A raid management method and system for encrypted hard disk hidden area

Abstract

The application relates to a RAID management method and system of an encrypted hard disk hidden area, which comprises the following steps: an encrypted hard disk RAID management system identifies the insertion and recovery of an encrypted hard disk hidden area, receives a serial number sent by a target encrypted hard disk hidden area, judges whether the target encrypted hard disk hidden area is a new encrypted hard disk hidden area or an original encrypted hard disk hidden area recovered from a fault, sets the target encrypted hard disk hidden area as a JBOD if the target encrypted hard disk hidden area is the new encrypted hard disk hidden area, acquires available space of the target encrypted hard disk hidden area, and writes data to be written into the encrypted hard disk hidden area by the encrypted hard disk RAID management system, and recovers the target encrypted hard disk hidden area to the original configuration if the target encrypted hard disk hidden area is the original encrypted hard disk hidden area recovered from the fault, and judges whether the encrypted hard disk hidden area is a JBOD encrypted hard disk; the application can construct a RAID for the encrypted hard disk hidden area which cannot be recognized by an operating system, improves the read-write efficiency through the RAID, and provides fault tolerance protection.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to a RAID management method and system for encrypted hard disk hidden areas. Background Technology

[0002] With the rapid development of computer technology, people are generating more and more important data. However, most of this important data is stored in plaintext without encryption protection, making it vulnerable to theft and posing security risks. Current encrypted storage is mostly implemented through software encryption, but software encryption has several drawbacks: firstly, software encryption key management is very complex, and the key appears in memory during runtime, making it susceptible to malicious theft and security vulnerabilities; secondly, software encryption performance is relatively weak, with encryption and decryption speeds significantly affected by the system, resulting in high costs for encrypting large-scale data. Therefore, hardware encryption has become a more secure and efficient encryption / decryption option in many scenarios, and encrypted hard drives are one such hardware encryption device.

[0003] Encrypted hard drives consist of a public partition and a hidden partition. The public partition is identical to a regular hard drive, while the hidden partition is concealed and unrecognized by the operating system. It can only be accessed through a dedicated interface, and data can only be read, written, or erased after authorization. While this concealment enhances the security of encrypted data, it also prevents the use of RAID functionality provided by the operating system or a RAID card. Summary of the Invention

[0004] (a) Technical problems to be solved

[0005] In view of the above-mentioned shortcomings and deficiencies of the prior art, the present invention provides a RAID management method and system for encrypted hard disk hidden areas, which solves the technical problem that encrypted hard disk hidden areas cannot use the RAID functions provided by the operating system or RAID card.

[0006] (II) Technical Solution

[0007] To achieve the above objectives, the main technical solutions adopted by the present invention include:

[0008] Firstly, embodiments of the present invention provide a RAID management method for encrypted hard drive hidden areas.

[0009] The method includes the identification and recovery of the hidden partition of an encrypted hard drive by the encrypted hard drive RAID management system.

[0010] The encrypted hard drive RAID management system identifies the insertion and recovery of the encrypted hard drive hidden area, including:

[0011] S1. Receive the serial number sent by the hidden area of ​​the target encrypted hard drive, wherein the serial number is generated by the hidden area of ​​the target encrypted hard drive based on the user inserting the target encrypted hard drive;

[0012] S2. Based on the serial number, determine whether the target encrypted hard disk hidden area is a new encrypted hard disk hidden area or an original encrypted hard disk hidden area recovered from a fault;

[0013] If it is a new encrypted hard drive hidden area, jump to S3;

[0014] If you are recovering from a fault, jump to S4;

[0015] S3. Set the target encrypted hard disk hidden area to JBOD, obtain the available space of the target encrypted hard disk hidden area, and send it to the FAT file system. The FAT file system creates a file system for the encrypted hard disk hidden area, and the encrypted hard disk RAID management system writes the data to be written to the encrypted hard disk hidden area; the data to be written is the data of the file system created in the encrypted hard disk hidden area.

[0016] JBOD refers to a standalone hard drive that is not configured with RAID.

[0017] S4. Restore the target encrypted hard disk hidden area to its original configuration, and determine whether the encrypted hard disk hidden area is a JBOD encrypted hard disk hidden area;

[0018] If not, determine the RAID level in the original configuration of the encrypted hard drive's hidden area;

[0019] The original configuration was the configuration of the encrypted hard drive's hidden area before the failure was recovered.

[0020] Optionally, the target encrypted hard drive includes: a public area of ​​the encrypted hard drive and a hidden area of ​​the encrypted hard drive;

[0021] The encrypted hard drive's hidden area is used for data storage and encryption / decryption operations.

[0022] Optionally, S4 includes:

[0023] S401. If the target encrypted hard drive hidden area has a RAID level of RAID 0, restore RAID 0 to usable state and restore the encrypted hard drive hidden area.

[0024] S402. If the target encrypted hard drive's hidden area RAID level is RAID 1, RAID 5, or RAID 10, recover the hidden area data according to the predefined RAID rules that match each RAID level, and recover the encrypted hard drive's hidden area.

[0025] The RAID rules define different RAID levels.

