Read/write protect scheme for a disk cartridge and drive

<u>BACKGROUND</u>

Field of the Invention

The present invention relates data storage devices, or disk drives, of the type that receive a removable disk cartridge. More particularly, the present invention relates to a read/write protect method for inhibiting unauthorized and/or inadvertent reading from, and writing to, a storage medium within a disk cartridge.

Description of the Prior Art

Removable disk cartridges for storing digital electronic information typically comprise an outer casing or shell that houses a rotatable storage medium, or disk, upon which electronic information can be stored. The cartridge shell often comprises upper and lower halves that are joined together to house the disk. The disk is mounted on a hub that rotates freely within the cartridge. When the cartridge is inserted into a disk drive, a spindle motor in the drive engages with the disk hub in order to rotate the disk within the cartridge. The outer shell of the cartridge typically has some form of opening near its forward edge to provide the read/write heads of the drive with access to the recording surfaces of the disk. A shutter or door mechanism is often provided to cover the opening when the cartridge is not in use to prevent dust or other contaminants from entering the cartridge and settling on the recording surface of the disk.

Conventional 3.5" floppy disks have a mechanical slider mounted in a corner of the cartridge housing that can be moved from one position to another to indicate whether the floppy disk is, or is not, write-protected. An optical or mechanical switch in a floppy disk drive detects the position of the mechanical slider on the cartridge to determine whether the cartridge is write-protected. If so, the disk drive inhibits writing of information to the storage medium within the floppy disk cartridge. Unfortunately, the mechanical slider on the disk cartridge and the associated mechanical or optical switches in the disk drive increase the costs of the cartridge and drive. Moreover, there is no way to prevent a user from changing the write-protect status of the cartridge. All a user has to do is change the position of the mechanical slider. Another disadvantage of conventional 3.5" floppy disks and their associated drives is that there is no simple way to provide read protection in addition to the write protection. Data encryption can be applied to the recorded information, but data encryption techniques are highly complex and costly to implement.

Saldanha et al., U.S. Patent No. 5,265,230, and Kulakowski et al., U.S. Patent No. 5,132,954, disclose data storage systems in which at least a portion of a storage medium can be designated as "read only" by storing a unique data pattern in that portion of the storage medium. However, once a portion of the disk is designated as "read only", the "read only" state is permanent; a user cannot change the state of the "read only" portion of the storage medium.

Horiguchi, U.S. Patent No. 5,311,498, discloses a method for password protecting one or more data blocks of an optical card. As Horiguchi describes, optical cards and disks are often used to store important information that may need to be protected from unauthorized reading. According to Horiguchi's data security method, at the time the important information is recorded on an optical card or disk, a password is stored in any data blocks that are to be protected from unauthorized reading. Only users who know the stored password can read the information in those data blocks. According to Horiguchi, the password protection is permanent. The password protection cannot be removed, even by a user that knows the current password. The current password also cannot be changed. These limitations are appropriate in Horiguchi's system, because the goal is data security. However, these limitations would be disadvantageous and unworkable in a more flexible read/write protection scheme of the type contemplated herein.

Patent Abstracts of Japan, vol. 13 no. 511 (P-961) and JP-A-01 208762 disclose a read/write protect control system, for controlling the read/write protect of a direct read after write (DRAW) type recording medium. These documents suggest providing on the recording medium protect areas having information indicating the permission of access to the recording medium. Access to the data is controlled according to the number of bits recorded in the protect areas; this number of bits corresponds may be even or odd, and this corresponds to two states. Reading from the medium and recording to the medium is controlled according to these states.

US-A-4 864 542 discloses a portable memory cartridge, having a mass memory and a password memory for storing a flag indicating the inhibition of read/write access to the mass memory, and a password memory for storing a particular authorised password. The cartridge is provided with a comparator for comparing an input password with the particular password set previously. A control signal required for accessing the mass memory is provided when the comparison results in coincidence. In this document, the password memory is initially loaded with a password and a flag by a particular control terminal authorised to perform password writing operation.

US-A-5 375 243, which is believed to be the closest prior art to the invention, discloses a method for preventing any access to a fixed hard drive. In this document, the drive may be in three protection modes; in the first one, access to the drive is free; in the second one, access to the drive is granted only upon entry of one user password; in the third one, access to the drive is granted upon entry of one user password, or upon entry of a factory password.

