US4959860A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Power-on password functions for computer system
Assignee: Hewlett Packard Development Co LP
•
Filing: 1989-02-07
•
Granted: 1990-09-25
•
Expires: 2009-02-07
Abstract
Abstract A power-on password security function for a digital computer system allows the system software to distinguish between authorized and unauthorized users. Safeguards are made against corruption of password data which could lead to lock-out authorized users, and redundant checks allow the security function to operate even when first-level checks fail. The battery-powered RAM storage area used to hold the password when the system is turned "off" is protected against being accessible by unauthorized users when the system is turned "on".
Inventors
- 👤 Jeffrey S. Watters
- 👤 Norman P. Brown
- 👤 James H. Nuckols
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-23 17:54
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/70; G06F21/78; G06F21/79
Claims Analysis
Total Claims: 24
Claim 1
Independent Claim
187 words
A method of operating a computer system, comprising the steps of: (a) storing a password and a pair of representations of said password in a non-volatile memory accessible by a CPU of said system; (b) upon power-on initialization of said system, accessing said non-volatile memory to check said password against one of said pair of representations, and, if a match is not found, to check said password against the other of said pair; (c) if a match is found in either of said checks, then writing the good one of the pair to the other or said pair, and comparing with said stored password a password entered by a user from a keyboard of said computer system, and if the passwords are the same, allowing normal operation of said system by said user to proceed, but, if the passwords do not agree, locking said user out of the system; (d) if a match is not found in either one of said checks, then zeroing said stored password and said representations and allowing normal operation of the system to proceed without entry of a password by the user.
Claim 2
Independent Claim
187 words
A method of operating a computer system, comprising the steps of: (a) storing a password and a pair of representations of said password in a non-volatile memory accessible by a CPU of said system; (b) upon power-on initialization of said system, accessing said non-volatile memory to check said password against one of said pair of representations, and, if a match is not found, to check said password against the other of said pair; (c) if a match is found in either of said checks, then writing the good one of the pair to the other or said pair, and comparing with said stored password a password entered by a user from a keyboard of said computer system, and if the passwords are the same, allowing normal operation of said system by said user to proceed, but, if the passwords do not agree, locking said user out of the system; (d) if a match is not found in either one of said checks, then zeroing said stored password and said representations and allowing normal operation of the system to proceed without entry of a password by the user.
Claim 3
Dependent Claim
19 words
A method according to claim 1 wherein said non-volatile memory is a CMOS RAM with a battery power supply.
Claim 4
Dependent Claim
17 words
A method according to claim 1 wherein said pair of representations are checksums of said stored password.
Claim 5
Dependent Claim
27 words
A method according to claim 1 including the step of preventing access to said non-volatile memory by said CPU, after said normal operation is allowed to proceed.
Claim 6
Dependent Claim
26 words
A method according to claim 4 wherein said step of preventing access includes writing to a control element in the I/O address space of said CPU.
Claim 7
Dependent Claim
138 words
A metnod of operating a computer system, comprising the steps of: (a) storing a data value and at least one representation of said data value in a non-volatile memory accessible by a CPU of said system; (b) upon power-on initialization of said system, accessing said non-volatile memory to check said data value against said at least one representation, and, if a match is not found, to again check said data value against said at least one representation; (c) if a match is found in either of said checks, then entering a first type of operation of said computer system including comparing a new data value accessed by said computer system to said stored data value; (d) if a match is not found in either one of said checks, then entering a second type of operation of the system.
Claim 8
Dependent Claim
138 words
A metnod of operating a computer system, comprising the steps of: (a) storing a data value and at least one representation of said data value in a non-volatile memory accessible by a CPU of said system; (b) upon power-on initialization of said system, accessing said non-volatile memory to check said data value against said at least one representation, and, if a match is not found, to again check said data value against said at least one representation; (c) if a match is found in either of said checks, then entering a first type of operation of said computer system including comparing a new data value accessed by said computer system to said stored data value; (d) if a match is not found in either one of said checks, then entering a second type of operation of the system.
Claim 9
Dependent Claim
19 words
A method according to claim 6 wherein said non-volatile memory is a CMOS RAM with a battery power supply.
Claim 10
Dependent Claim
27 words
A method according to claim 6 wherein said data value is a password, and said at least one representation includes a checksum of said stored data value.
Claim 11
Dependent Claim
34 words
A method according to claim 8 wherein if a match is found in either one of said checks, the representation for which a match is found is copied to the other of said representations.
Claim 12
Dependent Claim
16 words
A method according to claim 6 wherein said new data value is entered by a keyboard.
Claim 13
Dependent Claim
32 words
A method according to claim 6 including the step of preventing access by said CPU to said data value and said at least one representation upon entering said first type of operation.
Claim 14
Dependent Claim
24 words
A method according to claim 11 wherein said step of preventing access includes writing to a selected location of I/O space of said CPU.
Claim 15
Dependent Claim
32 words
A method according to claim 11 wherein said step of preventing access includes writing to an I/O port of said system, and said second type of operation includes disabling said I/O port.
Claim 16
Dependent Claim
128 words
A computer having a power-on password function for restricting access, comprising: (a) a CPU executing instructions fetched from a memory address space to perform operations on data stored in said memory address space, the CPU also having an I/O address space; (b) a restricted-access data storage area accessible by the CPU in said I/O address space, said restricted-access area being writable by said CPU, said restricted-access area storing password data used with said power-on password function and storing at least one representation of said password data for checking against said password data upon power-on initialization of the computer; (c) and means for locking out said CPU from access to said data storage area after said power-on initialization by writing to a selected location of said I/O address space.
Claim 17
Dependent Claim
128 words
A computer having a power-on password function for restricting access, comprising: (a) a CPU executing instructions fetched from a memory address space to perform operations on data stored in said memory address space, the CPU also having an I/O address space; (b) a restricted-access data storage area accessible by the CPU in said I/O address space, said restricted-access area being writable by said CPU, said restricted-access area storing password data used with said power-on password function and storing at least one representation of said password data for checking against said password data upon power-on initialization of the computer; (c) and means for locking out said CPU from access to said data storage area after said power-on initialization by writing to a selected location of said I/O address space.
Claim 18
Dependent Claim
23 words
A computer according to claim 14 wherein said means for locking out includes a latch set by writing to a I/O port location.
Claim 19
Dependent Claim
17 words
A computer according to claim 14 wherein said restricted access storage area is a battery-powered CMOS RAM.
Claim 20
Dependent Claim
39 words
A computer according to claim 14 including keyboard means for entering a password for checking against said password data, and means for halting computer operation if the password entered by the keyboard does not check with said password data.
Claim 21
Dependent Claim
25 words
A computer according to claim 17 including means for preventing said halting if said at least one representation does not check against said password data.
Claim 22
Dependent Claim
104 words
A computer having a power-on function for initialization, comprising: (a) a CPU executing instructions fetched from a memory address space to perform operations on data stored in said memory address space, the CPU also having an I/O address space; (b) a restricted-access data storage area accessible by the CPU in said I/O address space, said restricted-access area being writable by said CPU, said restricted-access area storing data used upon power-on initialization of the computer; (c) and means for locking out said CPU from access to said data storage area after said power-on initialization by writing to a selected location of said I/O address space.
Claim 23
Dependent Claim
104 words
A computer having a power-on function for initialization, comprising: (a) a CPU executing instructions fetched from a memory address space to perform operations on data stored in said memory address space, the CPU also having an I/O address space; (b) a restricted-access data storage area accessible by the CPU in said I/O address space, said restricted-access area being writable by said CPU, said restricted-access area storing data used upon power-on initialization of the computer; (c) and means for locking out said CPU from access to said data storage area after said power-on initialization by writing to a selected location of said I/O address space.
Claim 24
Dependent Claim
23 words
A computer according to claim 19 wherein said means for locking out includes a latch set by writing to a I/O port location.
References Cited (Backward Citations)
US3890601A
Cited
US4800590A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1993-09-24 | 1994-03-26 | 1994-09-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1997-09-24 | 1998-03-26 | 1998-09-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2001-09-24 | 2002-03-26 | 2002-09-25 | $7700.00 | Window Closed / Lapsed |