Solid-state electronic disk soft destruction method

Abstract

The invention discloses a solid-state electronic disk soft destruction method, which comprises a command trigger mode and an external pin pull-down trigger mode, and the command trigger mode and the external pin pull-down trigger mode run independently. The method has the beneficial effects that by setting the command triggering mode and the external pin pull-down triggering mode, a user can select the corresponding soft destroying mode according to the corresponding condition requirement, and multiple times of coverage erasing are performed in the soft destroying process, so that a data recovery tool can be prevented from recovering the data, and the data recovery efficiency is improved. It is ensured that data in the solid-state electronic disk is thoroughly destroyed, and data safety is ensured.

Description

Technical Field

[0001] The invention relates to the technical field of information security, in particular to a soft destruction method for a solid-state electronic disk. Background Art

[0002] In the information age, data security has become the top priority for all walks of life. Especially in the military field, data confidentiality and security are even more important. With the widespread application of solid-state electronic disks in military equipment and communication systems, how to safely destroy the data in them has become an urgent problem that needs to be solved.

[0003] The destruction of data in traditional solid-state electronic disks usually requires physical destruction or the use of special equipment. Although physical destruction methods can ensure that data cannot be recovered, they will generate a large amount of electronic waste, which will have an adverse impact on the environment. In addition, some special data destruction equipment may generate electromagnetic radiation or chemical pollution, which will also cause certain harm to the environment and human health. The use of special equipment requires additional investment and maintenance costs, which limits its popularity in practical applications. Summary of the invention

[0004] The purpose of the present invention is to overcome the shortcomings of the prior art and provide a method for soft destruction of a solid-state electronic disk.

[0005] The object of the present invention is achieved by the following technical solutions: A method for soft destruction of a solid-state electronic disk, comprising a command trigger mode and an external pin pull-down trigger mode, and the command trigger mode and the external pin pull-down trigger mode operate independently of each other; When soft destruction is performed by command triggering, the following steps are included: S1: The host communicates with the solid-state electronic disk through an interface; S2: Build a soft-destruction command package and set command parameters; S3: Serialize the command packet and then send the command packet to the solid-state electronic disk; S4: The host records the command log; S5: After receiving the command packet, the solid-state electronic disk feeds back a response to the host. According to the response status of the solid-state electronic disk, the host determines whether the command is successfully executed; S6: The solid-state electronic disk enters the idle state and is soft-destroyed; When the external pin is pulled low to trigger, the following steps are included: A1: The external control device pulls down the specific pin on the solid-state electronic disk to a low level through the hardware interface. When the pin level is at a low level for 1 second, the timer records and proceeds to the next step. Otherwise, the timer is reset and returns to the initial state. A2: The trigger event is matched with the predetermined destruction trigger condition. If the match is successful, proceed to the next step; A3: The solid-state electronic disk is soft-destroyed using the method of step S6.

[0006] Preferably, in step S2, the key fields in the command packet include command type, destruction method and target drive letter, and the command parameters include command type field, destruction method field and target drive letter field.

[0007] Preferably, in step S4, the log information includes sending time, command type, destruction method and target drive letter.

[0008] Preferably, step S5 further includes the following steps: S51: The solid-state electronic disk receives a command from the host through the internal NVMe controller, and parses the received command packet through the NVMe controller; S52: extract the destruction mode parameters from the command packet, and verify whether all the parameters in the command packet are valid one by one. After the verification is completed, proceed to the next step; S53: The solid-state electronic disk records the current command status, including the command type, destruction method, target drive letter, and command receiving timestamp; S54: Determine the command type and destruction method, and the solid state electronic disk feeds back a response to the host.

[0009] Preferably, step S6 further includes the following steps: S61: The solid-state electronic disk performs a preliminary check on the system. If there are unfinished tasks, the system will wait for the task to be completed or terminate the task directly. After the check is completed, the solid-state electronic disk enters an idle state; S62: The solid-state electronic disk deletes the file system table and index used for data storage, and resets the directory structure; S63: Delete the counter recording the valid data block; S64: Erase all disk data by multiple overwrites; S65: The solid-state electronic disk feeds back a completion signal to the host through the interface.

[0010] Preferably, step S64 further includes the following steps: S64.1: Set the number of overwrite times and determine the overwrite mode; S64.2: traverse all storage units on the solid-state electronic disk block by block, and during the traversal process, the storage units are overwritten multiple times; S64.3: After each overwriting operation is completed, record the current overwriting progress; S64.4: After all storage units have been overwritten multiple times according to the set overwriting times, a final check is performed.