[0026] Optionally, the method further includes:

[0027] A. The encrypted hard drive RAID management system monitors the removal and failure of the encrypted hard drive's hidden area;

[0028] A includes:

[0029] A-1. Obtain the serial number of the target encrypted hard drive hidden area. Based on the serial number, determine whether the encrypted hard drive hidden area to which the serial number belongs is JBOD or RAID 0.

[0030] If yes, proceed to A-2; otherwise, proceed to A-3.

[0031] A-2. When the encrypted hard drive hidden area is JBOD, set the target encrypted hard drive hidden area to unavailable. When the encrypted hard drive hidden area is RAID 0, set RAID 0 to unavailable and obtain removal or failure information.

[0032] A-3. The encrypted hard drive RAID management system obtains information on removal or failure.

[0033] Optionally, the method further includes:

[0034] B. Add a hidden area for encrypted hard drives in the encrypted hard drive RAID management system;

[0035] The B includes:

[0036] B-1. Based on the notification that the pre-clearing process of the target encrypted hard drive is complete, set the hidden area of ​​the encrypted hard drive to be added to the target RAID level;

[0037] The pre-clearing process includes:

[0038] The FAT file system receives the user's first instruction and determines whether a file system exists at the target RAID level; the first instruction is for the user to select the target RAID level and the hidden area of ​​the encrypted hard drive to be added in the encrypted hard drive management system interface;

[0039] If so, back up the hidden file system data in the FAT file system, and clear the hidden file system data in the encrypted hard drive to be added and the hidden file system data in the target RAID level;

[0040] If not, clear the hidden area of ​​the encrypted hard drive to be added;

[0041] B-2. Calculate the available space according to the RAID rules that match each RAID level, and the FAT file system creates the first file system on the target RAID level;

[0042] B-3. ​​Based on the created first file system, the encrypted hard disk RAID management system writes the data to be written to the hidden area of ​​the encrypted hard disk; the data to be written is the data of the created first file system and the backup data.

[0043] Optionally, the method further includes:

[0044] C. The encrypted hard drive RAID management system removes the hidden area of ​​the encrypted hard drive;

[0045] The C includes:

[0046] C-1. Based on the notification that the pre-emptive clearing process is complete sent by the target encrypted hard disk, set the hidden area of ​​the encrypted hard disk to be removed as JBOD, and create a second file system in the hidden area of ​​the removed encrypted hard disk;

[0047] The pre-clearing process includes:

[0048] The FAT file system receives a second instruction from the user to determine whether the encrypted hard drive hidden area still exists at the target RAID level after removal; the second instruction is for the user to select the target RAID level and the encrypted hard drive hidden area to be removed in the encrypted hard drive RAID management system interface;

[0049] If so, back up the hidden file system data in the FAT file system, and clear the hidden file system data in the encrypted hard drive to be removed and the hidden file system data in the target RAID level;

[0050] If not, clear the hidden area of ​​the encrypted hard drive to be removed;

[0051] C-2. Based on the created second file system, write the data of the second file system to the hidden area of ​​the removed encrypted hard drive, and determine whether the target RAID level has an encrypted hard drive hidden area after removal;

[0052] If so, proceed to C-3;

[0053] C-3. Calculate the available space according to the RAID rules that match each RAID level, and create a third file system on the target RAID level in the FAT file system. Write the third file system data and backup data to the encrypted hard drive hidden area.

[0054] Optionally, the method further includes:

[0055] D. The encrypted hard drive RAID management system writes a file to the hidden area of ​​the target encrypted hard drive;

[0056] The D includes:

[0057] D-1. The encrypted hard disk RAID management system receives a third instruction from the user or upper-layer application to determine whether the target RAID level or the target encrypted hard disk hidden area is available; the third instruction is a write file command issued by the user or upper-layer application to the encrypted hard disk RAID management system.

[0058] If available, proceed to D-2;

[0059] If unavailable, the encrypted hard drive RAID management system will return an error message;

[0060] D-2. The FAT file system determines whether there is enough remaining space;

[0061] If so, proceed to D-3;

[0062] If not, the encrypted hard drive RAID management system returns an error message;

[0063] D-3. The target file is written based on the FAT file system. According to the RAID rules or JBOD rules that match each RAID level, the target file is written to the target encrypted hard disk hidden area and the corresponding sector of the target encrypted hard disk hidden area.

[0064] Optionally, the method further includes:

[0065] E. The encrypted hard drive RAID management system reads files from the hidden area of ​​the target encrypted hard drive;

[0066] The E includes:

[0067] E-1. The encrypted hard disk RAID management system receives a fourth instruction from the user or upper-layer application to determine whether the target RAID level or the target encrypted hard disk hidden area is available; the fourth instruction is a file read command issued by the user or upper-layer application to the encrypted hard disk RAID management system.

[0068] If available, proceed to E-2;

[0069] If unavailable, the encrypted hard drive RAID management system will return an error message;

[0070] E-2 and FAT file systems determine whether the target file exists;

[0071] If so, proceed to E-3;

[0072] If not, the encrypted hard drive RAID management system returns an error message;

[0073] E-3. Based on the FAT file system, the target file is read, and the hidden area and the corresponding sector of the hidden area are read according to the RAID rules or JBOD rules that match each RAID level, and the read content is integrated.

[0074] Optionally, when the target encrypted hard drive hidden area is configured as RAID, the availability of the target RAID level is determined;

[0075] When the target encrypted hard disk hidden area is configured as JBOD, determine the availability of the encrypted hard disk hidden area.

