Apparatus and system for controlling access to a data storage device
View Patent ↗A data storage device is secured by extracting timing information encoded within a password-related symbol stream received by the storage device and denying access if the timing information is incorrect or the symbol stream is not identical to a valid authentication sequence. In one embodiment, each symbol corresponds to a password, and at least one symbol is transmitted within a specified timing window while at least one other symbol must be transmitted at a random time that varies with each authentication attempt. In certain embodiments, a computing device associated with the data storage device is configured to provide a single password prompt, receive a character sequence corresponding to a plurality of passwords from a user, and communicate an encrypted symbol stream to the storage device with a specified timing pattern imposed thereon.
1. An apparatus for controlling access to data stored on a data bearing medium, the apparatus comprising:
a data bearing medium configured to store data;
a receiving buffer configured to receive a symbol stream;
a timing module configured to provide timing information; and
an authentication module configured to allow access to the data bearing medium if the symbol stream is identical to an authentication sequence and at least one selected symbol within the symbol stream is received within a specified timing window relative to a start symbol selected from the symbol stream.
2. The apparatus of claim 1 , wherein the authentication module is further configured to require re-authentication in response to a timeout event.
3. The apparatus of claim 1 , wherein the symbol stream corresponds to a plurality of passwords.
4. The apparatus of claim 1 , wherein the at least one selected symbol corresponds to a password.
5. The apparatus of claim 1 , wherein the at least one selected symbol corresponds to a password delimiter.
6. The apparatus of claim 1 , wherein the staff symbol corresponds to a selected ordinal position within the symbol stream.
7. The apparatus of claim 1 , farther comprising a decryption module configured to decrypt the symbol stream.
8. The apparatus of claim 7 , wherein the decryption module is further configured to change an encryption key used to decrypt the symbol stream.
9. A system for controlling access to a data storage device, the system comprising:
a password-protected data storage device configured to store data on a data bearing medium; and
the data storage device farther configured to receive a symbol stream and provide access to the data on the data bearing medium if the symbol stream is identical to an authentication sequence and at least one selected symbol within the symbol stream is received within a specified timing window relative to a staff symbol selected from the symbol stream.
10. The system of claim 9 , wherein the data storage device is farther configured to require re-authentication in response to a timeout event.
11. The system of claim 9 , wherein the data storage device is configured to defer notification of successful access to the data storage device for a random interval.