The protection mode is determined according to the contents of the two halves of a storage buffer of the firmware of the drive; when the buffer is filled with zeros, the drive is in the first protection mode. When the two halves of the buffer are filled with the user password, the drive is in the second protection mode. When the first half of the buffer is filled with the user password, and the second half of the buffer is filled with the factory password, the drive is in the third protection mode. Access to the drive is checked at boot of the hard drive only.

As the foregoing illustrates, there is a need for an improved read/write protection method for inhibiting unauthorized or inadvertent access to the storage medium of a disk cartridge. Preferably, the method would allow both write and read protection to be applied to the storage medium and would allow a user to change the protection mode of the storage medium, if desired. It would also be advantageous if a password could be used, when desired, to prevent unauthorized changes to the protection mode of the storage medium. Preferably, the method would not require additional mechanical or electrical components, nor any physical interaction with the housing of a disk cartridge. The present invention satisfies these needs.

The present invention is directed to a method and a cartridge as set out in the appended claims.

The foregoing and other objects, features and advantages of the invention will become evident hereinafter.

<u>BRIEF DESCRIPTION OF THE DRAWINGS</u>

The foregoing summary, as well as the following detailed description of the preferred embodiment, is better understood when read in conjunction with the appended drawings. For the purpose of illustrating the invention, there is shown in the drawings an embodiment that is presently preferred, it being understood, however, that the invention is not limited to the specific methods and instrumentalities disclosed. In the drawings: <ul id="ul0001" list-style="none" compact="compact"><li>Figure 1 is a perspective view of a data storage device, or disk drive, in which the present invention is embodied;</li><li>Figure 2 is a perspective view of a disk cartridge for use with the disk drive of the Figure 1;</li><li>Figure 3 is a bottom view of the disk cartridge of Figure 2;</li><li>Figure 4 shows a disk-shaped storage medium in accordance with a preferred embodiment of the present invention that may be contained within the disk cartridge of Figures 2 and 3;</li><li>Figure 5 is a block diagram illustrating further details of the disk drive of Figure 1 in accordance with a preferred embodiment of the present invention; and</li><li>Figure 6 is a flow diagram illustrating both the operation of the disk drive of Figure 5 and a preferred embodiment of a method of the present invention.</li></ul>

<u>DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS</u>

Referring to the drawings wherein like numerals indicate like elements throughout, there is shown in Figure 1 a data storage device, or disk drive 40, in which the present invention may be employed. As shown, the disk drive 40 comprises an outer housing 42 having top and bottom covers 44, 46 and a front panel 48. A disk cartridge can be inserted into the disk drive 40 through a horizontal opening 49 in the front panel 48 of the disk drive 40. A user-interface of the disk drive 40 comprises an eject button 51 for automatically ejecting a disk cartridge from the disk drive 40, and a plurality of drive status indicators 53 for indicating that the drive has power and for indicating that the drive is accessing a storage medium within the disk cartridge. As used herein and in the claims, the terms "access" and "accessing" means either writing to or reading from a storage medium, or both. In the present embodiment, the disk drive 40 is intended to interface with a host computer (not shown) and can be employed as a stand-alone unit, or alternatively, can be installed in an internal bay (not shown) of the host computer (not shown).

Figures 2 and 3 show an exemplary disk cartridge 10 that can be inserted into the disk drive 40 of Figure 1. As shown, the disk cartridge 10 comprises an outer casing 12 having upper and lower shells 22, 24 that mate to form the casing. A disk-shaped storage medium described hereinafter is affixed to a hub 16 that is rotatably mounted within the casing 12. An opening 21 on the bottom shell 24 of the casing 12 provides access to the disk hub 16. A head access opening 30 in the front peripheral edge 20 of the disk cartridge 10 provides access to the surfaces of the storage medium by the read/write heads of the disk drive 40. A shutter 18 (not shown in Fig. 2) is provided on the front peripheral edge 20 of the disk cartridge 10 to cover the head access opening 30 when the cartridge 10 is not in use. When the cartridge is inserted into the disk drive 40, the shutter 18 moves to the side exposing the head access opening 30 and thereby providing the read/write heads of the drive with access to the storage medium within the disk cartridge.

