SSD hard disk data erasing method and device, electronic equipment and medium

Abstract

Embodiments of the present application provide a kind of SSD hard disk data erasing method, device, electronic equipment and medium, method includes: obtaining authorization information, when detecting that first duration is less than preset duration, obtain current health state information and business deadline, to obtain the authorization extension duration for SSD hard disk;Based on authorization extension duration and first duration, determine to carry out reservation or physical erasing operation to the data currently stored in SSD hard disk, the present application obtains current health state information and business deadline by detecting that first duration of SSD hard disk is less than preset duration, to obtain the authorization extension duration, to determine the data of SSD hard disk according to authorization extension duration and first duration, carry out reservation processing and physical erasing processing, to guarantee the security of the data corresponding to the storage of user when using SSD hard disk, and when the data of SSD hard disk is physically erased, realize the permanent deletion of the data in SSD hard disk.

Description

Technical Field

[0001] This invention relates to the field of data processing technology, and in particular to an SSD hard disk data erasure method, an SSD hard disk data erasure device, an electronic device, and a computer-readable storage medium. Background Technology

[0002] Currently, most SSD manufacturers do not provide lifecycle management tools for device data security, leaving customers to manage their SSDs themselves. Furthermore, the lifespan of an SSD is typically 10-20 years. Many companies experience high employee turnover, making SSD management difficult. Some customers believe that deleting data from the file system or formatting the drive will prevent data leaks. However, deleted or formatted data can be recovered using professional data recovery tools, making data leaks more likely. Summary of the Invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide an SSD hard disk data erasure method, an SSD hard disk data erasure device, an electronic device, and a computer storage medium that overcome or at least partially solve the above problems.

[0004] To address the aforementioned problems, this invention discloses an SSD hard drive data erasure method applied to a server. The server communicates with a security management platform and includes multiple SSD hard drives. The method includes:

[0005] Obtain the authorization information from the authorized service corresponding to the SSD hard drive, the authorization information including the authorization duration and the authorization time duration;

[0006] When the first duration of the SSD is detected to be less than the preset duration, the current health status information of the SSD and the corresponding service period are obtained; the first duration is the authorized duration minus the authorized timeout duration.

[0007] The current health status information and the service period are sent to the security management platform to obtain the authorization extension period for the SSD hard drive;

[0008] Based on the authorized extension duration and the first duration, it is determined whether to retain or physically erase the data currently stored in the SSD.

[0009] Optionally, the physical erase operation is a sanitize operation, and the step of determining whether to retain or physically erase the data currently stored in the SSD based on the authorized extension duration and the first duration includes:

[0010] If the authorization extension duration is equal to 0, and the first duration is 0, then the security management platform is triggered to send a physical erasure command;

[0011] According to the physical erase command, a sanitize operation is performed on the SSD hard drive.

[0012] Optionally, before obtaining the authorization information corresponding to the SSD hard drive, the method further includes:

[0013] When the SSD is detected to be booting for the first time, determine whether the SSD needs to start authorized services;

[0014] If the SSD needs to start authorized services, then read the initial health status information of the SSD.

[0015] The initial health status information is sent to the security management platform to obtain the activation information corresponding to the SSD hard drive;

[0016] Based on the activation information, activate the authorized service corresponding to the authorization information.

[0017] Optionally, when the SSD is detected to be booting for the first time, determining whether the SSD needs to start authorized services includes:

[0018] When the SSD is detected to be booting for the first time, its unique identification symbol is obtained;

[0019] Based on the unique identification symbol and the pre-defined business requirements, determine whether the SSD hard drive needs to start authorized services.

[0020] Optionally, determining whether to retain or physically erase the data currently stored in the SSD based on the authorized extension duration and the first duration includes:

[0021] If the authorized extension duration is not equal to 0, and / or the first duration is not 0, then the current data of the SSD hard disk will be retained.

[0022] Optionally, if the authorization extension duration is equal to 0 and the first duration is 0, then the security management platform is triggered to send a physical erasure command, including:

[0023] If the authorized extension duration is equal to 0 and the first duration is 0, then the usage mode of the SSD hard drive will be changed to read-only mode.

[0024] Based on the aforementioned business period, the security management platform is triggered to send a physical erase command or to update the data stored on the SSD to a new SSD.

[0025] Optionally, the current health status information includes the remaining lifespan of the SSD. The step of triggering the security management platform to send a physical erase command based on the business period or updating the data stored on the SSD to a new SSD, and then triggering the security management platform to send a physical erase command, includes:

[0026] When the service period is less than or equal to the remaining lifespan of the SSD, the security management platform is triggered to send a physical erase command to the SSD.

[0027] or,

[0028] When the service period exceeds the remaining lifespan of the SSD, the data stored on the SSD is updated to a new SSD, triggering the security management platform to send a physical erase command to the SSD.

[0029] This invention also discloses an SSD hard drive data erasure device applied to a server, the server communicating with a security management platform, the server including multiple SSD hard drives, and the device comprising:

[0030] The authorization information acquisition module is used to acquire authorization information in the authorization service corresponding to the SSD hard drive, the authorization information including authorization duration and authorization time duration;

[0031] The status information acquisition module is used to acquire the current health status information and corresponding service period of the SSD hard drive when the first duration of the SSD hard drive is detected to be less than a preset duration; the first duration is the authorized duration minus the authorized timing duration;

[0032] The authorization delay acquisition module is used to send the current health status information and the service period to the security management platform to obtain the authorization extension duration for the SSD;

[0033] The operation determination module is used to determine, based on the authorized extension duration and the first duration, whether to retain or physically erase the data currently stored in the SSD.

[0034] Optionally, the physical erasure operation is a Sanitize operation, and the operation determination module includes:

[0035] The instruction sending submodule is used to trigger the security management platform to send a physical erasure instruction if the authorization extension duration is equal to 0 and the first duration is 0.

[0036] The erase operation submodule is used to perform a sanitize operation on the SSD hard drive according to the physical erase command.

[0037] Optionally, before obtaining the authorization information corresponding to the SSD hard drive, the method further includes:

[0038] The service determination module is used to determine whether the SSD needs to start authorized services when it is detected that the SSD is booting for the first time.

[0039] The information reading module is used to read the initial health status information of the SSD if the SSD needs to start authorized services.

[0040] The activation information obtaining module is used to send the initial health status information to the security management platform to obtain the activation information corresponding to the SSD hard drive;

[0041] The service activation module is used to activate the authorized service corresponding to the authorization information based on the activation information.

[0042] Optionally, the service determination module includes:

[0043] The symbol acquisition submodule is used to acquire the unique identification symbol of the SSD when the SSD is detected to be booting for the first time.

[0044] The business determination submodule is used to determine whether the SSD hard drive needs to start authorized services based on the unique identification symbol and the pre-set business requirements.

[0045] Optionally, the operation determination module includes:

[0046] The retention operation submodule is used to retain the currently stored data on the SSD hard disk if the authorized extension duration is not equal to 0, and / or the first duration is not 0.

[0047] Optionally, the instruction sending submodule includes:

[0048] The mode change unit is used to change the usage mode of the SSD hard disk to read-only mode if the authorized extension duration is equal to 0 and the first duration is 0.

[0049] The first instruction sending unit is used to trigger the security management platform to send a physical erase instruction based on the business period, or to trigger the security management platform to send a physical erase instruction after updating the data stored on the SSD to a new SSD.

[0050] Optionally, the current health status information includes the remaining lifespan of the SSD hard drive, and the first instruction sending unit includes:

[0051] The first instruction sending subunit is used to trigger the security management platform to send a physical erase instruction for the SSD hard drive when the service period is less than or equal to the remaining lifespan of the SSD hard drive.

[0052] or,

[0053] The second instruction sending subunit is used to, when the service period is greater than the remaining lifespan of the SSD, update the data stored on the SSD to a new SSD, and then trigger the security management platform to send a physical erase instruction for the SSD.

[0054] This invention also discloses an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0055] The memory is used to store computer programs;

[0056] When the processor executes the program stored in the memory, it implements the SSD hard disk data erasure method as described in the embodiments of the present invention.

[0057] This invention also discloses one or more computer-readable media storing instructions that, when executed by one or more processors, cause the processors to perform the SSD hard disk data erasure method as described in this invention.

