Method for restoring IM (instant message) deleted information

A technology of recovery method and acquisition method, which is applied in the field of recovery of IM deleted information, can solve problems such as unsatisfactory recovery effect, and achieve the effect of high recovery accuracy and comprehensive recovery information

Active Publication Date: 2013-01-30
XIAMEN MEIYA PICO INFORMATION
View PDF5 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Since, in many cases, after the IM information is deleted, the data does not flow into the file residual area or free space, so the recovery effect is often unsatisfactory using traditional recovery methods

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for restoring IM (instant message) deleted information
  • Method for restoring IM (instant message) deleted information
  • Method for restoring IM (instant message) deleted information

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0035] Such as Figure 1 to Figure 8 Shown, a kind of recovery method of IM deletion information of the present invention comprises the acquisition of unused space data and unused space restores deleted data, wherein:

[0036] The deleted IM information data mainly flows into three places of the compound file: free sector, file residual area, and sector without directory structure; the corresponding explanation is shown in the following table:

[0037]

[0038] The acquisition of the unused space data is realized by the following steps:

[0039] a) Preprocessing: parse the header structure of the composite file, and obtain the long sector allocation table SAT, the short sector allocation table SSAT, the length of the long sector LSetorSize and the length of the short sector SSetorSize, and express it with N=LSectorSize / LSetorSize How many times the length of the long sector is the length of the short sector, analyze the structure of the directory stream, and obtain the cor...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for restoring IM (instant message) deleted information. The method comprises the steps of acquiring unused spatial data and restoring the deleted data from an unused space, wherein the deleted IM information mainly flows to three parts of a compound file, namely an idle sector, a file residue area and a sector which corresponds to a non-directory structure; and once the unused spatial data is acquired, the data in the unused space can be analyzed. According to a global identification method, the unused space in the compound file is fully mined, and the deleted information is restored by adopting an IM data characteristic searching method; and compared with the conventional deleted IM information restoring software, the method has the characteristics of high restoration accuracy and comprehensive information restoration. According to the method, the deleted information can be restored to the greatest degree in the process of deleting the IM information, an important thought is provided for data restoration of other files by taking the compound file structure as a storage structure, and the method is widely applied to the fields of related data deletion and data analysis.

Description

technical field [0001] The invention belongs to the technical field of information security and computer application, and relates to a recovery method for IM deleted information. Background technique [0002] The recovery of IM deleted information using compound files as the storage structure is currently relatively rare in China, and there are relatively few relatively complete technical documents and related patents. At present, there are IM deleted information recovery software on the market, but the limitations are very large, and there is no public technical document or patent related to IM deleted information recovery. SafeAnalyzer is a software capable of recovering deleted IM information, but due to insufficient mining of the unused space in the compound file storing IM information, only part of the deleted IM information can be recovered. [0003] The recovery of IM deleted information mainly depends on the acquisition of unused space in the compound file and the s...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F17/30
Inventor 沈长达沈少凡林艺滨钱镜洁
Owner XIAMEN MEIYA PICO INFORMATION
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap