Data erasing method and apparatus

Abstract

This invention proposes a data erasure method and apparatus, relating to the field of data erasure technology, and applied to an Android system terminal. The Android system terminal communicates with a controller and an authentication server. The method includes: obtaining an erasure program and an erasure certificate; activating the erasure program in the Android system terminal to erase data and applications on the Android system terminal; selecting a corresponding erasure algorithm from the erasure program to erase the remaining physical storage media on the Android system terminal according to the type of the remaining physical storage media; generating an erasure report using the erasure certificate, based on the erasure algorithm, erasure duration, and erasure capacity information; querying the erasure report from the authentication server; and verifying the erasure results based on the erasure report. This method enables automatic and complete erasure of data on the Android system terminal without root access, improving data erasure efficiency and enabling verification of the erasure results.

Description

Technical Field

[0001] This invention relates to the field of data erasure technology, and more particularly to a data erasure method and apparatus. Background Technology

[0002] This section is intended to provide background or context for embodiments of the present invention. The description herein is not intended to imply that it is prior art simply because it is included in this section.

[0003] Mobile phones retain a large amount of users' personal privacy data. When users consider selling, donating, or recycling their mobile devices, they need to consider running data erasure software to ensure that no content can be retrieved. Ordinary file erasure methods, including factory resets, are based on erasing index information and do not actually erase the file data. With the help of content analysis tools, malicious individuals may be able to recover varying degrees of the original information.

[0004] Existing technology 1: By obtaining access permissions to sensitive information, sensitive information can be deleted or erased, and virtual information can be generated to overwrite it; by obtaining access permissions to the phone's memory, random data can be generated to overwrite the original information. However, because phone users review application permissions, access to sensitive information, and read / write operations to the phone's memory, permission confirmation dialog boxes will forcibly pop up, requiring manual confirmation. This method makes products using this technology unsuitable for unattended environments and cannot be used for automated execution.

[0005] Existing technology two: Linux-based data erasure methods. The simplest and most representative method is using the `dd` command provided by Linux. For example, the command `sudo dd if= / dev / urandom of= / dev / sdX bs=10M` can write zeros to the entire target disk. These methods achieve their purpose by directly writing data to the disk partition. However, in Android, ordinary users do not have direct disk access; root access (superuser) is required. Once a user roots their phone, they risk losing the manufacturer's warranty. Therefore, this method is not suitable for widespread adoption. Existing technology two does not consider the differences in data storage, verification, and redundancy mechanisms of different storage media, nor does it consider the more efficient data erasure solutions inherent in different storage media. For specific storage media such as NAND flash (NOT AND flash), existing solutions can only erase the physical disk data corresponding to the logical disk, and cannot guarantee the erasure of all physical disk data. Repeated erasures may also reduce the lifespan of the storage media.

[0006] Existing technology three involves an interaction between the controller and the Android device to execute the erasure process. During this process, the controller and Android device cannot disconnect, and the Android device cannot autonomously complete the erasure process, resulting in weak robustness. Furthermore, existing technology three only addresses specific privacy data and does not consider general file system-based erasure issues; it does not consider the differences in data storage, verification, and redundancy mechanisms across different storage media, nor does it consider the more efficient data erasure solutions inherent in different storage media. For specific storage media such as NAND flash, existing solutions can only erase the physical disk data corresponding to the logical disk, and cannot guarantee the erasure of all physical disk data.

[0007] In addition, existing technologies only address the erasure of data, without verifying the results after data erasure, making it impossible to verify the data deletion results. Summary of the Invention

[0008] To address the problems existing in the prior art, this invention proposes a data erasure method and apparatus that can automatically and completely erase data on an Android system terminal without root access, erase all physical disk data, improve data erasure efficiency, and enable verification of erasure results.