[0058] The embodiments of the present invention have the following advantages:

[0059] In this embodiment of the invention, authorization information from the authorized service corresponding to the SSD hard drive is obtained. When the first duration of the SSD hard drive is detected to be less than a preset duration, the current health status information and the corresponding service period of the SSD hard drive are obtained. The current health status information and the service period are sent to the security management platform to obtain the authorization extension duration for the SSD hard drive. Based on the authorization extension duration and the first duration, it is determined whether to retain or physically erase the data currently stored in the SSD hard drive. This invention obtains the current health status information and service period when the first duration of the SSD hard drive is detected to be less than a preset duration, thereby obtaining the authorization extension duration. Based on the authorization extension duration and the first duration, it determines whether to retain or physically erase the data on the SSD hard drive, thus realizing the detection of the SSD hard drive used by the user to ensure the security of the data stored in the user's SSD hard drive. When the data on the SSD hard drive is physically erased, the data in the SSD hard drive can be permanently deleted. Attached Figure Description

[0060] Figure 1 This is a flowchart of the steps of an SSD hard disk data erasure method provided in an embodiment of the present invention;

[0061] Figure 2 This is a flowchart of another SSD hard disk data erasure method provided in an embodiment of the present invention;

[0062] Figure 3 This is a flowchart of SSD hard disk data processing provided in an embodiment of the present invention;

[0063] Figure 4 This is a structural block diagram of an SSD hard disk data erasure device provided in an embodiment of the present invention;

[0064] Figure 5 This is a structural block diagram of an electronic device provided in an embodiment of the present invention;

[0065] Figure 6 This is a structural block diagram of a computer-readable storage medium provided in an embodiment of the present invention. Detailed Implementation

[0066] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0067] With current technology, the lifespan of an SSD is around 10-20 years. However, many companies have high employee turnover, making it difficult to manage SSDs. Furthermore, some customers believe that deleting data from the file system or formatting the drive can prevent data leaks. However, deleted or formatted data can be recovered using professional data recovery tools, making data leaks more likely.

[0068] One of the core concepts of this invention is that by detecting when the first duration of the SSD is less than a preset duration, the current health status information and business period are obtained, thereby obtaining the authorized extension duration. Based on the authorized extension duration and the first duration, the data on the SSD is determined to be retained or physically erased. This enables the detection of the SSD used by the user to ensure the security of the data stored on the user's SSD. Furthermore, by physically erasing the data on the SSD, the data in the SSD can be permanently deleted.

[0069] Reference Figure 1 This diagram illustrates a flowchart of an SSD hard drive data erasure method according to an embodiment of the present invention. The method is applied to a server that communicates with a security management platform. The server includes multiple SSD hard drives, and the method specifically includes the following steps:

[0070] Step 101: Obtain the authorization information in the authorized service corresponding to the SSD hard drive, the authorization information including authorization duration and authorization time duration;

[0071] For example, a server may contain multiple SSDs (Solid State Disks), which are hard drives made of solid-state electronic storage chip arrays.

[0072] A server can contain an SSD controller to manage multiple SSDs.

[0073] In this embodiment of the invention, the server can communicate with the security management platform and obtain the authorization information in the authorized service corresponding to the SSD hard drive. The authorization information may include the authorization duration and the authorization time duration. The authorization duration may be the duration from the end of the authorization when the authorized service is activated, and the authorization time duration may be the cumulative duration from the start of the timing when the authorized service in the SSD hard drive is activated.

[0074] Step 102: When it is detected that the first duration of the SSD is less than the preset duration, obtain the current health status information of the SSD and the corresponding service period; the first duration is the authorized duration minus the authorized timing duration;

[0075] In this embodiment of the invention, the first duration can be the authorized duration minus the authorized timeout duration, which is the remaining authorized time for the authorized service corresponding to the current SSD hard drive. For example, when the first duration equals 2 days, it means that the remaining authorized time for the authorized service of the current SSD hard drive is 2 days. After 2 days, if authorization cannot be obtained again, the SSD hard drive cannot be used normally.

[0076] In this embodiment of the invention, when the first duration of the SSD is detected to be less than a preset duration, the current health status information and corresponding service period of the SSD can be obtained. The preset duration can be set based on empirical values. The current health status information of the SSD reflects its current health status and records the most important information about its operation, such as current operating time, number of power-on cycles, hard drive temperature, optimal lifespan, remaining lifespan, write volume, read volume, etc. The service period can be a preset duration for the business using the SSD, primarily determined based on the needs of the business using the hard drive.

[0077] Step 103: Send the current health status information and the service period to the security management platform to obtain the authorization extension period for the SSD hard drive;

[0078] In this embodiment of the invention, the security management platform can be managed by the information security management department. When it receives the current health status information and service period of the SSD hard drive, it can determine the authorization extension period for the SSD hard drive based on the current health status information and service period of the SSD hard drive, and send it to the server.

[0079] The server receives the authorization extension period for the SSD hard drive sent by the security management platform, and can extend the authorization period in the authorization information according to the authorization extension period.

[0080] Step 104: Based on the authorized extension duration and the first duration, determine whether to retain or physically erase the data currently stored in the SSD.