[0076] Secondly, embodiments of the present invention provide a RAID management system for an encrypted hard disk hidden area, comprising:

[0077] Calling modules, multiple execution modules;

[0078] The calling module is used to call the dedicated interface of the encrypted hard disk hidden area to connect the encrypted hard disk hidden area RAID management system with the encrypted hard disk hidden area; the dedicated interface is located in the static library and dynamic library of the encrypted hard disk hidden area.

[0079] The multiple execution modules implement any of the RAID management methods for the hidden area of ​​encrypted hard drives.

[0080] (III) Beneficial Effects

[0081] The beneficial effects of this invention are: This invention provides a RAID management method and system for encrypted hard disk hidden areas. By using an encrypted hard disk RAID management system, compared with the prior art, it can enable RAID construction and management of encrypted hard disk hidden areas that cannot be recognized by the operating system, thereby achieving the technical effects of improving read and write efficiency and providing fault tolerance protection. Attached Figure Description

[0082] Figure 1 This is a RAID management method for encrypted hard disk hidden areas and a schematic diagram of the process for identifying, inserting, and restoring encrypted hard disk hidden areas in the encrypted hard disk RAID management system within the system.

[0083] Figure 2 A schematic diagram of an encrypted hard drive architecture for a RAID management method and system for an encrypted hard drive hidden area;

[0084] Figure 3 A schematic diagram of the architecture of a RAID management method and system for encrypted hard drive hidden areas;

[0085] Figure 4 This is a RAID management method for encrypted hard disk hidden areas and a schematic diagram of the process for monitoring the removal and fault handling of encrypted hard disk hidden areas in the encrypted hard disk RAID management system.

[0086] Figure 5 A schematic diagram illustrating a RAID management method for encrypted hard drive hidden areas and the process of adding encrypted hard drive hidden areas to the encrypted hard drive RAID management system in the system.

[0087] Figure 6 A schematic diagram illustrating a RAID management method for encrypted hard drive hidden areas and the process of removing encrypted hard drive hidden areas from the encrypted hard drive RAID management system in the system.

[0088] Figure 7 This is a RAID management method for an encrypted hard drive hidden area and a schematic diagram of the process of writing files to the encrypted hard drive hidden area by the encrypted hard drive RAID management system in the system.

[0089] Figure 8 This is a RAID management method for an encrypted hard drive hidden area and a schematic diagram of the process of the encrypted hard drive RAID management system reading files from the encrypted hard drive hidden area. Detailed Implementation

[0090] To better explain and facilitate understanding of the present invention, the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments.

[0091] The present invention proposes a method and system for managing encrypted hard drives without RAID. By introducing an encrypted hard drive RAID management system, RAID can be built and managed even in the hidden areas of encrypted hard drives that cannot be recognized by the operating system, thereby improving read and write efficiency and providing fault tolerance protection.

[0092] To better understand the above technical solutions, exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that the present invention can be understood more clearly and thoroughly, and that the scope of the present invention can be fully conveyed to those skilled in the art.

[0093] Example 1

[0094] See Figure 1 This invention provides a RAID management method for encrypted hard disk hidden areas, including identifying the insertion and restoration of encrypted hard disk hidden areas, comprising the following steps:

[0095] Step S1: Receive the serial number sent by the hidden area of ​​the target encrypted hard drive, wherein the serial number is generated by the hidden area of ​​the target encrypted hard drive based on the user inserting the target encrypted hard drive;

[0096] In this embodiment, the serial number is inherent to the encrypted hard drive, and each encrypted hard drive has a unique serial number.

[0097] Step S2: Based on the serial number, determine whether the target encrypted hard disk hidden area is a new encrypted hard disk hidden area or an original encrypted hard disk hidden area recovered from a fault;

[0098] If it is a new encrypted hard drive hidden area, proceed to step S3;

[0099] If the recovery is from the original encrypted hard drive hidden area, proceed to step S4;

[0100] Step S3: Set the target encrypted hard disk hidden area to JBOD, obtain the available space of the target encrypted hard disk hidden area, and send it to the FAT file system. The FAT file system creates a file system for the encrypted hard disk hidden area, and the encrypted hard disk RAID management system writes the data to be written to the encrypted hard disk hidden area; the data to be written is the data of the file system created in the encrypted hard disk hidden area.

[0101] JBOD refers to a standalone hard drive that is not configured with RAID.

[0102] Step S4: Restore the target encrypted hard disk hidden area to its original configuration, and determine whether the encrypted hard disk hidden area is a JBOD encrypted hard disk;

[0103] If so, complete the recovery of the target encrypted hard drive's hidden area;

[0104] If not, determine the RAID level in the original configuration of the encrypted hard drive's hidden area;

[0105] The original configuration was the configuration of the encrypted hard drive's hidden area before the failure was recovered.

[0106] In this embodiment, for example, when a user inserts a target hard drive into a computer device, the encrypted hard drive RAID management system will identify the serial number of the inserted target hard drive to determine whether it is a newly inserted encrypted hard drive hidden area or an already added encrypted hard drive hidden area recovered from a failure. If it is a newly added encrypted hard drive hidden area, the configuration of the encrypted hard drive hidden area will be set to JBOD; if it is an already added encrypted hard drive hidden area recovered from a failure, the configuration of the encrypted hard drive hidden area will be set to the original configuration.

[0107] In this embodiment, as Figure 2 As shown, the target encrypted hard drive includes: a public area of ​​the encrypted hard drive and a hidden area of ​​the encrypted hard drive;

[0108] The encrypted hard drive's hidden area is used for data storage and encryption / decryption operations.

[0109] The public area of ​​the encrypted hard drive is no different from a regular hard drive. The hidden area, however, is concealed and cannot be recognized by the operating system. It can only be accessed through a dedicated interface, and after authorization, data can be read, written, or erased. The hidden area includes a hardware encryption / decryption unit and an encrypted data storage unit. The hardware encryption / decryption unit can encrypt externally input encrypted data and decrypt ciphertext data within the encrypted data storage unit. The hidden area's hardware encryption / decryption unit uses a built-in national cryptographic algorithm for encryption and decryption, ensuring operational efficiency. The encrypted data storage unit stores the ciphertext data encrypted by the hardware encryption unit, as well as its own secret data, including encryption / decryption keys. This data cannot be recognized by the operating system and cannot be made public.

[0110] Optionally, step S4 further includes:

[0111] Step S401: If the target encrypted hard drive hidden area has a RAID level of RAID 0, restore RAID 0 to usable state and restore the encrypted hard drive hidden area.

[0112] Step S402: If the target encrypted hard drive hidden area RAID level is RAID 1, RAID 5 or RAID 10, recover the hidden area data according to the predefined RAID rules that match each RAID level, and recover the encrypted hard drive hidden area;

[0113] In this embodiment, the RAID rules are the definitions of different RAID levels.

[0114] RAID 0 is a virtual storage device that combines multiple (at least two) physical hard drives together using a tool, and can divide data into several blocks and write them sequentially to each physical hard drive.

[0115] RAID 1 binds two (or more) physical disk devices together, writing data simultaneously to all of them. If one disk fails, the data is not corrupted; instead, it is immediately and automatically restored to normal use through hot-swapping.

[0116] RAID 5 stores the parity information of the data on the hard disk devices in other hard disk devices. The parity information of the data in the RAID 5 disk array group is not stored in a single disk device, but is stored on each corresponding disk device other than itself.

[0117] The RAID 10 configuration is a combination of RAID 0 and RAID 1. RAID 10 requires at least four hard drives to build. First, two RAID 1 disk arrays are created in pairs to ensure data security. Then, RAID 0 technology is applied to the two RAID 1 disk arrays to further improve the read and write speeds of the hard drive devices.

[0118] In this embodiment, an example is given, such as Figure 3 As shown, the encrypted hard drive RAID management system is installed on the computer device through installation software. It forms the architecture of the encrypted hard drive hidden area RAID management method with the FAT file system, the encrypted hard drive hidden area, the user, and the upper-layer application. The encrypted hard drive RAID management system can interact with the FAT file system, the encrypted hard drive hidden area, the user, and the upper-layer application to realize the RAID management of the encrypted hard drive hidden area.

[0119] This embodiment provides a RAID management method for encrypted hard disk hidden areas, which enables RAID construction and management of encrypted hard disk hidden areas that cannot be recognized by the operating system, thereby improving read and write efficiency and providing fault tolerance protection.

[0120] Example 2

[0121] In this embodiment, a RAID management method for an encrypted hard drive hidden area includes the following steps:

[0122] Step S1: Receive the serial number sent by the hidden area of ​​the target encrypted hard drive, wherein the serial number is generated by the hidden area of ​​the target encrypted hard drive based on the user inserting the target encrypted hard drive;

[0123] Step S2: Based on the serial number, determine whether the target encrypted hard disk hidden area is a new encrypted hard disk hidden area or an original encrypted hard disk hidden area recovered from a fault;

[0124] If it is a new encrypted hard drive hidden area, proceed to step S3;

[0125] If the recovery is from the original encrypted hard drive hidden area, proceed to step S4;

[0126] Step S3: Set the target encrypted hard disk hidden area to JBOD, obtain the available space of the target encrypted hard disk hidden area, and send it to the FAT file system. The FAT file system creates a file system for the encrypted hard disk hidden area, and the encrypted hard disk RAID management system writes the data to be written to the encrypted hard disk hidden area; the data to be written is the data of the file system created in the encrypted hard disk hidden area.

[0127] In this embodiment, JBOD is a configuration method that combines multiple physical hard disks into a large logical storage unit;

[0128] Step S4: Restore the target encrypted hard disk hidden area to its original configuration, and determine whether the encrypted hard disk hidden area is a JBOD encrypted hard disk;

[0129] If so, complete the recovery of the target encrypted hard drive's hidden area;

[0130] If not, determine the RAID level in the original configuration of the encrypted hard drive's hidden area;

[0131] The original configuration was the configuration of the encrypted hard drive's hidden area before the failure was recovered.

[0132] For example, if the encrypted hard drive hidden area was originally configured as RAID 0, then the configuration of the encrypted hard drive hidden area will be restored to RAID 0 after the failure state is recovered.