[0009] In one embodiment of the present invention, a data erasure method is proposed, applied to an Android system terminal, wherein the Android system terminal is communicatively connected to a controller and an authentication server, and the method includes: Obtain the erasure procedure and erasure certificate; the erasure certificate is issued to the controller by the authentication server based on the controller's identity information, and is received and forwarded by the controller; the erasure procedure is sent by the controller based on the erasure certificate; Enable the eraser in the Android system terminal to erase data and applications on the Android system terminal; Based on the type of the remaining physical storage media on the Android system terminal, the corresponding erasure algorithm is selected in the erasure program to erase the remaining physical storage media on the Android system terminal. Using the erase certificate, an erase report is generated based on the erase algorithm, erase duration, and erase capacity information; Call the authentication server to query the erasure report, and verify the erasure results based on the erasure report.

[0010] In one embodiment, the present invention also provides a data erasure device applied to an Android system terminal, the Android system terminal being communicatively connected to a controller and an authentication server, the device comprising: The acquisition module is used to acquire the erasure program and erasure certificate; the erasure certificate is issued to the controller by the authentication server based on the controller's identity information, and is received and forwarded by the controller; the erasure program is sent by the controller based on the erasure certificate. The enable module is used to enable the eraser in the Android system terminal to erase data and applications on the Android system terminal. The erase module is used to select the corresponding erase algorithm in the erase program to erase the remaining physical storage media on the Android system terminal according to the type of the remaining physical storage media on the Android system terminal. The generation module is used to generate an erasure report based on the erasure certificate, erasure algorithm, erasure duration, and erasure capacity information. The verification module is used to call the authentication server to query the erasure report and verify the erasure results based on the erasure report.

[0011] In one embodiment, the present invention also provides a computer device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement a data erasure method.

[0012] In this embodiment of the invention, a computer-readable storage medium is also provided, wherein the computer-readable storage medium stores a computer program, and the computer program implements a data erasure method when executed by a processor.

[0013] In this embodiment of the invention, a computer program product is also proposed, which includes a computer program that, when executed by a processor, implements a data erasure method.

[0014] Compared with existing technologies such as access permission-based or Linux-based solutions, the data erasure method proposed in this invention obtains an erasure program and an erasure certificate. The erasure certificate is issued by an authentication server to the controller based on the controller's identity information, and is received and forwarded by the controller. The erasure program is sent by the controller based on the erasure certificate. The erasure program in the Android system terminal is activated to erase the data and applications on the Android system terminal. According to the type of the remaining physical storage medium on the Android system terminal, the corresponding erasure algorithm is selected in the erasure program to erase the remaining physical storage medium on the Android system terminal. Using the erasure certificate, an erasure report is generated based on the erasure algorithm, erasure duration, and erasure capacity information. The authentication server is called to query the erasure report, and the erasure results are verified based on the erasure report. This method can automatically and completely erase the data of the Android system terminal without root access, erasing all physical disk data, improving the efficiency of data erasure, and enabling verification of the erasure results. Attached Figure Description

[0015] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0016] Figure 1 This is a flowchart of a data erasure method according to an embodiment of the present invention.

[0017] Figure 2 This is a flowchart illustrating a specific example of a data erasure method according to an embodiment of the present invention.

[0018] Figure 3 This is a schematic diagram of the data erasure device architecture according to an embodiment of the present invention.

[0019] Figure 4 This is a schematic diagram of the architecture of a specific example of a data erasure device according to an embodiment of the present invention.

[0020] Figure 5 This is a schematic diagram of a computer device structure according to an embodiment of the present invention. Detailed Implementation

[0021] The principles and spirit of the invention will now be described with reference to several exemplary embodiments. It should be understood that these embodiments are given merely to enable those skilled in the art to better understand and implement the invention, and are not intended to limit the scope of the invention in any way. Rather, these embodiments are provided to make this disclosure more thorough and complete, and to fully convey the scope of this disclosure to those skilled in the art.

[0022] Those skilled in the art will recognize that embodiments of the present invention can be implemented as a system, apparatus, device, method, or computer program product. Therefore, this disclosure can be specifically implemented in the following forms: entirely hardware, entirely software (including firmware, resident software, microcode, etc.), or a combination of hardware and software.

[0023] According to an embodiment of the present invention, a data erasure method and apparatus are proposed, relating to the field of data erasure technology.