[0081] In this embodiment of the invention, the operation of retaining or physically erasing the data currently stored in the SSD can be determined based on the authorized extension duration and the first duration.

[0082] In this embodiment of the invention, authorization information from the authorized service corresponding to the SSD is obtained. When the first duration of the SSD is detected to be less than a preset duration, the current health status information and the corresponding service period of the SSD are obtained. The current health status information and the service period are sent to the security management platform to obtain the authorization extension duration for the SSD. Based on the authorization extension duration and the first duration, it is determined whether to retain or physically erase the data currently stored in the SSD. This invention obtains the current health status information and the service period when the first duration of the SSD is detected to be less than a preset duration, thereby obtaining the authorization extension duration. Based on the authorization extension duration and the first duration, it determines whether to retain or physically erase the data on the SSD to ensure the security of the data stored by the user when using the SSD. When erasing the data on the SSD, the data in the SSD is permanently deleted.

[0083] Reference Figure 2 This diagram illustrates a flowchart of another SSD hard disk data erasure method provided by an embodiment of the present invention, applied to a server. The server communicates with a security management platform, and the server includes multiple SSD hard disks. The method may specifically include the following steps:

[0084] Step 201: When the SSD is detected to be booting for the first time, determine whether the SSD needs to start authorized services.

[0085] In this embodiment of the invention, when the SSD is detected to be booting for the first time, it can be determined whether the SSD needs to start authorized services.

[0086] In this embodiment of the invention, step 201 may include sub-steps S11-S12:

[0087] Sub-step S11: When it is detected that the SSD is booting for the first time, obtain the unique identification symbol of the SSD.

[0088] In this embodiment of the invention, when the SSD is detected to be booting for the first time, the unique identification symbol of the SSD is obtained so as to determine the corresponding SSD based on the unique identification symbol, wherein the unique identification symbol can be UUID (Universally Unique Identifier).

[0089] Sub-step S12: Based on the unique identification symbol and the pre-set business requirements, determine whether the SSD hard drive needs to start authorized services.

[0090] In this embodiment of the invention, a pre-set business requirement table can be obtained, wherein the business requirement table can record the SSD hard disk and its corresponding business requirements.

[0091] Based on the unique identifier of the SSD, pre-defined business requirements can be determined. Then, based on the unique identifier and the pre-defined business requirements, it can be determined whether the SSD needs to initiate an authorized service. Specifically, if the pre-defined business requirement is that an authorized service needs to be initiated, then the SSD needs to initiate an authorized service; if the pre-defined business requirement is that an authorized service does not need to be initiated, then the SSD does not need to initiate an authorized service. The authorized service contains authorization information, including the authorization duration and authorization timer duration.

[0092] Step 202: If the SSD needs to start the authorized service, then read the initial health status information of the SSD.

[0093] In this embodiment of the invention, if the SSD needs to start an authorized service, the initial health status information of the SSD is read. The health status information is used to reflect the health status of the SSD and records the most important information when the SSD is running, such as working time, number of power-on cycles, hard drive temperature, optimal lifespan, remaining lifespan, write volume, read volume, etc.

[0094] Step 203: Send the initial health status information to the security management platform to obtain the activation information corresponding to the SSD hard drive;

[0095] In this embodiment of the invention, the initial health status information of the SSD can be sent to the security management platform. Based on this information, the security management platform generates activation information for the SSD and sends it to the server. Specifically, the security management platform can also generate activation information for the SSD based on its initial health status information, a preset service period, and the SSD's unique identifier.

[0096] Step 204: Activate the authorized service corresponding to the authorization information according to the activation information.

[0097] In this embodiment of the invention, activation information is used to activate the authorized services corresponding to the authorization information. Specifically, the authorized services corresponding to the authorization information can be activated based on the activation information. The activation information may include a unique identification symbol, so as to activate the authorized services of the corresponding SSD hard drive based on the unique identification symbol.

[0098] Step 205: Obtain the authorization information in the authorized service corresponding to the SSD hard drive, the authorization information including authorization duration and authorization time duration;

[0099] For example, a server may contain multiple SSDs (Solid State Disks), which are hard drives made of solid-state electronic storage chip arrays.

[0100] A server can contain an SSD controller to manage multiple SSDs.

[0101] In this embodiment of the invention, the server can communicate with the security management platform and obtain the authorization information in the authorized service corresponding to the SSD hard drive. The authorization information may include the authorization duration and the authorization timeout duration. The authorization duration may be the end time of obtaining the authorization when the authorized service is activated, and the authorization timeout duration may be the cumulative duration of the timeout started when the authorized service in the SSD hard drive is activated.