Figure 4 shows a disk-shaped storage medium 60 in accordance with a preferred embodiment of the present invention. In the preferred embodiment, the storage medium 60 comprises a disk having a magnetic coating for writing and reading information to and from the storage medium 60. Preferably, information can be written on both sides of the storage medium 60. While magnetic media is preferred, other media can be employed, and the present invention is by no means limited to use of magnetic storage media. For example, the storage medium 60 can be a rewritable optical storage medium or a magneto-optical storage medium.

In the preferred embodiment, the storage medium has a band of approximately 1800 concentric data tracks 62 which can be written to, and read from, by a user's host computer. Other track densities can be employed, however. In addition to the data tracks 62, there are two tracks 64, 66 on each side of the storage medium (only one side shown in Figure 4) that contain special information pertaining to the defect characteristics of that particular storage medium. The information contained on these four tracks (two per side) is identical and, in fact, is repeated in two separate locations on each track 64, 66. This redundancy is necessary to ensure that the information is always available, even if some areas of the storage medium become damaged and unreadable. On each side of the storage medium 60, one of these special information tracks, i.e., track 64, is located at the outside of the band of data tracks 62, and the other special information track 66 is located to the inside of the band of data tracks 62. None of the four special information tracks 64, 66 can be accessed by a host computer (not shown) to which the disk drive 40 is interfaced. Only the disk drive 40, and in particular, a microprocessor within the disk drive 40, can access the information written on these tracks 64, 66.

According to the present invention, a first predetermined location is provided on the storage medium 60 for writing, or storing, a code having a value indicative of a protection mode of the storage medium. A second predetermined location is provided on the storage medium 60 for storing, if desired, a password associated with the code. In the present embodiment, the storage medium 60 can be subjected to one of four different protection modes. Each protection mode specifies a different way in which access to the data tracks 62 of the storage medium 60, i.e., writing and reading of information to and from the data tracks 62, may be inhibited. In the present embodiment, the four possible protection modes of a storage medium are: <ul id="ul0002" list-style="none"><li>1) <u>Unlock Mode</u>: neither writing, nor reading of information to and from the storage medium is inhibited; the storage medium has no read or write protection. A password is not required to change from this mode.</li><li>2) <u>Write Protect Mode</u>: writing of information to the storage medium is inhibited, i.e., the storage medium is write-protected. A password is not required to change from this mode.</li><li>3) <u>Password Write Protect Mode</u>: writing of information to the storage medium is inhibited, i.e., the storage medium is write-protected. A password is required to change from this mode.</li><li>4) <u>Read/Write Protect Mode</u>: both writing and reading of information to and from the storage medium are inhibited, i.e., the storage medium is both write- and read-protected. A password is required to change from this mode.</li></ul>

In the present embodiment, the following code values are assigned to represent each of these protection modes: <tables id="tabl0001" num="0001"><table frame="all"><tgroup cols="2" colsep="1" rowsep="1"><colspec colnum="1" colname="col1" colwidth="78.75mm" /><colspec colnum="2" colname="col2" colwidth="78.75mm" /><thead valign="top"><row rowsep="1"><entry namest="col1" nameend="col1" align="center">CODE VALUE (binary)</entry><entry namest="col2" nameend="col2" align="center">PROTECTION MODE</entry></row></thead><tbody valign="top"><row><entry namest="col1" nameend="col1" align="center">0000 0000</entry><entry namest="col2" nameend="col2" align="left">Unlock Mode</entry></row><row><entry namest="col1" nameend="col1" align="center">0000 0010</entry><entry namest="col2" nameend="col2" align="left">Write Protect Mode</entry></row><row><entry namest="col1" nameend="col1" align="center">0000 0011</entry><entry namest="col2" nameend="col2" align="left">Password Write Protect Mode</entry></row><row rowsep="1"><entry namest="col1" nameend="col1" align="center">0000 0101</entry><entry namest="col2" nameend="col2" align="left">Read/Write Protect Mode</entry></row></tbody></tgroup></table></tables>

As described hereinafter, in addition to the four protection modes that can be applied to the storage medium, a "Temporary Unlock Mode", or command, can be applied to the disk drive 40 to effectively override the protection mode of the storage medium specified by the code written in the first predetermined location on the storage medium.