[0024] The principles and spirit of the present invention will be explained in detail below with reference to several representative embodiments.

[0025] Figure 1 This is a flowchart of a data erasure method according to an embodiment of the present invention, applied to an Android system terminal. The Android system terminal communicates with both a controller and an authentication server. Figure 1 As shown, the method includes: Step 101: Obtain the erasure program and erasure certificate; the erasure certificate is issued by the authentication server to the controller based on the controller's identity information, and is received and forwarded by the controller; the erasure program is sent by the controller based on the erasure certificate. Step 102: Activate the eraser in the Android system terminal to erase the data and applications on the Android system terminal; Step 103: Based on the type of the remaining physical storage media on the Android system terminal, select the corresponding erasure algorithm in the erasure program to erase the remaining physical storage media on the Android system terminal. Step 104: Using the erase certificate, generate an erase report based on the erase algorithm, erase duration, and erase capacity information; Step 105: Call the authentication server to query the erasure report and verify the erasure results based on the erasure report.

[0026] This method, through the principle of data rewriting, ensures that the original information is completely erased and cannot be recovered. Simultaneously, the data erasure results can be verified, providing technical support for the post-erasure processing of data on second-hand mobile phones. In this embodiment, a process of constructing and writing specific file content based on the storage type is added to ensure the complete erasure of the physical disk space, reducing wear and tear on the storage medium. It enables automatic and complete erasure of data from Android system terminals without root access, erasing all physical disk data, improving data erasure efficiency, and allowing for verification of the erasure results.

[0027] To provide a clearer explanation of the above data erasure method, each step will be described in detail below.

[0028] In one embodiment, the data erasure method is applied to an Android system terminal, which communicates with both the controller and the authentication server.

[0029] In one embodiment, the authentication server is responsible for issuing data erasure certificates; the controller is responsible for erasing the data and generating verifiable erasure results, which are then uploaded to the authentication server for record-keeping.

[0030] In one embodiment, in step 101, the controller's identity information can be preset, and the controller requests a certificate from the authentication server; the authentication server verifies the controller's identity information, and after the verification is passed, issues an erasure certificate to the controller; the controller pushes the erasure program and erasure certificate to the Android system terminal based on the erasure certificate.

[0031] In one embodiment, developer mode can be enabled on the Android system terminal, and the ADB (Android Debug Bridge) debugging switch can be selected. The Android system terminal is then connected to the controller, the controller transmits the eraser to the Android system terminal, and starts the eraser on the Android system terminal. At this point, the connection between the controller and the Android system terminal can be broken, and the Android system terminal can complete subsequent tasks independently.

[0032] In one embodiment, step 102, activating the eraser in the Android system terminal to erase data and applications on the Android system terminal, may include: activating the eraser in the Android system terminal to restore the Android system terminal to factory settings; receiving user input instructions to delete data and applications on the Android system terminal, and deleting applications according to the instructions. For example, initially deleting data and applications on the Android system terminal: using methods such as "enabling factory reset" or "installing software" to complete the initial deletion of data and applications on the Android system terminal.

[0033] In one embodiment, in step 103, based on the type of the remaining physical storage media on the Android system terminal, a corresponding erasure algorithm is selected in the erasure program to erase the remaining physical storage media on the Android system terminal. The type of physical storage media to be erased is determined, and the most suitable erasure algorithm is selected in the erasure program. For example, for physical storage media types such as NOR flash (Not Or flash) and NAND flash, where the erase program pushed by the controller provides a data erasure method, the controller's data erasure command can be directly driven to clear the physical disk cache data, achieving thorough data erasure, reducing the number of erasures, and minimizing wear and tear on the storage media.

[0034] Figure 2 This is a flowchart illustrating a specific example of a data erasure method according to an embodiment of the present invention, such as... Figure 2 As shown, in one embodiment, the method may further include: Step 201: If no erasure algorithm corresponding to the type of the remaining physical storage medium is found in the erasure program, obtain an erasure program with ADB privileges from the controller. Step 202: Generate an erase command based on the eraser with ADB permissions and the system version information of the Android system terminal, and erase the remaining physical storage media.

[0035] In this embodiment, the erase command is as follows: Clear contact data: content delete --uri content: / / com.android.contacts / data; Clear SMS data: content delete --uri content: / / sms; Alternatively, if you are using Android 4.4 or later, you can use the following command to clear SMS data: pm clear com.android.providers.telephony; Clear call logs: content delete --uri content: / / call_log / calls; Clear calendar data: content delete --uri content: / / com.android.calendar / e.

[0036] In one embodiment, the method further includes: receiving random sensitive data imported by the controller via ADB commands; the quantity of the random sensitive data is greater than the quantity of sensitive data in the Android system terminal; overwriting the corresponding sensitive data location with the random sensitive data according to the category of the random sensitive data; deleting the random sensitive data after overwriting; generating random data according to the erasure program and filling the storage space of the Android system terminal with the random data; and enabling the erasure program in the Android system terminal to restore the Android system terminal to factory settings. For storage media where the driver controller does not provide a data erasure method, the erasure program generates garbage data according to certain standards and rules, imports it into the phone via ADB commands, and overwrites the location of the deleted sensitive information; the quantity of the garbage data is greater than the quantity of deleted sensitive information; deleting the fictitious garbage data after overwriting; the erasure program generates random data to fill the remaining available logical storage space of the phone; and the phone is restored to factory settings again, completing one data erasure operation.

[0037] In one embodiment, the method may further include: if the erasure result fails verification, repeating the data erasure method until the erasure result passes verification. Depending on the scenario requirements and specific standards, the erasure steps can be repeated multiple times, ensuring a more secure and reliable result.

[0038] In one embodiment, step 105, which involves calling the authentication server to query the erasure report and verifying the erasure result based on the erasure report, may include: generating fingerprint information of the Android system terminal based on the serial number and IMEI number of the Android system terminal; querying the erasure report from the authentication server based on the fingerprint information of the Android system terminal; and verifying the erasure result based on the erasure report.

[0039] In this embodiment, the fingerprint information of the Android system terminal is obtained, and information such as the erasure method, erasure duration, and erasure capacity are used to generate an erasure report using the obtained encrypted erasure certificate. The report is then uploaded to the authentication server for backup. In a purely offline scenario, the report file does not need to be uploaded and remains on the Android system terminal. The erasure report is retrieved from the authentication server using the fingerprint information of the Android system terminal to verify and authenticate the erasure results.

[0040] The following detailed description is based on a specific embodiment.

[0041] 1. The data erasure controller user is authorized, sets the controller identity information, and requests an erasure certificate from the authentication server.

[0042] 2. The authentication server verifies the controller's identity information, generates a CA certificate using the ECC algorithm, and issues a CA erasure certificate to the controller.

[0043] 3. Initially delete data and applications on the phone.

[0044] 4. For the first time, use the "Enable Factory Reset" or "Install Software" method to complete the initial deletion of data and applications on the phone.

[0045] 5. Enable developer mode on your phone and select the "Allow ADB debugging" switch, then connect the phone to the controller.

[0046] 6. The type of storage medium to be erased is determined by the operating system system call. If it is a medium such as NAND Flash or NOR Flash, where the data erase command is provided by the driver controller, the operating system calls the controller to release the physical space corresponding to the logical space of the erased data using the TRIM instruction. The TRIM instruction is a technical instruction of the ATA8-ACS specification. adb shell fstrim -v / data adb shell fstrim -v / cache adb shell fstrim -v / system 7. If the storage media driver controller does not provide a data erase command, the controller pushes the erase program to the phone via the ADB push command and starts the erase program via ADB instructions. Since it is started via ADB commands, it can be ensured that the erase program has ADB permissions.

[0047] 8. Erase the program to delete sensitive information on your phone: Sensitive information on a mobile phone typically includes contacts, text messages, call logs, or calendar entries; these can be erased by executing corresponding Android built-in commands. Since the eraser has ADB permissions, the following commands can be executed successfully.