[0102] Step 206: When it is detected that the first duration of the SSD is less than the preset duration, obtain the current health status information of the SSD and the corresponding service period; the first duration is the authorized duration minus the authorized timing duration;

[0103] In this embodiment of the invention, the first duration can be the authorized duration minus the authorized timeout duration, which is the remaining authorized time for the authorized service corresponding to the current SSD hard drive. For example, when the first duration equals 2 days, it means that the remaining authorized time for the authorized service of the current SSD hard drive is 2 days. After 2 days, if authorization cannot be obtained again, the SSD hard drive cannot be used normally.

[0104] In this embodiment of the invention, when the first duration of the SSD is detected to be less than a preset duration, the current health status information and corresponding service period of the SSD can be obtained. The preset duration can be set based on empirical values. The current health status information of the SSD reflects its current health status and records the most important information about its operation, such as current operating time, number of power-on cycles, hard drive temperature, optimal lifespan, remaining lifespan, write volume, read volume, etc. The service period can be a preset duration for the business using the SSD, primarily determined based on the needs of the business using the hard drive.

[0105] Step 207: Send the current health status information and the service period to the security management platform to obtain the authorization extension period for the SSD hard drive;

[0106] In this embodiment of the invention, the security management platform can be managed by the information security management department. Upon receiving the current health status information and service period of the SSD, it can determine the authorization extension duration for the SSD based on the current health status information and service period, and send it to the server. The authorization extension duration is used to extend the authorization duration in the corresponding SSD's authorization information.

[0107] Step 208: Based on the authorized extension duration and the first duration, determine whether to retain or physically erase the data currently stored in the SSD.

[0108] In this embodiment of the invention, the operation of retaining or physically erasing the data currently stored in the SSD can be determined based on the authorized extension duration and the first duration.

[0109] In this embodiment of the invention, the physical erasure operation is a Sanitize operation, and step 208 may include sub-steps S21-S22:

[0110] Sub-step S21: If the authorization extension duration is equal to 0 and the first duration is 0, then the security management platform is triggered to send a physical erasure command.

[0111] In this embodiment of the invention, the physical erasure operation can be a Sanitize operation, wherein the Sanitize operation can include three types of erasure operations: Block Erase, Overwrite, and Crypto Erase.

[0112] When the authorization extension duration is equal to 0, and the first duration is also 0, the security management platform is triggered to send a physical erase command to the server to perform a physical erase operation on the corresponding SSD, so as to completely erase the data stored in the SSD.

[0113] In this embodiment of the invention, sub-step S21 may include sub-steps S211-S212:

[0114] Sub-step S211: If the authorized extension duration is equal to 0 and the first duration is 0, then the usage mode of the SSD hard disk is changed to read-only mode.

[0115] In this embodiment of the invention, the usage mode of the SSD hard drive may include normal readable and writable mode, read-only mode, etc.

[0116] When the authorization extension period is 0 and the first period is 0, the usage mode of the SSD can be changed to read-only mode, so that business personnel using the SSD cannot modify the data on the SSD.

[0117] Sub-step S212: Based on the business period, the security management platform is triggered to send a physical erase command or the data stored on the SSD is updated to a new SSD, and then the security management platform is triggered to send a physical erase command.

[0118] In this embodiment of the invention, the security management platform can be triggered to send a physical erase command based on the business period, or the security management platform can be triggered to send a physical erase command after the data stored on the SSD is updated to a new SSD.

[0119] In this embodiment of the invention, the current health status information includes the remaining lifespan of the SSD hard drive, and sub-step S212 may include sub-steps S2121-S2122:

[0120] Sub-step S2121: When the service period is less than or equal to the remaining lifespan of the SSD, the security management platform is triggered to send a physical erase command to the SSD.

[0121] or,

[0122] Sub-step S2122: When the service period is greater than the remaining lifespan of the SSD, the data stored on the SSD is updated to a new SSD, and then the security management platform is triggered to send a physical erase command for the SSD.

[0123] In this embodiment of the invention, the current health status information includes the remaining lifespan of the SSD hard drive. When the service period is less than or equal to the remaining lifespan of the SSD hard drive, the security management platform can be triggered to send a physical erase command to the SSD hard drive. This allows the SSD hard drive to be retired after the data stored on it is physically erased, so that it can be provided to other services for continued use, thereby avoiding the waste of SSD hard drive resources.