[0133] Optionally, the target encrypted hard drive includes: a public area of ​​the encrypted hard drive and a hidden area of ​​the encrypted hard drive;

[0134] The encrypted hard drive's hidden area is used for data storage and encryption / decryption operations.

[0135] The public area of ​​the encrypted hard drive is no different from a regular hard drive. The hidden area, however, is concealed and cannot be recognized by the operating system. It can only be accessed through a dedicated interface, and after authorization, data can be read, written, or erased. The hidden area includes a hardware encryption / decryption unit and an encrypted data storage unit. The hardware encryption / decryption unit can encrypt externally input encrypted data and decrypt ciphertext data within the encrypted data storage unit. The hidden area's hardware encryption / decryption unit uses a built-in national cryptographic algorithm for encryption and decryption, ensuring operational efficiency. The encrypted data storage unit stores the ciphertext data encrypted by the hardware encryption unit, as well as its own secret data, including encryption / decryption keys. This data cannot be recognized by the operating system and cannot be made public.

[0136] Optionally, step S4 further includes:

[0137] Step S401: If the target encrypted hard drive hidden area has a RAID level of RAID 0, restore RAID 0 to usable state and restore the encrypted hard drive hidden area.

[0138] Step S402: If the target encrypted hard drive hidden area RAID level is RAID 1, RAID 5 or RAID 10, recover the hidden area data according to the predefined RAID rules that match each RAID level, and recover the encrypted hard drive hidden area;

[0139] In this embodiment, the RAID rules are the definitions of different RAID levels.

[0140] In this embodiment, as Figure 4 As shown, the method further includes:

[0141] A. The encrypted hard drive RAID management system monitors the removal and failure of the encrypted hard drive's hidden area, including:

[0142] Step A-1: ​​Obtain the serial number of the target encrypted hard drive hidden area. Based on the serial number, determine whether the encrypted hard drive hidden area to which the serial number belongs is JBOD or RAID 0.

[0143] If yes, proceed to step A-2; if no, proceed to step A-3.

[0144] A-2. When the encrypted hard drive hidden area is JBOD, set the target encrypted hard drive hidden area to unavailable. When the encrypted hard drive hidden area is RAID 0, set RAID 0 to unavailable and obtain removal or failure information.

[0145] Step A-3: The encrypted hard drive RAID management system obtains information about removal or failure.

[0146] For example, when a user removes the encrypted hard drive's hidden partition or the hidden partition fails, the encrypted hard drive RAID management system will identify the removed or failed encrypted hard drive using the serial number of a normally functioning encrypted hard drive. If the data in the hidden partition is RAID 0 or JBOD, then RAID 0 and the hidden partition will become unusable. If it is RAID 1, RAID 5, or RAID 10, it will not affect subsequent use. Finally, the user will be notified that the hidden partition has been removed or has failed.

[0147] In this embodiment, as Figure 5 As shown, the method further includes:

[0148] B. Add a hidden area for encrypted hard drives in the encrypted hard drive RAID management system;

[0149] The B includes:

[0150] Step B-1: Based on the notification that the pre-clearing process of the target encrypted hard drive is complete, set the hidden area of ​​the encrypted hard drive to be added to the target RAID level;

[0151] The pre-clearing process includes:

[0152] The FAT file system receives the user's first instruction and determines whether a file system exists at the target RAID level; the first instruction is for the user to select the target RAID level and the hidden area of ​​the encrypted hard drive to be added in the encrypted hard drive management system interface;

[0153] If so, back up the hidden file system data in the FAT file system, and clear the hidden file system data in the encrypted hard drive to be added and the hidden file system data in the target RAID level;

[0154] If not, clear the hidden area of ​​the encrypted hard drive to be added;

[0155] In this embodiment, the encrypted hard disk hidden area to be added can only be selected from JBOD encrypted hard disks.

[0156] In this embodiment, if a file system exists on the target RAID level, the encrypted hard disk hidden area file system data needs to be backed up in the FAT file system before the data in the hidden area of ​​the hard disk to be added and the hidden area of ​​the target RAID level can be cleared; if the target RAID level does not have a file system, the encrypted hard disk hidden area to be added is cleared directly.

[0157] Step B-2: Calculate the available space according to the RAID rules that match each RAID level, and create the first file system on the target RAID level using the FAT file system;

[0158] Step B-3: Based on the created first file system, the encrypted hard disk RAID management system writes the data to be written to the hidden area of ​​the encrypted hard disk; the data to be written is the data of the created first file system and the backup data.

[0159] For example, after a user selects the target RAID level and the encrypted hard drive hidden area to be added, if a file system already exists on the target RAID level, it will be backed up. Then, all data in the hidden areas of the encrypted hard drive to be added and the target RAID level will be cleared, and the encrypted hard drive to be added will be set to the target RAID level. The file system will then be recreated on the target RAID level. If a file system was previously backed up, the backup data will be rewritten.

