Apparatus and method for assuring secure disposal of a hard disk drive unit
View Patent ↗A hard disk drive unit includes a microprocessor programmed to erase data stored within the drive unit if it is determined that a process potentially leading to a misuse of the data stored within the drive unit, and if secure disposal configuration data stored in nonvolatile storage within the drive indicates that the data is to be erased. Such a process includes initializing the drive unit for operation without providing a password matching a password stored in the drive unit, initializing the drive unit in a system not having CMOS configuration data matching the drive unit, and determining that a failure rate within the drive unit exceeds a threshold level.
1. A method for controlling operation of a hard disk drive unit comprising:
storing secure disposal configuration data, including a user password, a master password, and data indicating a security level, in nonvolatile storage within the hard disk drive unit;
locking the hard disk drive unit, so that data stored within the hard disk drive unit cannot be read before the hard disk drive unit is initialized for operation;
performing a method to initialize the hard disk drive unit for operation, wherein the method to initialize the hard disk drive unit for operation comprises
reading the disposal configuration data and determining a security level from the disposal configuration data,
receiving a user input provided as a password,
determining whether the user input provided as a password matches the stored user password,
unlocking the hard disk drive unit, so that data stored within the hard disk drive unit can be read, in response to determining that the user input provided as a password matches the stored user password,
determining whether the user input provided as a password matches the stored master password,
unlocking the hard disk drive unit, so that data stored within the hard disk drive unit can be read, in response to determining that the user input provided as a password matches the stored master password with a low security level indicated by the data indicating a security level,
providing a menu for erasing data stored on the hard disk drive without unlocking the hard disk drive, in response to determining that the user input provided as a password matches the stored master password with a high security level indicated by the data indicating a security level, and
erasing data stored in the hard disk drive unit in response to determining that the user input provided as a password matches neither the stored user password nor the stored master password; and
following initialization of the hard disk drive, measuring a failure rate of the hard disk drive unit during operation of the hard disk drive unit; and erasing data stored within the hard disk drive unit, in response to determining that the failure rate of the hard disk drive unit exceeds a level indicating that a failure of processes occurring within the disk drive that will soon cause the disposal of the hard disk drive, without allowing the data stored within the hard disk drive unit to be transferred to another storage device before erasing the data stored within the hard disk drive unit.
2. The method of claim 1 for controlling operation of a hard disk drive unit, wherein
the method additionally comprises determining whether a configuration bit enabling automatic data erasure is set, and displaying an error message when the configuration bit is not set, and
data stored within the hard disk drive unit is erased in response to determining that the failure rate of the hard disk drive unit exceeds a predetermined maximum level only if the configuration bit is set.
3. The method of claim 2 for controlling operation of a hard disk drive unit, wherein the failure rate measured is a soft error rate within the hard disk drive unit.
4. The method of claim 1 for controlling operation of a hard disk drive unit, wherein the failure rate measured is a soft error rate within the hard disk drive unit.
5. A method for controlling operation of a hard disk drive unit, wherein the method comprises:
measuring a failure rate of the hard disk drive unit during operation of the hard disk drive unit; and
erasing data stored within the hard disk drive unit in response to determining that the failure rate of the hard disk drive unit exceeds a level indicating that a failure of processes occurring within the disk drive that will soon cause the disposal of the hard disk drive, without allowing the data stored within the hard disk drive unit to be transferred to another storage device before erasing the data stored within the hard disk drive unit.
6. The method of claim 5 , wherein
the method additionally comprises determining whether a configuration bit enabling automatic data erasure is set, and displaying an error message when the configuration bit is not set, and
data stored within the hard disk drive unit is erased in response to determining that the failure rate of the hard disk drive unit exceeds a predetermined maximum level only if the configuration bit is set.
7. The method of claim 6 , wherein the failure rate measured is a soft error rate within the hard disk drive unit.
8. The method of claim 5 , wherein the failure rate measured is a soft error rate within the hard disk drive unit.
9. A hard disk drive unit comprising:
a disk assembly having data stored on the disk assembly, wherein the disk assembly is locked, so that data stored on the disk assembly cannot be read before the hard disk drive unit is initialized for operation;
a drive mechanism operable with the disk assembly for reading and writing data thereon;
nonvolatile storage storing secure disposal configuration data including a user password, a master password, and data indicating a security level; and
a microprocessor programmed to execute a method for initializing the hard disk drive unit for operation, comprising:
reading the disposal configuration data and determining a security level from the disposal configuration data,
receiving a user input provided as a password,
determining whether the user input provided as a password matches the stored user password,
unlocking the hard disk drive unit, so that data stored within the hard disk drive unit can be read, in response to determining that the user input provided as a password matches the stored user password,
determining whether the user input provided as a password matches the stored master password,
unlocking the hard disk drive unit, so that data stored within the hard disk drive unit can be read, in response to determining that the user input provided as a password matches the stored master password with a low security level indicated by the data indicating a security level,
providing a menu for erasing data stored on the hard disk drive without unlocking the hard disk drive, in response to determining that the user input provided as a password matches the stored master password with a high security level indicated by the data indicating a security level, and
erasing data stored in the hard disk drive unit in response to determining that the user input provided as a password matches neither the stored user password nor the stored master password,
wherein the microprocessor is additionally programmed to execute a method following initializing the hard disk drive comprising:
measuring a failure rate of the hard disk drive unit during operation of the hard disk drive unit; and
erasing data stored within the hard disk drive unit in response to determining that the failure rate of the hard disk drive unit exceeds level indicating that a failure of processes occurring within the disk drive that will soon cause the disposal of the hard disk drive, without allowing the data stored within the hard disk drive unit to be transferred to another storage device before erasing the data stored within the hard disk drive unit.
10. The hard disk drive unit of claim 9 , wherein a process for erasing data on the hard disk drive includes setting a nonvolatile bit so that the process of erasing data will continue if electrical power is turned off and then restored to the hard disk drive.
11. The hard disk drive unit of claim 9 , wherein
the method additionally comprises determining whether a configuration bit enabling automatic data erasure is set, and displaying an error message when the configuration bit is not set, and
data stored within the hard disk drive unit is erased in response to determining that the failure rate of the hard disk drive unit exceeds a predetermined maximum level only if the configuration bit is set.
12. The hard disk drive unit of claim 11 , wherein the failure rate measured is a soft error rate within the hard disk drive unit.
13. The hard disk drive unit of claim 9 , wherein the failure rate measured is a soft error rate within the hard disk drive unit.