[0124] When the business period exceeds the remaining lifespan of the SSD, the data stored on the SSD will be updated to a new SSD. This will trigger the security management platform to send a physical erase command to the SSD. The physical erase command will then erase the data stored on the old SSD after the data on the old SSD has been updated to the new SSD.

[0125] Sub-step S22: Perform a Sanitize operation on the SSD hard drive according to the physical erase command.

[0126] In this embodiment of the invention, the server can receive a material erasure command and perform a sanitize operation on the SSD hard drive according to the material erasure command.

[0127] In this embodiment of the invention, step 208 may further include sub-step S31:

[0128] Sub-step S31: If the authorized extension duration is not equal to 0, and / or the first duration is not 0, then the data currently stored on the SSD hard disk is retained.

[0129] In this embodiment of the invention, the authorization extension duration can be used to extend the authorization duration of the SSD hard drive; when the authorization extension duration is not equal to 0, and / or the first duration is not 0, it means that the authorization duration of the SSD hard drive has not yet been reached, and the data currently stored on the SSD hard drive is retained.

[0130] refer to Figure 3 The flowchart illustrates an SSD hard disk data processing method provided by an embodiment of the present invention.

[0131] Step 301: The SSD is detected as being booted for the first time;

[0132] Step 302: If it is necessary to start the authorized service, obtain the initial health status information of the SSD hard drive, and obtain the activation information based on the initial health status information, so as to activate the authorized service using the activation information.

[0133] Step 303: Determine whether the first duration corresponding to the SSD is less than the preset duration;

[0134] Step 304: If the first duration is less than the preset duration, obtain the current health status information and corresponding business period of the SSD hard drive, and obtain the corresponding authorization extension duration based on the current health status information and corresponding business period; the first duration is the authorization duration minus the authorization time duration.

[0135] Step 305: If the extension period is greater than 0, then extend the corresponding SSD's authorization period according to the extension period.

[0136] Step 306: If the extended authorization duration is equal to 0, and the first duration is 0 at this time, it means that the SSD hard drive authorization has failed, and the SSD hard drive will be physically erased.

[0137] In this embodiment of the invention, after physically erasing the SSD, the erased SSD can be used in other services to save SSD resources.

[0138] In this embodiment of the invention, authorization information from the authorized service corresponding to the SSD hard drive is obtained. When the first duration of the SSD hard drive is detected to be less than a preset duration, the current health status information and the corresponding service period of the SSD hard drive are obtained. The current health status information and the service period are sent to the security management platform to obtain the authorization extension duration for the SSD hard drive. Based on the authorization extension duration and the first duration, it is determined whether to retain or physically erase the data currently stored in the SSD hard drive. This invention obtains the current health status information and the service period when the first duration of the SSD hard drive is detected to be less than a preset duration, thereby obtaining the authorization extension duration. Based on the authorization extension duration and the first duration, it determines whether to retain or physically erase the data on the SSD hard drive to ensure the security of the data stored by the user when using the SSD hard drive. When the data on the SSD hard drive is physically erased, the data in the SSD hard drive is permanently deleted.

[0139] It should be noted that, for the sake of simplicity, the method embodiments are all described as a series of actions. However, those skilled in the art should understand that the embodiments of the present invention are not limited to the described order of actions, because according to the embodiments of the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily essential to the embodiments of the present invention.

[0140] Reference Figure 4 This diagram illustrates a structural block diagram of an SSD hard disk data erasure device according to an embodiment of the present invention. The device is applied to a server, which communicates with a security management platform. The server includes multiple SSD hard disks and may specifically include the following modules:

[0141] The authorization information acquisition module 401 is used to acquire authorization information in the authorization service corresponding to the SSD hard drive, the authorization information including authorization duration and authorization time duration;

[0142] The status information acquisition module 402 is used to acquire the current health status information and corresponding service period of the SSD hard disk when the first duration of the SSD hard disk is detected to be less than a preset duration; the first duration is the authorized duration minus the authorized timing duration;

[0143] The authorization delay acquisition module 403 is used to send the current health status information and the service period to the security management platform to obtain the authorization extension duration for the SSD hard drive;

[0144] The operation determination module 404 is used to determine, based on the authorized extension duration and the first duration, whether to retain or physically erase the data stored on the SSD hard disk.

[0145] In this embodiment of the invention, the physical erasure operation is a Sanitize operation, and the operation determination module includes:

[0146] The instruction sending submodule is used to trigger the security management platform to send a physical erasure instruction if the authorization extension duration is equal to 0 and the first duration is 0.