Referring still to Figure 4, in accordance with the preferred embodiment of the present invention, at least the outer special information track 64 on at least one side of the storage medium includes at least one write/read protect sector 68 that comprises an ID field 70 and a data field 72. The ID field 70 is used to identify the write/read protect sector 68 and to distinguish that sector from other sectors in the special information track 64. In the preferred embodiment, the data field 72 comprises 512 bytes, however, in other embodiments, the data field 72 may comprise a different number of bytes.

A first portion of the data field 72 of the write/read protect sector 68 is used for writing, or storing, one of the aforementioned codes on the storage medium to indicate the current protection mode of the storage medium 60. This first portion of the write/read protect sector 68 defines the first predetermined location referred to above and in the claims. A second portion of the data field 72 of the write/read protect sector 68 is used for writing, or storing, a password on the storage medium 60. This second portion of the write/read protect sector 68 defines the second pre-determined location referred to above and in the claims. Preferably, the content and arrangement of the data field 72 is as follows: <tables id="tabl0002" num="0002"><table frame="all"><tgroup cols="2" colsep="1" rowsep="1"><colspec colnum="1" colname="col1" colwidth="78.75mm" /><colspec colnum="2" colname="col2" colwidth="78.75mm" /><thead valign="top"><row rowsep="1"><entry namest="col1" nameend="col1" align="center">BYTE #</entry><entry namest="col2" nameend="col2" align="center">Description</entry></row></thead><tbody valign="top"><row><entry namest="col1" nameend="col1" align="center">0</entry><entry namest="col2" nameend="col2" align="left">Vendor Unique</entry></row><row><entry namest="col1" nameend="col1" align="center">1</entry><entry namest="col2" nameend="col2" align="left">Code indicating current protection mode of storage medium</entry></row><row><entry namest="col1" nameend="col1" align="center">2</entry><entry namest="col2" nameend="col2" align="left">Password Length</entry></row><row><entry namest="col1" nameend="col1" align="center">3-34</entry><entry namest="col2" nameend="col2" align="left">Password in ASCII Characters</entry></row><row rowsep="1"><entry namest="col1" nameend="col1" align="center">35-511</entry><entry namest="col2" nameend="col2" align="left">Unused</entry></row></tbody></tgroup></table></tables> As shown, byte "0" of the data field 72 is used to provide a unique identifier of the vendor of the storage medium 60 and/or disk cartridge 10. Byte "1" is used to store one of the aforementioned codes in order to indicate the current protection mode applied to the storage medium 60. Bytes "3" through "34" hold the ASCII character representation of the password, if any, currently in effect. Byte "2" specifies the password length, in bytes. The password is used to prevent unauthorized changing of the protection mode specified by the code stored in byte "1", i.e., to prevent a new code from being written in place of the current code to which the password is associated. Finally, bytes "35" through "511" of the write/read protect sector 68 are unused in connection with the read/write protect scheme of the present invention.

For purposes of redundancy, like the defect information described above, the write/read protect sector 68 is duplicated twice in each of the special information tracks 64, 66 on each side of the storage medium 60. This provides a total of eight identical write/read protect sectors 68 on the storage medium. The disk drive 40 can access any one of these eight duplicate write/read protect sectors 68 to determine the current protection mode of the storage medium, as well as to determined the current password, if any, associated with that protection mode. This redundancy is necessary to ensure that the code and password of the current protection mode can be ascertained, even if some areas of the storage medium 60 become damaged and unreadable. Since the duplicate write/read protect sectors 68 are provided in respective ones of the special information tracks 64, 66, those sectors, like the remainder of each special information track 64, 66 are not accessible by the host computer to which the disk drive 40 is interfaced. Only the disk drive 40 can access the write/read protect sectors on the storage medium.

Figure 5 is a block diagram of the disk drive 40 in accordance with a preferred embodiment of the present invention. As shown, the disk drive 40 comprises a spindle motor 74, motor controller/driver 76, read/write heads 78, read/write preamp 80, read channel 84, actuator 82, actuator servo/driver 86, digital controller 88, random-access memory buffer 90, microprocessor 92 and user interface components 94, which include the status indicators 53 and ejection button 51 on the front panel 48 of the disk drive 40. The disk drive 40 connects to a user's host computer 96 through an interface cable 98.