[0011] Preferably, in step S64.1, the overwriting mode includes all-zero overwriting, all-one overwriting and random data overwriting.

[0012] Preferably, in step S64.2, each storage cell is covered for the first time using an all-zero cover, each storage cell is covered for the second time using an all-one cover, and each storage cell is covered for the third time using a random data cover.

[0013] The present invention has the following advantages: by setting a command trigger mode and an external pin pull-down trigger mode, the present invention allows the user to select a corresponding soft destruction mode according to the corresponding situation requirements, and performs multiple overwriting and erasing during the soft destruction process, thereby preventing data recovery tools from recovering data, ensuring that the data in the solid-state electronic disk is completely destroyed, and ensuring data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 This is a schematic diagram of the structure of the soft destruction process in command trigger mode; Figure 2 This is a structural diagram of the soft destruction process using an external pin low trigger method. DETAILED DESCRIPTION

[0015] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0016] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0017] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features of the embodiments may be combined with each other.

[0018] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0019] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inside", "outside", etc. indicate positions or positional relationships based on the positions or positional relationships shown in the accompanying drawings, or the positions or positional relationships in which the product of the invention is usually placed when in use, or the positions or positional relationships commonly understood by those skilled in the art, which are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0020] In the description of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", and "connect" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0021] In this embodiment, if Figure 1 and Figure 2 As shown, a method for soft destruction of a solid-state electronic disk includes a command trigger mode and an external pin pull-down trigger mode, and the command trigger mode and the external pin pull-down trigger mode operate independently of each other; When soft destruction is performed by command triggering, the following steps are included: S1: The host communicates with the solid-state electronic disk through an interface; specifically, the interface is an NVMe command interface, which ensures that the host's NVMe driver and the solid-state electronic disk have been correctly initialized and successfully linked, and the communication path between the host and the solid-state electronic disk is normal, facilitating communication with the solid-state electronic disk.

[0022] S2: Build a soft-destruction command package and set command parameters; S3: Serialize the command packet and then send it to the solid-state electronic disk; specifically, serialize the command packet into a format that complies with the NVMe protocol, and then send the serialized command packet to the solid-state electronic disk so that the solid-state electronic disk can correctly parse and process it. At the same time, the error checking and retransmission mechanism is used to ensure that there is no data loss or damage during the transmission of the command packet, thereby ensuring the integrity of the command packet.

[0023] S4: The host records the command log; S5: After receiving the command packet, the solid-state electronic disk feeds back a response to the host. According to the response status of the solid-state electronic disk, the host determines whether the command is successfully executed; S6: The solid-state electronic disk enters the idle state and is soft-destroyed; When the external pin is pulled low to trigger, the following steps are included: A1: The external control device pulls down the specific pin on the solid-state electronic disk to a low level through the hardware interface. When the pin level is at a low level for 1 second, the timer records and proceeds to the next step. Otherwise, the timer is reset and returns to the initial state. A2: The trigger event is matched with the predetermined destruction trigger condition. If the match is successful, proceed to the next step; A3: The solid-state electronic disk is soft-destroyed by the method of step S6. Specifically, when the external pin is pulled down to trigger, the external control device pulls down the specific pin on the solid-state electronic disk to a low level through the hardware interface. The pin is connected to a detection circuit, which can sense the level change of the pin in real time. The circuit is an existing circuit and has not been improved, so it will not be described in detail. When the pin level is pulled down, the timer starts immediately and starts timing. The timer accurately records the duration of the pin remaining at a low level. If the pin level continues to remain at a low level and the time reaches 1 second, the timer records this event. The system identifies this trigger event as a trigger mode of external pin pulling down, and matches it with the predefined destruction trigger condition. After the match is successful, the system is ready to enter the soft destruction process, that is, step S6; if the pin is pulled up within 1 second, the blocking state is exited, the timer is cleared, and it returns to the initial state, waiting for the next trigger to ensure that the time is restarted when the pin is pulled down again. In this embodiment, by setting the command trigger mode and the external pin pull-down trigger mode, the user can select the corresponding soft destruction mode according to the corresponding situation requirements, and perform multiple overwrite erases during the soft destruction process, thereby preventing data recovery tools from recovering the data and ensuring that the data in the solid-state electronic disk is completely destroyed to ensure data security.

[0024] Furthermore, in step S2, the key fields in the command packet include the command type, the destruction method and the target drive letter, and the command parameters include the command type field, the destruction method field and the target drive letter field. Specifically, the command type: identifies the command as the "soft destruction" type; the destruction method: specifies the destruction method as "command destruction"; the target drive letter: identifies the drive letter of the solid-state electronic disk that needs to be destroyed, such as "C", "D", etc. The command type field: is set to "soft_destroy"; the destruction method field: is set to "command"; the target drive letter field: specifies the drive letter of the solid-state electronic disk that needs to destroy data, such as the "F" drive.