[0147] The erase operation submodule is used to perform a sanitize operation on the SSD hard drive according to the physical erase command.

[0148] In this embodiment of the invention, before obtaining the authorization information corresponding to the SSD hard drive, the method further includes:

[0149] The service determination module is used to determine whether the SSD needs to start authorized services when it is detected that the SSD is booting for the first time.

[0150] The information reading module is used to read the initial health status information of the SSD if the SSD needs to start authorized services.

[0151] The activation information obtaining module is used to send the initial health status information to the security management platform to obtain the activation information corresponding to the SSD hard drive;

[0152] The service activation module is used to activate the authorized service corresponding to the authorization information based on the activation information.

[0153] In this embodiment of the invention, the service determination module includes:

[0154] The symbol acquisition submodule is used to acquire the unique identification symbol of the SSD when the SSD is detected to be booting for the first time.

[0155] The business determination submodule is used to determine whether the SSD hard drive needs to start authorized services based on the unique identification symbol and the pre-set business requirements.

[0156] In this embodiment of the invention, the operation determination module includes:

[0157] The retention operation submodule is used to retain the current data of the SSD hard disk if the authorized extension duration is not equal to 0, and / or the first duration is not 0.

[0158] In this embodiment of the invention, the instruction sending submodule includes:

[0159] The mode change unit is used to change the usage mode of the SSD hard disk to read-only mode if the authorized extension duration is equal to 0 and the first duration is 0.

[0160] The first instruction sending unit is used to trigger the security management platform to send a physical erase instruction based on the business period, or to trigger the security management platform to send a physical erase instruction after updating the data stored on the SSD to a new SSD.

[0161] In this embodiment of the invention, the current health status information includes the remaining lifespan of the SSD hard drive, and the first instruction sending unit includes:

[0162] The first instruction sending subunit is used to trigger the security management platform to send a physical erase instruction for the SSD hard drive when the service period is less than or equal to the remaining lifespan of the hard drive.

[0163] or,

[0164] The second instruction sending subunit is used to, when the service period is greater than the remaining lifespan of the hard disk, update the data stored on the SSD hard disk to a new SSD hard disk, and then trigger the security management platform to send a physical erase instruction for the SSD hard disk.

[0165] In this embodiment of the invention, authorization information from the authorized service corresponding to the SSD is obtained. When the first duration of the SSD is detected to be less than a preset duration, the current health status information and the corresponding service period of the SSD are obtained. The current health status information and the service period are sent to the security management platform to obtain the authorization extension duration for the SSD. Based on the authorization extension duration and the first duration, it is determined whether to retain or physically erase the data currently stored in the SSD. This invention obtains the current health status information and the service period when the first duration of the SSD is detected to be less than a preset duration, thereby obtaining the authorization extension duration. Based on the authorization extension duration and the first duration, it determines whether to retain or physically erase the data on the SSD to ensure the security of the data stored by the user when using the SSD. When the data on the SSD is physically erased, the data in the SSD is permanently deleted.

[0166] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0167] Reference Figure 5 This illustration shows an electronic device 40 provided in an embodiment of the present invention, comprising:

[0168] It includes a processor 501, a memory 502, and a computer program 5021 stored in the memory and capable of running on the processor. When the computer program 5021 is executed by the processor, it implements the various processes of the above-described method embodiment for obtaining memory monitoring information and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0169] Reference Figure 6 This illustration shows a computer-readable storage medium 60 provided by an embodiment of the present invention. The computer-readable storage medium stores a computer program 601. When the computer program 601 is executed by a processor, it implements the various processes of the above-described method embodiment for obtaining memory monitoring information and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0170] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0171] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, embodiments of the present invention can take the form of entirely hardware embodiments, entirely software embodiments, or embodiments combining software and hardware aspects. Furthermore, embodiments of the present invention can take the form of computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0172] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0173] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0174] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0175] Although preferred embodiments of the present invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the embodiments of the present invention.

[0176] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.