The motor controller/driver 76 and spindle motor 74 rotate the storage medium 60 at a constant speed, allowing the read/write heads 78 to "fly" close to the rotating storage medium 60 for a stable recording environment. The motor controller/driver 76 can be implemented, at least in part, with the 8902 series motor controller/driver available from Allegro Microsystems, Inc., 115 Northeast Cutoff, Worcester, Massachusetts 01615.

The read/write preamp 80 amplifies the signals picked up by the heads 78 during read operations and switches current in the heads 78 during write operations. The read channel 84 shapes the pulses from the preamp, qualifies the peaks that represent the user data and special information, and generates a clock that is synchronous with the RLL (run length limited) data coming off the storage medium. The read channel 84 may be implemented, at least in part, with the AD899 series read channel electronics available from Analog Devices, One Technology Way, Norwood, MA 01062.

Preferably, the actuator 82 comprises a linear actuator, although the present invention is by no means limited thereto. For example, a radial arm voice coil actuator can also be employed. Co-pending application Serial No. 08/324,599, filed October 18, 1994, entitled "Actuator for Data Storage Device", which is hereby incorporated by reference, describes a suitable linear actuator that can be employed in the disk drive 40.

The actuator servo/driver 86 demodulates servo information recorded on the storage medium and compensates to position the read/write heads 78 precisely on a selected track of the data storage medium 60. The actuator servo/driver 86 can be implemented, at least in part, with the 8932-A series driver available from Allegro Microsystems, Inc., 115 Northeast Cutoff, Worcester, Massachusetts 01615.

The digital controller 88 decodes and error checks the data from the read channel 84 and stores the data temporarily in a buffer RAM. The controller 88 also makes sure that data is written to, or read from, the correct track and sector of the storage medium 60. The controller 88, when directed by the microprocessor 92, sends data from the buffer 90 to the host computer 96, or from the host computer 96 to the buffer 90, in accordance with a SCSI protocol. The digital controller 88 also generates servo control signals. The digital controller 88 can be implemented using the AIC-7110 High-Performance Integrated SCSI Mass Storage Controller available from Adaptec, 691 South Milpitas Blvd., Milpitas, CA 95035.

The microprocessor 92 controls and monitors all functions in the drive. The program code is stored in a Read-Only Memory ("ROM"), while a RAM is used for storing variables, flags, status information, etc. As described hereinafter in greater detail, the microprocessor 92 is responsible, in large part, for performing the steps of the method of the present invention. A significant function of the microprocessor 92 is to control access, i.e. reading and writing, to the storage medium 60 in accordance with the protection mode indicated by the code stored, or written, in the first predetermined location on the storage medium, i.e., the code written in byte "1" of the data field 72 of each of the eight duplicate write/read protect sectors 68. Any suitable microprocessor can be employed, such as, for example, a Motorola 68HC16 microprocessor or an Intel 8032 microprocessor.