[0160] In this embodiment, as Figure 6 As shown, the method further includes:

[0161] C. The encrypted hard drive RAID management system removes the hidden area of ​​the encrypted hard drive;

[0162] The C includes:

[0163] Step C-1: Based on the notification that the pre-emptive clearing process is complete sent by the target encrypted hard disk, set the hidden area of ​​the encrypted hard disk to be removed as JBOD, and create a second file system in the hidden area of ​​the removed encrypted hard disk;

[0164] The pre-clearing process includes:

[0165] The FAT file system receives a second instruction from the user to determine whether the encrypted hard drive hidden area still exists at the target RAID level after removal; the second instruction is for the user to select the target RAID level and the encrypted hard drive hidden area to be removed in the encrypted hard drive RAID management system interface;

[0166] If so, back up the hidden file system data in the FAT file system, and clear the hidden file system data in the encrypted hard drive to be removed and the hidden file system data in the target RAID level;

[0167] If not, clear the hidden area of ​​the encrypted hard drive to be removed;

[0168] In this embodiment, the encrypted hard drive hidden area to be removed can only be selected from the RAID level.

[0169] In this embodiment, if the target RAID level still has an encrypted hard disk hidden area after removing the encrypted hard disk hidden area, the encrypted hard disk hidden area data needs to be backed up in the FAT file system before the data of the encrypted hard disk hidden area to be removed and the target RAID level hidden area can be cleared; if the encrypted hard disk hidden area does not exist on the target RAID level after removing the encrypted hard disk hidden area, the data of the encrypted hard disk hidden area to be removed and the target RAID level hidden area can be cleared directly.

[0170] Step C-2: Based on the created second file system, write the data of the second file system to the hidden area of ​​the removed encrypted hard drive, and determine whether the target RAID level has an encrypted hard drive hidden area after removal;

[0171] If so, proceed to step C-3;

[0172] Step C-3: Calculate the available space according to the RAID rules that match each RAID level, and create a third file system on the target RAID level in the FAT file system. Write the third file system data and backup data to the encrypted hard drive hidden area.

[0173] In this embodiment, as Figure 7 As shown, the method further includes:

[0174] D. The encrypted hard drive RAID management system writes a file to the hidden area of ​​the target encrypted hard drive;

[0175] The D includes:

[0176] Step D-1: The encrypted hard disk RAID management system receives a third instruction from the user or upper-layer application to determine whether the target RAID level or the hidden area of ​​the target encrypted hard disk is available; the third instruction is a write file command issued by the user or upper-layer application to the encrypted hard disk RAID management system.

[0177] If available, proceed to D-2;

[0178] If unavailable, the encrypted hard drive RAID management system will return an error message;

[0179] Step D-2: The FAT file system determines whether there is enough remaining space;

[0180] If so, proceed to D-3;

[0181] If not, the encrypted hard drive RAID management system returns an error message;

[0182] Step D-3: Based on the FAT file system, the target file is written to the target encrypted hard disk hidden area and the corresponding sector of the target encrypted hard disk hidden area according to the RAID rules or JBOD rules that match each RAID level.

[0183] For example, when a user or upper-layer application writes a target file, if the encrypted hard drive where the target file is located is configured with RAID, the system checks whether the target RAID level of the target file is available. If it is not available, the encrypted hard drive RAID management system returns an error message. If the target RAID level of the target file is available and there is enough remaining space in the encrypted hard drive hidden area, the target file is written to the encrypted hard drive hidden area according to the RAID rules that match each RAID level. If there is not enough remaining space in the encrypted hard drive hidden area, the encrypted hard drive RAID management system returns an error message.

[0184] If the target file is written to the encrypted hard drive's hidden area, which is a JBOD encrypted hard drive, the system checks if the JBOD encrypted hard drive is available. If it is not available, the encrypted hard drive RAID management system returns an error message. If it is available and there is enough remaining space in the encrypted hard drive's hidden area, the target file is written to the encrypted hard drive's hidden area according to the JBOD rules. If there is not enough remaining space in the encrypted hard drive's hidden area, the encrypted hard drive RAID management system returns an error message.

[0185] In this embodiment, as Figure 8 As shown, the method further includes:

[0186] E. The encrypted hard drive RAID management system reads files from the hidden area of ​​the target encrypted hard drive;

[0187] The E includes:

[0188] E-1. The encrypted hard disk RAID management system receives a fourth instruction from the user or upper-layer application to determine whether the target RAID level or the target encrypted hard disk hidden area is available; the fourth instruction is a file read command issued by the user or upper-layer application to the encrypted hard disk RAID management system.

[0189] If available, proceed to E-2;

[0190] If unavailable, the encrypted hard drive RAID management system will return an error message;

[0191] E-2 and FAT file systems determine whether the target file exists;

[0192] If so, proceed to E-3;

[0193] If not, the encrypted hard drive RAID management system returns an error message;

[0194] E-3. Based on the FAT file system, the target file is read, and the hidden area and the corresponding sector of the hidden area are read according to the RAID rules or JBOD rules that match each RAID level, and the read content is integrated.

[0195] For example, when a user or upper-layer application reads a target file, if the encrypted hard drive where the target file is located is configured with RAID, the system checks whether the target RAID level of the target file is available. If it is not available, the encrypted hard drive RAID management system returns an error message. If the target RAID level of the target file is available and the file exists in the FAT file system, the system reads the encrypted hard drive hidden area and corresponding sectors where the file is located according to the RAID rules matching each RAID level. The encrypted hard drive RAID management system integrates the read content and completes the operation of reading the file from the encrypted hard drive hidden area. If the file does not exist in the FAT file system, the encrypted hard drive RAID management system returns an error message.