[0177] The present invention has provided a detailed description of an SSD hard disk data erasure method, an SSD hard disk data erasure device, an electronic device, and a computer-readable storage medium. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A method for erasing data on an SSD hard drive, characterized in that, Applied to a server that communicates with a security management platform, the server including multiple SSD hard drives, the method includes: Obtain the authorization information from the authorized service corresponding to the SSD hard drive, the authorization information including the authorization duration and the authorization time duration; When the first duration of the SSD is detected to be less than the preset duration, the current health status information and the corresponding service period of the SSD are obtained; the first duration is the authorized duration minus the authorized timing duration; wherein, the current health status information includes working duration, number of power-on cycles, hard disk temperature, optimal service life, remaining life, write volume or read volume; The current health status information and the service period are sent to the security management platform to obtain the authorization extension period for the SSD hard drive; Based on the authorized extension duration and the first duration, it is determined whether to retain or physically erase the data currently stored in the SSD. The physical erase operation is a Sanitize operation. The step of determining whether to retain or physically erase the currently stored data in the SSD based on the authorized extension duration and the first duration includes: If the authorized extension duration is equal to 0 and the first duration is 0, then the usage mode of the SSD hard drive will be changed to read-only mode. Based on the aforementioned business period, the security management platform is triggered to send a physical erase command or to update the data stored on the SSD to a new SSD, thereby triggering the security management platform to send a physical erase command. According to the physical erase command, the SSD hard disk is subjected to the Sanitize operation, wherein the Sanitize operation includes at least one of block erase, overwrite or key deletion.

2. The method according to claim 1, characterized in that, Before obtaining the authorization information corresponding to the SSD hard drive, the process also includes: When the SSD is detected to be booting for the first time, determine whether the SSD needs to start authorized services; If the SSD needs to start authorized services, then read the initial health status information of the SSD. The initial health status information is sent to the security management platform to obtain the activation information corresponding to the SSD hard drive; Based on the activation information, activate the authorized service corresponding to the authorization information.

3. The method according to claim 2, characterized in that, When the SSD is detected to be booting for the first time, determining whether the SSD needs to start authorized services includes: When the SSD is detected to be booting for the first time, its unique identification symbol is obtained; Based on the unique identification symbol and the pre-defined business requirements, determine whether the SSD hard drive needs to start authorized services.

4. The method according to claim 1, characterized in that, The step of determining whether to retain or physically erase the data currently stored in the SSD based on the authorized extension duration and the first duration includes: If the authorized extension duration is not equal to 0, and / or the first duration is not 0, then the data currently stored on the SSD hard disk is retained.

5. The method according to claim 1, characterized in that, The step of triggering the security management platform to send a physical erase command based on the business period or updating the data stored on the SSD to a new SSD, and then triggering the security management platform to send a physical erase command, includes: When the service period is less than or equal to the remaining lifespan of the SSD, the security management platform is triggered to send a physical erase command to the SSD. or, When the service period exceeds the remaining lifespan of the SSD, the data stored on the SSD is updated to a new SSD, triggering the security management platform to send a physical erase command to the SSD.

6. A data erasure device for an SSD hard drive, characterized in that, Applied to a server that communicates with a security management platform, the server includes multiple SSD hard drives, and the device includes: The authorization information acquisition module is used to acquire authorization information in the authorization service corresponding to the SSD hard drive, the authorization information including authorization duration and authorization time duration; The status information acquisition module is used to acquire the current health status information and corresponding service period of the SSD hard drive when the first duration of the SSD hard drive is detected to be less than the preset duration; the first duration is the authorized duration minus the authorized timing duration; wherein, the current health status information includes working duration, number of power-on cycles, hard drive temperature, optimal service life, remaining life, write volume or read volume; The authorization delay acquisition module is used to send the current health status information and the service period to the security management platform to obtain the authorization extension duration for the SSD hard drive; An operation determination module is used to determine, based on the authorized extension duration and the first duration, whether to retain or physically erase the data currently stored in the SSD hard disk; The physical erasure operation is a Sanitize operation, and the operation determination module includes: The instruction sending submodule includes: a mode change unit, used to change the usage mode of the SSD hard disk to read-only mode if the authorization extension duration is equal to 0 and the first duration is 0; and a first instruction sending unit, used to trigger the security management platform to send a physical erase instruction based on the service period or to trigger the security management platform to send a physical erase instruction after updating the data stored on the SSD hard disk to a new SSD hard disk. The erase operation submodule is used to perform a sanitize operation on the SSD hard drive according to the physical erase command, wherein the sanitize operation includes at least one of block erase, overwrite or key deletion.

7. An electronic device, characterized in that, include: A processor, a memory, and a computer program stored on the memory and capable of running on the processor, wherein the computer program, when executed by the processor, performs the steps of erasing SSD hard disk data as described in any one of claims 1-5.

8. A computer-readable storage medium, characterized in that, A computer program is stored on the computer-readable storage medium, which, when executed by a processor, performs the steps of erasing SSD hard disk data as described in any one of claims 1-5.

Images