Password-based media cartridge authentication
View Patent ↗The present invention, in particular embodiments, is directed to methods, apparatuses and systems directed to the authentication of cartridge-based storage media. In a particular embodiment, the present invention provides authentication passwords that are stored on authorized cartridge-based hard disc drives. The authentication password, in one embodiment, is a hash of an interleaved combination of a cartridge-based hard disc drive's serial number and model number strings. Upon insertion of a locked cartridge-based hard disc drive into a carrier, carrier logic obtains the serial number and model number strings of the hard disc drive and generates a password additionally using a base string. The carrier logic then attempts to unlock/authenticate the cartridge-based hard disc drive with the newly-generated password. Authentication occurs with an authorized cartridge as the password contained in the associated hard disc drive will match the password sent by the carrier logic. Unauthorized cartridge passwords are typically generated without knowledge of the base string or algorithm. Due to that, compatibility with associated carriers is prevented.
1. A method comprising:
by a cartridge carrier configured to accept a removable media cartridge, the removable media cartridge comprising a hard disk drive housed within a cartridge shell:
accessing a serial number string and a model number string of the hard disk drive, wherein the serial number string and the model number string each comprise a plurality of characters;
selectively modifying one or both of the serial number string and the model number string to produce a modified serial number string and a modified model number string;
interleaving the modified serial number string and the modified model number string to form an intermediate string;
hashing the intermediate string to form an authentication password;
storing the authentication password within the hard disk drive on computer-readable storage media; and
determining if the hard disk drive is in a locked state; and
if the hard disk drive is in the locked state:
sending an incorrect password to the hard disk drive;
rejecting the removable media cartridge if the hard disk drive unlocks in response to receipt of the incorrect password by the hard disk drive;
sending the authentication password to the hard disk drive; and
rejecting the removable media cartridge if the hard disk drive does not unlock in response to receipt of the authentication password by the hard disk drive.
2. The method as recited in claim 1 further comprising inserting a select set of characters of a base string into the intermediate string.
3. The method as recited in claim 2 wherein the select set of characters of the base string are inserted at predetermined spaces of the intermediate string.
4. The method as recited in claim 1 wherein hashing the intermediate string comprises processing the intermediate string through a feedback XOR function in bit-reverse order to incrementally form the password.
5. The method as recited in claim 4 wherein the feedback XOR function samples the incrementally formed password at select offsets.
6. A cartridge carrier comprising:
a carrier comprising a carrier controller and a mating interface connector wherein the carrier is configured to accept a removable media cartridge and releasably attach the mating interface connector to an interface connector of a hard disc drive contained in the cartridge, the carrier controller comprising:
a microcontroller unit operative, when a cartridge including a hard disk drive is loaded into the carrier, to:
query the hard disk drive for a serial number string and a model number string via an identify command;
determine if the hard disk drive is locked by default; and
if the hard disk drive is locked:
send an incorrect password to the hard disk drive;
reject the cartridge if the hard disk drive unlocks in response to receipt of the incorrect password by the hard disk drive;
generate an authentication password based on interleaving the serial number string and the model number string, both received from the hard disk drive;
send the authentication password to the hard disk drive;
reject the cartridge if the hard disk drive does not unlock in response to receipt of the authentication password by the hard disk drive.
7. The cartridge carrier as recited in claim 6 wherein the microcontroller unit is further operative to reject the cartridge if the hard disk drive is unlocked by default.