[0196] When the encrypted hard drive containing the target file is configured with JBOD, the system checks if the JBOD encrypted hard drive is available. If it is not available, the encrypted hard drive RAID management system returns an error message. If it is available and the file exists in the FAT file system, the system reads the encrypted hard drive's hidden area and corresponding sectors according to the JBOD rules. The encrypted hard drive RAID management system then integrates the read content to complete the file reading operation from the encrypted hard drive's hidden area. If the file does not exist in the FAT file system, the encrypted hard drive RAID management system returns an error message.

[0197] This embodiment provides a RAID management method for encrypted hard disk hidden areas, which enables RAID construction and management of encrypted hard disk hidden areas that cannot be recognized by the operating system, thereby improving read and write efficiency and providing fault tolerance protection.

[0198] Example 3

[0199] This embodiment of a RAID management system for an encrypted hard drive hidden area includes:

[0200] Calling modules, multiple execution modules;

[0201] The calling module is used to call the dedicated interface of the encrypted hard disk hidden area to connect the encrypted hard disk hidden area RAID management system with the encrypted hard disk hidden area; the dedicated interface is located in the static library and dynamic library of the encrypted hard disk hidden area.

[0202] The multiple execution modules implement any of the RAID management methods for the hidden area of ​​encrypted hard drives.

[0203] This embodiment provides a RAID management system for encrypted hard disk hidden areas. By introducing an encrypted hard disk RAID management system, RAID can be built and managed even for encrypted hard disk hidden areas that cannot be recognized by the operating system, thereby improving read and write efficiency and providing fault tolerance protection.

[0204] In the description of this invention, it should be understood that the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this invention, "a plurality of" means two or more, unless otherwise explicitly specified.

[0205] In this invention, unless otherwise explicitly specified and limited, the terms "installation," "connection," "linking," and "fixing," etc., should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral part; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances.

[0206] In this invention, unless otherwise explicitly specified and limited, "above" or "below" the second feature can mean that the first and second features are in direct contact, or that they are in indirect contact through an intermediate medium. Furthermore, "above," "over," or "on top" the second feature can mean that the first feature is directly above or diagonally above the second feature, or simply indicates that the first feature is at a higher horizontal level than the second feature. "Below," "below," or "beneath" the second feature can mean that the first feature is directly below or diagonally below the second feature, or simply indicates that the first feature is at a lower horizontal level than the second feature.

[0207] In the description of this specification, the terms "one embodiment," "some embodiments," "embodiment," "example," "specific example," or "some examples," etc., refer to specific features, structures, materials, or characteristics described in connection with that embodiment or example, which are included in at least one embodiment or example of the present invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0208] Although embodiments of the present invention have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting the present invention. Those skilled in the art can make modifications, alterations, substitutions and variations to the above embodiments within the scope of the present invention.

Claims

1. A RAID management method for an encrypted hard drive hidden area, characterized in that, This includes the encryption hard drive RAID management system's ability to identify and restore hidden sectors on encrypted hard drives, including: S1. Receive the serial number sent by the hidden area of ​​the target encrypted hard drive, wherein the serial number is generated by the hidden area of ​​the target encrypted hard drive based on the user inserting the target encrypted hard drive; S2. Based on the serial number, determine whether the target encrypted hard disk hidden area is a new encrypted hard disk hidden area or an original encrypted hard disk hidden area recovered from a fault; If it is a new encrypted hard drive hidden area, jump to S3; If you are recovering from a fault, jump to S4; S3. Set the target encrypted hard disk hidden area to JBOD, obtain the available space of the target encrypted hard disk hidden area, and send it to the FAT file system. The FAT file system creates a file system for the encrypted hard disk hidden area, and the encrypted hard disk RAID management system writes the data to be written to the encrypted hard disk hidden area; the data to be written is the data of the file system created in the encrypted hard disk hidden area. JBOD refers to a standalone hard drive that is not configured with RAID. S4. Restore the target encrypted hard disk hidden area to its original configuration, and determine whether the encrypted hard disk hidden area is a JBOD encrypted hard disk hidden area; If not, determine the RAID level in the original configuration of the encrypted hard drive's hidden area; The original configuration was the configuration of the encrypted hard drive's hidden area before the failure was recovered.

2. The method according to claim 1, characterized in that, The target encrypted hard drive includes: Public area of ​​encrypted hard drive; Hidden area of ​​encrypted hard drive; The encrypted hard drive's hidden area is used for data storage and encryption / decryption operations.

3. The method according to claim 1, characterized in that, S4 includes: S401. If the target encrypted hard drive hidden area has a RAID level of RAID 0, restore RAID 0 to usable state and restore the encrypted hard drive hidden area. S402. If the target encrypted hard drive's hidden area RAID level is RAID 1, RAID 5, or RAID 10, recover the hidden area data according to the predefined RAID rules that match each RAID level, and recover the encrypted hard drive's hidden area. The RAID rules define different RAID levels.