According to the present invention, the current protection mode of a storage medium 60 can be selected by a user of the host computer 96 at any time and can likewise be changed by the user at any time. Changing or setting the protection mode of a storage medium in accordance with the present invention is achieved by sending an appropriate "protection mode command" from the host computer 96 to the disk drive 40. In the preferred embodiment, the protection mode command has the following content and arrangement: <tables id="tabl0003" num="0003"><table frame="all"><tgroup cols="9" colsep="1" rowsep="1"><colspec colnum="1" colname="col1" colwidth="17.50mm" /><colspec colnum="2" colname="col2" colwidth="17.50mm" /><colspec colnum="3" colname="col3" colwidth="17.50mm" /><colspec colnum="4" colname="col4" colwidth="17.50mm" /><colspec colnum="5" colname="col5" colwidth="17.50mm" /><colspec colnum="6" colname="col6" colwidth="17.50mm" /><colspec colnum="7" colname="col7" colwidth="17.50mm" /><colspec colnum="8" colname="col8" colwidth="17.50mm" /><colspec colnum="9" colname="col9" colwidth="17.50mm" /><thead valign="top"><row><entry namest="col1" nameend="col1" /><entry namest="col2" nameend="col9" align="center">Bit</entry></row><row rowsep="1"><entry namest="col1" nameend="col1" align="center">Byte</entry><entry namest="col2" nameend="col2" align="center">7</entry><entry namest="col3" nameend="col3" align="center">6</entry><entry namest="col4" nameend="col4" align="center">5</entry><entry namest="col5" nameend="col5" align="center">4</entry><entry namest="col6" nameend="col6" align="center">3</entry><entry namest="col7" nameend="col7" align="center">2</entry><entry namest="col8" nameend="col8" align="center">1</entry><entry namest="col9" nameend="col9" align="center">0</entry></row></thead><tbody valign="top"><row><entry namest="col1" nameend="col1" align="center">0</entry><entry namest="col2" nameend="col9" align="center">Operation Code (0Ch)</entry></row><row><entry namest="col1" nameend="col1" align="center">1</entry><entry namest="col2" nameend="col9" align="center">Protection Mode Code</entry></row><row><entry namest="col1" nameend="col1" align="center">2-3</entry><entry namest="col2" nameend="col9" align="center">Reserved</entry></row><row><entry namest="col1" nameend="col1" align="center">4</entry><entry namest="col2" nameend="col9" align="center">Password Length (0-32 characters)</entry></row><row rowsep="1"><entry namest="col1" nameend="col1" align="center">5</entry><entry namest="col2" nameend="col9" align="center">Control Byte (00h)</entry></row></tbody></tgroup></table></tables> The protection mode command comprises six bytes. The Operation Code ("OpCode") of the protection mode command occupies the first byte, i.e., byte "0", of the command. In the present embodiment, the OpCode for the protection mode command is 0C hex. Byte "1" of the command contains the code value indicative of the desired protection mode. Bytes "2" and "3" are reserved. Byte "5" is a control byte that, in the present embodiment, has a value of 00h.

Byte "4" of the protection mode command specifies the length, in bytes, of any password sent by the host computer 96 immediately following the protection mode command. The maximum length of a password is 32 bytes. Any byte value from 00h to FFh is acceptable as a valid password character. When a protection mode that uses password protection is invoked, the password bytes are written into the second pre-determined location on the storage medium, i.e., bytes 3-34 of the data field 72 of each of the duplicate write/read protect sectors 68. The password remains in effect until the protection mode is changed -- using the protection mode command to invoke a different protection mode -- or until the storage medium is reformatted. When changing from a protection mode that has password protection, the password sent with the protection mode command must identically match the password written in the second predetermined location on the storage medium. Otherwise, the protection mode command attempting to change the current protection mode will be rejected. Formatting the storage medium 60 allows the media to be recovered if the password is forgotten, but any stored data will be lost. A storage medium that is in the Read/Write Protect Mode will require that the format overwrite every host accessible sector on the storage medium before removing or allowing any change to that protection mode.

In the preferred embodiment, the protection mode applies to the entire volume of information in the data tracks 62 on both sides of the storage medium. In other embodiments, however, provision may be made for protecting individual sectors or groups of sectors anywhere on the storage medium. Such an embodiment would require a separate code and password for each such individual sector or group of sectors.

As described hereinafter, the microprocessor 92 (Fig. 5) is responsible for executing the protection mode command and for ensuring that the code value indicative of a desired protection mode and any password associated therewith are written to the storage medium. When a protection mode command attempts to change from a protection mode that is password protected, the microprocessor 92 compares the password sent from the host computer 96 with the password written in the duplicate write/read protect sectors 68 on the storage medium. If the password sent from the host computer 96 does not match the password written on the storage medium 60, the microprocessor will prevent any change in the protection mode. The microprocessor 92 is also responsible for inhibiting writing of information from the host computer to the data tracks 62 of the storage medium 60 when the current protection mode of the storage medium, as indicated by the code value written in the first predetermined location thereof, is either the Write-Protect Mode, Password Write Protect Mode or Read/Write Protect Mode. When the current protection mode is the Read/Write Protect Mode, the microprocessor 92 will also inhibit reading of information from the data storage medium.