[0048] Clear contact data: content delete --uri content: / / com.android.contacts / data Clear SMS data: content delete --uri content: / / sms Alternatively, if you are using Android 4.4 or later, you can use the following command to clear SMS data: pm clear com.android.providers.telephony Clear call history: content delete --uri content: / / call_log / calls Clear calendar data: content delete --uri content: / / com.android.calendar / e 9. Generate fictitious random sensitive information and import it into the Android system.

[0049] The system generates fictitious, random sensitive information, with the number of such sensitive information exceeding the number of deleted sensitive information. The generated information is then imported into the phone using Android's built-in commands.

[0050] Import contact data: To import contact data in VCF format (usually a .vcf file) in the Android device's file system, use the following command: am start -t text / x-vcard -d file: / / / sdcard / contact_file.vcf -aandroid.intent.action.VIEW com.android.contacts.

[0051] Import SMS data: Save the SMS data as an XML file.

[0052] Use the following command to import the XML file into the SMS database: content import --uri content: / / sms / --path / sdcard / sms_file.xml.

[0053] Import calendar data: To save calendar data as an ICS file, use the following command to import the ICS file into the calendar database: content import --uri content: / / com.android.calen.

[0054] Import call logs: Importing call logs is relatively complex, usually requiring modification of the system database and potentially root access. However, without root access, call logs can be generated by controlling the phone to dial numbers using ADB commands. am start -a android.intent.action.CALL -d tel:PHONE_NUMBER Replace "PHONE_NUMBER" with the phone number you want to dial.

[0055] 10. After the overwrite is complete, delete the fictitious random sensitive information; the same method as steps 3 and 4 can be used.

[0056] 11. Generate data according to the data generation algorithm. For specific types of devices, a fast erasure algorithm can be used to fill the remaining available storage space of the phone and complete the erasure.

[0057] The system reads the remaining available storage space on the phone. Since a phone reset or deletion of sensitive information has already occurred, the remaining available storage space is likely at its maximum. Random data of the same size as the available storage space is generated, also reaching its maximum size. Furthermore, using the maximum available space for random data within the Android device's file system ensures complete overwriting of the original data.

[0058] Fast Erasure Algorithm: With the increasing size of mobile phone storage systems, a complete erasure process takes a considerable amount of time. Here, different data can be generated based on the memory type to achieve fast data erasure. For NOR flash memory, all zeros are generated. While flash devices can directly change from 1 to 0, changing from 0 to 1 requires erasure. Therefore, writing all zeros avoids the erasure action, achieving both effective data erasure and high speed.

[0059] The controller obtains the phone's serial number, IMEI number, and other information to generate a fingerprint. Based on the fingerprint, it queries the authentication server for an erasure report and verifies the erasure result according to the report.

[0060] The verifiable method for completely erasing data from an Android system terminal without root access based on ADB mode provided by this invention can provide regulatory agencies and authoritative technical departments with a method for data erasure, management, and traceability in the safe recycling of used mobile phones, providing technical support for data erasure and promoting the healthy development of the used mobile phone recycling industry.

[0061] It should be noted that although the operation of the method of the present invention has been described in a specific order in the above embodiments and figures, this does not require or imply that the operations must be performed in that specific order, or that all the operations shown must be performed to achieve the desired result. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into one step, and / or one step may be broken down into multiple steps.

[0062] After introducing the method of exemplary embodiments of the present invention, the following references are made. Figure 3 A data erasure apparatus according to an exemplary embodiment of the present invention will be described.

[0063] The implementation of the data erasure device can refer to the implementation of the method described above, and repeated details will not be repeated. The term "module" or "unit" used below can refer to a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0064] Based on the same inventive concept, this invention also proposes a data erasure device applied to an Android system terminal, wherein the Android system terminal communicates with both a controller and an authentication server, such as... Figure 3 As shown, the device may include: The acquisition module 301 is used to acquire the erasure program and erasure certificate; the erasure certificate is issued to the controller by the authentication server based on the controller's identity information, and is received and forwarded by the controller; the erasure program is sent by the controller based on the erasure certificate. Module 302 is used to enable the erasure program in the Android system terminal to erase data and applications on the Android system terminal. The erasure module 303 is used to select the corresponding erasure algorithm in the erasure program to erase the remaining physical storage media on the Android system terminal according to the type of the remaining physical storage media on the Android system terminal. The generation module 304 is used to generate an erasure report based on the erasure certificate, erasure algorithm, erasure duration, and erasure capacity information. The verification module 305 is used to call the authentication server to query the erasure report and verify the erasure result based on the erasure report.