[0025] Furthermore, in step S4, the log information includes the sending time, command type, destruction method and target drive letter. Specifically, the main function of the log is to ensure that each soft destruction command has a record to check.

[0026] In this embodiment, step S5 further includes the following steps: S51: The solid-state electronic disk receives a command from the host through the internal NVMe controller, and parses the received command packet through the NVMe controller; S52: extract the destruction mode parameters from the command packet, and verify whether all the parameters in the command packet are valid one by one. After the verification is completed, proceed to the next step; S53: The solid-state electronic disk records the current command status, including the command type, destruction method, target drive letter, and command receiving timestamp; S54: Determine the command type and destruction method, and the solid-state electronic disk feeds back a response to the host. Specifically, the solid-state electronic disk receives commands from the host through its internal NVMe controller, and the command is transmitted through the NVMe interface into the command queue of the solid-state electronic disk for parsing and processing. The parsing process is to first check the header information of the command packet, extract the command type, destruction method, target drive letter and other parameters, and the parsing process will be carried out in accordance with the NVMe protocol, including verifying the integrity and correctness of the command packet, and then extracting the destruction method parameters from the command packet, and confirming whether it is "command destruction", so that the command type and destruction method are consistent, that is, confirming that the command type is "soft destruction" and the destruction method is "command". When the command parameters are confirmed to be correct, the solid-state electronic disk will record the status of the current command.

[0027] Furthermore, step S6 further includes the following steps: S61: The solid-state electronic disk performs a preliminary check on the system. If there are unfinished tasks, the system will wait for the task to be completed or terminate the task directly. After the check is completed, the solid-state electronic disk enters an idle state; S62: The solid-state electronic disk deletes the file system table and index used for data storage, and resets the directory structure; S63: Delete the counter recording the valid data block; S64: Erase the entire disk data by overwriting multiple times; specifically, the progress is saved each time 10 Block Sizes (BS) are erased so that the data can be destroyed again after power is restored after an abnormal power failure.

[0028] S65: The solid-state electronic disk feeds back a completion signal to the host through the interface. Specifically, when the command parameters are confirmed to be correct, the solid-state electronic disk will record the status of the current command and enter the initial stage of the soft destruction process. In this stage, the solid-state electronic disk will perform a preliminary system check to ensure that the current system status can perform the soft destruction operation, that is, to ensure that there are no unfinished critical tasks or I / O operations in progress. If there are unfinished tasks, the system will wait for or terminate these tasks to ensure the safe execution of the soft destruction process. After the check is completed, the solid-state electronic disk starts the soft destruction process, that is, deletes the file system tables and indexes. These tables contain information such as the metadata file location and file attributes of the data. After deleting these tables, the path and index of the original data will disappear to prevent data from being recovered. Then reset the directory structure to the default state, clear all directories and subdirectories, restore factory settings, ensure that all file and directory information on the solid-state electronic disk is completely deleted, and further prevent data recovery. Then delete the counter (ValidCnt table) that records valid data blocks. This table is used to track which data blocks are valid and which are invalid. After deleting this table, the system can no longer find any valid data block information, ensuring that all data block information is completely cleared.

[0029] Furthermore, step S64 further includes the following steps: S64.1: Set the number of overwrite times and determine the overwrite mode; preferably, the overwrite mode includes all-zero overwrite, all-one overwrite and random data overwrite, that is, all-zero overwrite: write 0 value to the storage unit; all-one overwrite: write 1 value to the storage unit; random data overwrite: write random numbers to the storage unit, erasing 10 blocks each time.

[0030] S64.2: Traverse all storage units on the solid-state electronic disk block by block. During the traversal process, the storage units are overwritten multiple times; preferably, each storage unit is overwritten for the first time with an all-zero overwrite, each storage unit is overwritten for the second time with an all-one overwrite, and each storage unit is overwritten for the third time with a random data overwrite.