The protection mode command described above can also be used to put the disk drive 40 in a Temporary Unlock Mode. In the present embodiment, this is accomplished by sending the protection mode command with a code value of "0000 1xxx", where "x" indicates either a "1" or "0". Upon receiving a protection mode command having this code value, the microprocessor 92 will temporarily disable all read and write protection for the storage medium until either the current disk cartridge is removed from the disk drive, or power to the drive is turned off. The Temporary Unlock Mode does not change or affect the code value and password, if any, stored in the first and second predetermined locations on the storage medium. Removal of a disk cartridge after entering the Temporary Unlock Mode will leave the protection mode of the cartridge intact, and that protection mode will be in effect the next time the cartridge is inserted into the drive. When attempting to enter the Temporary Unlock Mode from a protection mode that is password protected, the protection mode command sent by the host computer 96 must, as for any change from a password-protected mode, be followed by the identical password stored in the second predetermined location on the storage medium.

Figure 6 is flow diagram illustrating both the operation of the disk drive 40 of Figure 5, particularly microprocessor 92, and a preferred embodiment of the method of the present invention. Upon power-up of the disk drive 40, the microprocessor 92 waits at step 102 until the insertion of a disk cartridge into the disk drive 40 is detected. Preferably, detection of a disk cartridge is achieved in accordance with the methods and apparatus described in co-pending application Serial No. 08/337,678, filed November 10, 1994, entitled "Disk Cartridge Detection Methods and Apparatus". When the insertion of a disk cartridge into the disk drive 40 is detected, control passes to step 104.

At step 104, the microprocessor 92 reads the code value and password, if any, stored in the first and second predetermined locations on the storage medium 60, i.e., bytes 1 and 3-34 of the data field 72 of at least one of the eight duplicate write/read protect sectors 68. At this point, the code value read from the storage medium defines a first, or initial code, and indicates the first, or initial, protection mode of the storage device.

Next, at step 106, the microprocessor 92 examines the first code to determine whether the storage medium is read protected, which in the present embodiment, only applies when the protection mode of the storage medium is the Read/Write Protect Mode. If the first code indicates that the storage medium is read protected, i.e., the storage medium is in the Read/Write Protect Mode, then control passes to step 108 where the microprocessor 92 sets an internal "read protect" flag to indicate that the storage medium is read protected. The microprocessor 92 thereafter inhibits any attempt by the user's host computer to read information from the storage medium 60. Any such attempt results in an error message being sent to the host computer.

If, on the other hand, the microprocessor 92 determines in step 106 that the storage medium is not read protected, control passes directly to step 110. At step 110, the microprocessor 92 examines the first code to determine whether the storage medium is any of the modes that provide write protection, i.e., the Write Protect Mode, the Password Write Protect Mode or the Read/Write Protect Mode. If the first code represents either of these modes, then control passes to step 112 where the microprocessor 92 sets an internal "write protect" flag to indicate that the storage medium 60 is write protected. The microprocessor 92 thereafter inhibits any attempt by the user's host computer to write information to the storage medium 60. Any such attempt results in an error message being sent to the host computer.

If, on the other hand, the microprocessor 92 determines in step 110 that the storage medium 60 is not write protected, then control passes directly to step 114. At step 114, the microprocessor 92 determines whether the current disk cartridge has been removed from the disk drive 40. If not, control passes to step 118 where the microprocessor 92 inquires whether a protection mode command has been received from the host computer 96. If not, control passes back to step 114. Normal operation of the disk drive 40 can then proceed. The microprocessor periodically will perform steps 114 and 118. Normal operation will continue until either the current disk cartridge is removed (step 114), or a protection mode command is received from the host computer requesting a change in the protection mode of the storage medium (step 118).

If the current disk cartridge is removed from the disk drive 40, control passes to step 116 where the read and write protect flags are cleared. Control then passes back to step 102 where the microprocessor waits for a new disk cartridge to be inserted. Upon insertion of a new disk cartridge, control will once again pass to step 104, and the microprocessor 92 will operate on the new disk cartridge in the manner described above.

If, however, the current disk cartridge is not removed, but a protection mode command is received from the host computer 96, control will pass from step 118 to step 120. At step 120, the microprocessor 92 determines whether a password should have been sent with the protection mode command either (i) because the new protection mode to be established is one of the password-protected modes, e.g., the Password Write Protect Mode or the Read/Write Protect Mode, or (ii) because the current protection mode is one of the password protected modes and thus requires a password to change from that mode. If, for either of these reasons, the new protection mode does require a password, control passes to step 122 where the microprocessor determines whether a password was sent immediately following the protection mode command. If not, control passes to step 134 where an error is reported. Control will then pass from step 134 back to step 114.

