentication challenge via one of the input/output devices 106.
If, at operation 230, the response is valid, then control passes to operation 240 and the boot process is continued in accordance with normal operations. By contrast, if at operation 230 the response is invalid, then control passes to operation 235 and an error routine is invoked.
In some embodiments the error routine may comprise presenting an indication that the authentication response was invalid, e.g., by presenting a response on the monitor 102. In some embodiments, the error routine may also implement steps to secure data stored on the file store 180 of computer system 100. For example, the error routine may block input/output operations directed to file store 100, e.g., by disabling the disk controller(s) 128 that control access to file store 180. Further, in some embodiments the error routine may prevent the complete loading of the operating system 140 in the memory 140 of computer system 100.
Thus, the operations of
As noted above, the methods described herein may be embodied as logic instructions on a computer-readable medium. When executed on a processor, the logic instructions cause a general purpose computing device to be programmed as a special-purpose machine that implements the described methods. The processor, when configured by the logic instructions to execute the methods recited herein, constitutes structure for performing the described methods.
Reference in the specification to “one embodiment” or “an embodiment” means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least an implementation. The appearances of the phrase “in one embodiment” in various places in the specification are not necessarily all referring to the same embodiment.