[0065] In one embodiment, enabling module 302 is specifically used for: Enabling the eraser in the Android device will restore the Android device to factory settings. It receives user input commands to delete data and applications on the Android system terminal, and deletes the applications according to the commands.

[0066] Figure 4 This is a schematic diagram of the architecture of a specific example of a data erasure device according to an embodiment of the present invention. In one embodiment, the device may further include: an ADB erasure module 401, used to obtain an erasure program with ADB permissions from the controller if no erasure algorithm corresponding to the category of the remaining physical storage medium is found in the erasure program; generate an erasure command based on the erasure program with ADB permissions and the system version information of the Android system terminal, and erase the remaining physical storage medium.

[0067] In one embodiment, the device further includes: a sensitive data erasure module, configured to receive random sensitive data imported by the controller via ADB commands; the number of random sensitive data is greater than the number of sensitive data in the Android system terminal; according to the category of the random sensitive data, the random sensitive data is overwritten to the location of the corresponding sensitive data; after overwriting, the random sensitive data is deleted; random data is generated according to the erasure program, and the random data is used to fill the storage space of the Android system terminal; the erasure program in the Android system terminal is activated to restore the Android system terminal to factory settings.

[0068] In one embodiment, the apparatus further includes a repeated erasure module, configured to repeatedly execute the data erasure method if the erasure result fails verification, until the erasure result passes verification.

[0069] In one embodiment, the verification module 305 is specifically used for: Generate fingerprint information for the Android system terminal based on its serial number and IMEI number. The erase report is retrieved from the authentication server based on the fingerprint information of the Android system terminal, and the erase result is verified based on the erase report.

[0070] It should be noted that although several modules of the data erasure apparatus have been mentioned in the detailed description above, this division is merely exemplary and not mandatory. In fact, according to embodiments of the present invention, the features and functions of two or more modules described above can be embodied in a single module. Conversely, the features and functions of a single module described above can be further divided and embodied by multiple modules.

[0071] Based on the aforementioned inventive concept, such as Figure 5 As shown, the present invention also proposes a computer device 500, including a memory 510, a processor 520, and a computer program 530 stored in the memory 510 and executable on the processor 520. When the processor 520 executes the computer program 530, it implements the aforementioned data erasure method.

[0072] Based on the aforementioned inventive concept, the present invention proposes a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the aforementioned data erasure method.

[0073] Based on the aforementioned inventive concept, the present invention proposes a computer program product, which includes a computer program that, when executed by a processor, implements a data erasure method.

[0074] Compared with existing technologies such as access permission-based or Linux-based solutions, the data erasure method proposed in this invention obtains an erasure program and an erasure certificate. The erasure certificate is issued by an authentication server to the controller based on the controller's identity information, and is received and forwarded by the controller. The erasure program is sent by the controller based on the erasure certificate. The erasure program in the Android system terminal is activated to erase the data and applications on the Android system terminal. According to the type of the remaining physical storage medium on the Android system terminal, the corresponding erasure algorithm is selected in the erasure program to erase the remaining physical storage medium on the Android system terminal. Using the erasure certificate, an erasure report is generated based on the erasure algorithm, erasure duration, and erasure capacity information. The authentication server is called to query the erasure report, and the erasure results are verified based on the erasure report. This method can automatically and completely erase the data of the Android system terminal without root access, erasing all physical disk data, improving the efficiency of data erasure, and enabling verification of the erasure results.

[0075] The acquisition, storage, use, and processing of data in this application comply with relevant laws and regulations.