If at step 122 it is determined that the required password was sent, then control passes to step 124. Control will also pass to step 124 if it is determined at step 120 that a password is not required. At this point, the new code value in the protection mode command defines a second code, and the new protection mode specified by that second code defines a second protection mode.

At step 124, the microprocessor 92 examines the first code, which is still stored in the first predetermined location on the storage medium, to determine if the first, or current, protection mode requires a password before a change in protection mode can be effected. If a password is required to change from the current protection mode, control passes to step 126 where the microprocessor compares the password that accompanied the protection mode command with the current password read from the second predetermined location on the storage medium. If these passwords do not match identically, then control passes from step 126 to step 134 where an appropriate error is reported. Control then passes from step 134 back to step 114.

If the microprocessor 92 determines at step 126 that the two passwords do match, or if the microprocessor 92 determines at step 124 that there is no password associated with the current protection mode (i.e., the current protection mode is either the Unlock Mode or the Write Protect Mode), then control passes to step 128.

At step 128, the microprocessor 92 determines whether the second code transmitted in the protection mode command represents the Temporary Unlock Mode. If the second code does not represent the Temporary Unlock Mode, then control passes to step 129. At step 129, the microprocessor 92 examines the new, or second code, is the code for the Unlock Mode. If so, control passes to step 131 where the read protect and write protect flags are cleared in accordance with the Unlock Mode. Control then passes to step 140 where the new, or second code, representing the Unlock Mode is written to the first predetermined location on the storage medium in place of the first code. Information may also be stored in the second predetermined location to indicate that no password is provided with this protection mode. At this point, the change from the first protection mode to the second protection mode has been effected. Control will then pass back to step 114.

If at step 129, it is determined that the second code is not the code for the Unlock Mode, then control will pass to step 130. At step 130, the microprocessor determines whether the second code is the code for either the Write Protect Mode or the Password Write Protect Mode. If so, control passes to step 138 where the write protect flag is set. Next, at step 140, the second code and password, if any, are written to the first and second predetermined locations on the storage medium, respectively, in place of the first code and its associated password, if any. At this point, the change from the first protection mode to the new, or second protection mode has been effected. Control will then pass back to step 114.

If, however, it is determined at step 130 that the second code does not represent either the Write Protect Mode or the Password Write Protect Mode, then control passes to step 132 where it is determined whether the second code has the value representing the Read/Write Protect Mode. If so, control will pass successively to steps 136 and 138 where both the read and write protect flags will be set. Control will then pass to step 140 where the new, or second code, and any associated password are written to the first and second predetermined locations on the storage medium, respectively, in place of the first code and its associated password, if any. At this point, the change from the first protection mode to the second protection mode has been effected. Control will then pass back to step 114.

If it is determined at step 132 that the second code does not represent the Read/Write Protect Mode, then the disk drive assumes that an erroneous code value was sent. Control will therefore pass to step 134 where an error will be reported to the host computer. After reporting the error, control will pass back to step 114. No change in the protection mode of the storage medium will have been effected.

Finally, if back at step 128, it is determined that the code value of the protection mode command (i.e., the new or second code) is the code for the Temporary Unlock Command, control passes to step 142 where both the read and write protect flags are reset. This effectively unlocks any read or write protection afforded by the current protection mode. Control will then pass back to step 114. Step 140 will have been by-passed, and therefore, the first code and its associated password, if any, are not overwritten or destroyed. Writing and reading of information to and from the storage medium will, however, no longer be inhibited. The disk drive 40 will operate in this Temporary Unlock Mode until either the disk cartridge is removed, or another protection mode command is sent to again change or reestablish the first, or current protection mode within the drive.

As the foregoing illustrates, the present invention is directed to a method for inhibiting the writing and reading of information to and from a storage medium without the need for mechanical, electrical or other types of switches used in prior art write protect schemes. Additionally, both read and write protection may be password protected to prevent unauthorized changes in protection mode. Since the write and read protection functions, including password comparison are accomplished by the microprocessor inside the drive, rather than by the operating system of a host computer, they are more resistant to tampering.