4. The method according to claim 1, characterized in that, The method further includes: A. The encrypted hard drive RAID management system monitors the removal and failure of the encrypted hard drive's hidden area; A includes: A-1. Obtain the serial number of the target encrypted hard drive hidden area. Based on the serial number, determine whether the encrypted hard drive hidden area to which the serial number belongs is JBOD or RAID 0. If yes, proceed to A-2; otherwise, proceed to A-3. A-2. When the encrypted hard drive hidden area is JBOD, set the target encrypted hard drive hidden area to unavailable. When the encrypted hard drive hidden area is RAID 0, set RAID 0 to unavailable and obtain removal or failure information. A-3. The encrypted hard drive RAID management system obtains information on removal or failure.

5. The method according to claim 1, characterized in that, The method further includes: B. Add a hidden area for encrypted hard drives in the encrypted hard drive RAID management system; The B includes: B-1. Based on the notification that the pre-clearing process of the target encrypted hard drive is complete, set the hidden area of ​​the encrypted hard drive to be added to the target RAID level; The pre-clearing process includes: The FAT file system receives the user's first instruction and determines whether a file system exists at the target RAID level; the first instruction is for the user to select the target RAID level and the hidden area of ​​the encrypted hard drive to be added in the encrypted hard drive management system interface; If so, back up the hidden file system data in the FAT file system, and clear the hidden file system data in the encrypted hard drive to be added and the hidden file system data in the target RAID level; If not, clear the hidden area of ​​the encrypted hard drive to be added; B-2. Calculate the available space according to the RAID rules that match each RAID level, and the FAT file system creates the first file system on the target RAID level; B-3. ​​Based on the created first file system, the encrypted hard disk RAID management system writes the data to be written to the hidden area of ​​the encrypted hard disk; the data to be written is the data of the created first file system and the backup data.

6. The method according to claim 1, characterized in that, The method further includes: C. The encrypted hard drive RAID management system removes the hidden area of ​​the encrypted hard drive; The C includes: C-1. Based on the notification that the pre-emptive clearing process is complete sent by the target encrypted hard disk, set the hidden area of ​​the encrypted hard disk to be removed as JBOD, and create a second file system in the hidden area of ​​the removed encrypted hard disk; The pre-clearing process includes: The FAT file system receives a second instruction from the user to determine whether the encrypted hard drive hidden area still exists at the target RAID level after removal; the second instruction is for the user to select the target RAID level and the encrypted hard drive hidden area to be removed in the encrypted hard drive RAID management system interface; If so, back up the hidden file system data in the FAT file system, and clear the hidden file system data in the encrypted hard drive to be removed and the hidden file system data in the target RAID level; If not, clear the hidden area of ​​the encrypted hard drive to be removed; C-2. Based on the created second file system, write the data of the second file system to the hidden area of ​​the removed encrypted hard drive, and determine whether the target RAID level has an encrypted hard drive hidden area after removal; If so, proceed to C-3; C-3. Calculate the available space according to the RAID rules that match each RAID level, and create a third file system on the target RAID level in the FAT file system. Write the third file system data and backup data to the encrypted hard drive hidden area.

7. The method according to claim 1, characterized in that, The method further includes: D. The encrypted hard drive RAID management system writes a file to the hidden area of ​​the target encrypted hard drive; The D includes: D-1. The encrypted hard disk RAID management system receives a third instruction from the user or upper-layer application to determine whether the target RAID level or the target encrypted hard disk hidden area is available; the third instruction is a write file command issued by the user or upper-layer application to the encrypted hard disk RAID management system. If available, proceed to D-2; If unavailable, the encrypted hard drive RAID management system will return an error message; D-2. The FAT file system determines whether there is enough remaining space; If so, proceed to D-3; If not, the encrypted hard drive RAID management system returns an error message; D-3. The target file, based on the FAT file system, is written to the target encrypted hard disk hidden area and the corresponding sector of the target encrypted hard disk hidden area according to the RAID rules or JBOD rules that match each RAID level.

8. The method according to claim 1, characterized in that, The method further includes: E. The encrypted hard drive RAID management system reads files from the hidden area of ​​the target encrypted hard drive; The E includes: E-1. The encrypted hard disk RAID management system receives a fourth instruction from the user or upper-layer application to determine whether the target RAID level or the target encrypted hard disk hidden area is available; the fourth instruction is a file read command issued by the user or upper-layer application to the encrypted hard disk RAID management system. If available, proceed to E-2; If unavailable, the encrypted hard drive RAID management system will return an error message; E-2 and FAT file systems determine whether the target file exists; If so, proceed to E-3; If not, the encrypted hard drive RAID management system returns an error message; E-3. Based on the FAT file system, the target file is read, and the hidden area and the corresponding sector of the hidden area are read according to the RAID rules or JBOD rules that match each RAID level, and the read content is integrated.

9. The method according to claim 7 or 8, characterized in that, When the target encrypted hard drive's hidden area is configured with RAID, determine the availability of the target RAID level. When the target encrypted hard disk hidden area is configured as JBOD, determine the availability of the encrypted hard disk hidden area.

10. A RAID management system for an encrypted hard drive hidden area, characterized in that, include: Calling modules, multiple execution modules; The calling module is used to call the dedicated interface of the encrypted hard disk hidden area to connect the encrypted hard disk hidden area RAID management system with the encrypted hard disk hidden area; the dedicated interface is located in the static library and dynamic library of the encrypted hard disk hidden area. The plurality of execution modules implement any one of the RAID management methods for the encrypted hard disk hidden area according to claims 1 to 9.

Images