[0076] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0077] This invention is described with reference to flowchart illustrations and / or block diagrams of methods and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0078] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0079] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0080] Finally, it should be noted that the above-described embodiments are merely specific implementations of the present invention, used to illustrate the technical solutions of the present invention, and not to limit it. The scope of protection of the present invention is not limited thereto. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments within the technical scope disclosed in the present invention, or make equivalent substitutions for some of the technical features; and these modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A data erasure method, characterized in that, Applied to Android system terminals, where the Android system terminal communicates with both a controller and an authentication server, the method includes: Obtain the erasure procedure and erasure certificate; the erasure certificate is issued to the controller by the authentication server based on the controller's identity information, and is received and forwarded by the controller; the erasure procedure is sent by the controller based on the erasure certificate; Enable the eraser in the Android system terminal to erase data and applications on the Android system terminal; Based on the type of the remaining physical storage media on the Android system terminal, the corresponding erasure algorithm is selected in the erasure program to erase the remaining physical storage media on the Android system terminal. Using the erase certificate, an erase report is generated based on the erase algorithm, erase duration, and erase capacity information; Call the authentication server to query the erasure report, and verify the erasure results based on the erasure report; If no erase algorithm corresponding to the type of the remaining physical storage medium is found in the eraser, obtain an eraser with Android Debug Bridge (ADB) permissions from the controller. The erase command is generated based on the eraser with ADB privileges and the system version information of the Android system terminal, and the remaining physical storage media is erased.

2. The method as described in claim 1, characterized in that, Enable the eraser in the Android system terminal to erase data and applications on the Android system terminal, including: Enabling the eraser in the Android device will restore the Android device to factory settings. It receives user input commands to delete data and applications on the Android system terminal, and deletes the applications according to the commands.

3. The method as described in claim 1, characterized in that, Also includes: Receive random sensitive data imported by the controller via ADB commands; The amount of random sensitive data is greater than the amount of sensitive data in the Android system terminal; Based on the category of the random sensitive data, overwrite the corresponding sensitive data location with the random sensitive data; After the overwrite is complete, delete any random sensitive data. Random data is generated based on the erasure procedure, and the random data is used to fill the storage space of the Android system terminal. Enabling the eraser in the Android device will restore the Android device to factory settings.

4. The method as described in claim 1, characterized in that, Also includes: If the erasure result fails the verification, repeat the method described in claim 1 until the erasure result passes the verification.

5. The method as described in claim 1, characterized in that, The system queries the authentication server for the erasure report and verifies the erasure results based on the report, including: The fingerprint information of the Android system terminal is generated based on the serial number and IMEI information of the Android system terminal. The erase report is retrieved from the authentication server based on the fingerprint information of the Android system terminal, and the erase result is verified based on the erase report.

6. A data erasure device, characterized in that, An application for Android system terminals, wherein the Android system terminals communicate with a controller and an authentication server respectively, the device comprising: The acquisition module is used to acquire the erasure program and erasure certificate; the erasure certificate is issued to the controller by the authentication server based on the controller's identity information, and is received and forwarded by the controller; the erasure program is sent by the controller based on the erasure certificate. The enable module is used to enable the eraser in the Android system terminal to erase data and applications on the Android system terminal. The erase module is used to select the corresponding erase algorithm in the erase program to erase the remaining physical storage media on the Android system terminal according to the type of the remaining physical storage media on the Android system terminal. The generation module is used to generate an erasure report based on the erasure certificate, erasure algorithm, erasure duration, and erasure capacity information. The verification module is used to call the authentication server to query the erasure report and verify the erasure results based on the erasure report; The ADB erasure module is used to obtain an erasure program with ADB permissions from the controller if no erasure algorithm corresponding to the type of the remaining physical storage medium is found in the erasure program; and to generate an erasure command based on the erasure program with ADB permissions and the system version information of the Android system terminal to erase the remaining physical storage medium.

7. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the method of any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method of any one of claims 1 to 5.

9. A computer program product, characterized in that, The computer program product includes a computer program that, when executed by a processor, implements the method of any one of claims 1 to 5.

Images