[0031] S64.3: After each overwriting operation is completed, the current overwriting progress is recorded to ensure that the destruction can be continued after power is restored after an abnormal power failure; S64.4: After all storage units have been overwritten multiple times according to the set overwriting times, a final check is performed. Specifically, the first overwrite operation is performed on each Block, using all-zero overwrite, that is, writing all-zero data to the current Block, and verifying the writing result to ensure that all data has been successfully overwritten; after the first overwrite is completed, the second overwrite operation is performed on each Block, using all-one overwrite, that is, writing all-one data to the current Block, and verifying the writing result to ensure that all data has been successfully overwritten; in order to increase the difficulty of data recovery, the third overwrite adopts random data overwrite, that is, first generating random data and writing it to the current Block, and then verifying the writing result to ensure that all data has been successfully overwritten, repeating the above overwrite operation according to the set overwrite times, and after each overwrite operation is completed, recording the current overwrite progress, including the number of overwritten Blocks and the current overwrite times, and saving the progress information to the non-volatile storage area, so that the overwrite operation can be continued from the interrupted place after an unexpected power failure, and when all Blocks are overwritten multiple times according to the set overwrite times, a final check is performed to ensure that all data has been completely destroyed and cannot be recovered, and finally a completion signal is sent to the host end, indicating that the full disk data erase operation has ended. In this embodiment, the overwrite times are 3 or 7 times.

[0032] Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments, or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for soft destruction of a solid-state electronic disk, characterized in that: It includes a command trigger mode and an external pin pull-down trigger mode, and the command trigger mode and the external pin pull-down trigger mode operate independently of each other; When the command triggering method is used for soft destruction, the following steps are included: S1: The host communicates with the solid-state electronic disk through an interface; S2: Build a soft-destruction command package and set command parameters; S3: Serialize the command packet and then send the command packet to the solid-state electronic disk; S4: The host records the command log; S5: After receiving the command packet, the solid-state electronic disk feeds back a response to the host. According to the response status of the solid-state electronic disk, the host determines whether the command is successfully executed; S6: The solid-state electronic disk enters the idle state and is soft-destroyed; When the external pin is pulled low to trigger, the following steps are included: A1: The external control device pulls down the specific pin on the solid-state electronic disk to a low level through the hardware interface. When the pin level is at a low level for 1 second, the timer records and proceeds to the next step. Otherwise, the timer is reset and returns to the initial state. A2: The trigger event is matched with the predetermined destruction trigger condition. If the match is successful, proceed to the next step; A3: The solid-state electronic disk is soft-destroyed using the method of step S6.

2. The method for soft destruction of a solid-state electronic disk according to claim 1, characterized in that: In step S2, the key fields in the command packet include command type, destruction method and target drive letter, and the command parameters include command type field, destruction method field and target drive letter field.

3. The method for soft destruction of a solid-state electronic disk according to claim 2, characterized in that: In step S4, the log information includes the sending time, command type, destruction method and target drive letter.

4. The method for soft destruction of a solid-state electronic disk according to claim 3, characterized in that: The step S5 further includes the following steps: S51: The solid-state electronic disk receives a command from the host through the internal NVMe controller, and parses the received command packet through the NVMe controller; S52: extract the destruction mode parameters from the command packet, and verify whether all the parameters in the command packet are valid one by one. After the verification is completed, proceed to the next step; S53: The solid-state electronic disk records the current command status, including the command type, destruction method, target drive letter, and command receiving timestamp; S54: Determine the command type and destruction method, and the solid state electronic disk feeds back a response to the host.

5. The method for soft destruction of a solid-state electronic disk according to claim 4, characterized in that: The step S6 further includes the following steps: S61: The solid-state electronic disk performs a preliminary check on the system. If there are unfinished tasks, the system will wait for the task to be completed or terminate the task directly. After the check is completed, the solid-state electronic disk enters an idle state; S62: The solid-state electronic disk deletes the file system table and index used for data storage, and resets the directory structure; S63: Delete the counter recording the valid data block; S64: Erase all disk data by multiple overwrites; S65: The solid-state electronic disk feeds back a completion signal to the host through the interface.

6. The method for soft destruction of a solid-state electronic disk according to claim 5, characterized in that: The step S64 further includes the following steps: S64.1: Set the number of overwrite times and determine the overwrite mode; S64.2: traverse all storage units on the solid-state electronic disk block by block, and during the traversal process, the storage units are overwritten multiple times; S64.3: After each overwriting operation is completed, record the current overwriting progress; S64.4: After all storage units have been overwritten multiple times according to the set overwriting times, a final check is performed.

7. The method for soft destruction of a solid-state electronic disk according to claim 6, characterized in that: In step S64.1, the overwriting modes include all-zero overwriting, all-one overwriting and random data overwriting.

8. The method for soft destruction of a solid-state electronic disk according to claim 7, characterized in that: In step S64.2, each storage cell is covered for the first time using an all-zero coverage, each storage cell is covered for the second time using an all-one coverage, and each storage cell is covered for the third time using a random data coverage.

Images