System and method for protecting disk drive password when BIOS causes computer to leave suspend state

1. A method comprising:

combining, with a secret to render a first one-time password, a user password for unlocking a hard disk drive (HDD) associated with a computer;

storing the first one-time password and secret with a basic input-output system (BIOS) associated with the computer;

storing the first one-time password and secret on the HDD;

in response to the computer emerging from a suspend state at a first time, at the BIOS combining the first one-time password with the secret to render a second one-time password;

sending the second one-time password to the HDD;

at the HDD, combining the first one-time password with the secret to render a second one-time password; and

only if the second one-time password received by the HDD from BIOS matches the second one-time password generated by the HDD, permitting access to the HDD.

2. The method of claim 1 , comprising storing the second one-time password.

3. The method of claim 2 , comprising, in response to the computer emerging from a suspend state at a second time, at the BIOS combining the second one-time password with the secret to render a third one-time password;

sending the third one-time password to the HDD;

at the HDD, combining the second one-time password with the secret to render a third one-time password; and

only if the third one-time password received by the HDD from BIOS matches the third one-time password generated by the HDD, permitting access to the HDD.

4. The method of claim 3 , wherein the suspend state at the second time is the next temporally successive suspend state after the suspend state at the first time.

5. A computer, comprising:

at least one HDD;

at least one operating system configured to enter a suspend state upon the elapse of a period of no user input;

the operating system configured to exit the suspend state in response to at least one user input signal;

data on the HDD being accessible in response to the operating system exiting the suspend state only upon proper reception by the HDD of a one-time password, the one-time password subsequently not being useful for rendering data on the HDD accessible when the operating system exits subsequent suspend states.

6. The computer of claim 5 , wherein a secret is combined with a HDD password to render a first one-time password that is stored with the secret with a basic input-output system (BIOS) associated with the computer, the first one-time password and secret also being stored on the HDD.

7. The computer of claim 6 , wherein in response to the computer emerging from a suspend state at a first time, the BIOS combines the first one-time password with the secret to render a second one-time password and sends the second one-time password to the HDD.

8. The computer of claim 7 , wherein the HDD combines the first one-time password with the secret to render a second one-time password and only if the second one-time password received by the HDD from BIOS matches the second one-time password generated by the HDD, permits access to data on the HDD.

9. The computer of claim 8 , wherein the second one-time password is stored.

10. The computer of claim 9 , wherein in response to the computer emerging from a suspend state at a second time, the BIOS combines the second one-time password with the secret to render a third one-time password and sends the third one-time password to the HDD.

11. The computer of claim 10 , wherein the HDD combines the second one-time password with the secret to render a third one-time password and only if the third one-time password received by the HDD from BIOS matches the third one-time password generated by the HDD, permits access to data on the HDD.

12. The computer of claim 11 , wherein the suspend state at the second time is the next temporally successive suspend state after the suspend state at the first time.

13. A computer system, comprising:

an operating system programmed with means for entering a suspend state upon at least one predetermined criterion being met;

a hard disk drive (HDD); and

means for permitting access to the HDD when the operating system emerges from a first suspend state but not from a second suspend state after the first suspend state.

14. The system of claim 13 , wherein the means for permitting is a one-time password.

15. The system of claim 14 , wherein a first one-time password is generated when a secret is combined with a HDD password, the first one-time password being stored with the secret with a basic input-output system (BIOS) associated with the computer system, the first one-time password and secret also being stored on the HDD.

16. The system of claim 15 , wherein in response to the computer emerging from a suspend state at a first time, the BIOS combines the first one-time password with the secret to render a second one-time password and sends the second one-time password to the HDD.

17. The system of claim 16 , wherein the HDD combines the first one-time password with the secret to render a second one-time password and only if the second one-time password received by the HDD from BIOS matches the second one-time password generated by the HDD, permits access to data on the HDD.

18. The system of claim 17 , wherein the second one-time password is stored.

19. The system of claim 18 , wherein in response to the computer emerging from a suspend state at a second time, the BIOS combines the second one-time password with the secret to render a third one-time password and sends the third one-time password to the HDD.

20. The system of claim 19 , wherein the HDD combines the second one-time password with the secret to render a third one-time password and only if the third one-time password received by the HDD from BIOS matches the third one-time password generated by the HDD, permits access to data on the HDD.