Solid state disk data destruction system

Abstract

The invention relates to the field of data security, and discloses a solid state disk data destruction system, which comprises a multi-stage encryption and erasure module used for performing multi-layer encryption on data when the data is written and executing inverse algorithm processing for multiple times when the data needs to be destructed so as to ensure that the data is unrecoverable; the transient voltage impact module is used for applying transient high voltage to the Nand chip of the solid state disk; the partition sensitivity identification module is used for dividing the storage space into a plurality of partitions and marking data sensitivity in partition metadata; the asynchronous monitoring module is used for monitoring an access mode and command input of the solid state disk in real time and triggering corresponding destruction operation; and the central control unit is used for scheduling and managing the work of the modules and determining specific data destruction measures according to the security events and the partition sensitivity identifiers. The invention allows data to be managed through a user-specified data sensitivity level and automatic anomaly detection of the system, ensuring that the data is properly protected according to its sensitivity.

Description

Technical Field

[0001] The present invention relates to the technical field of data security, and in particular to a solid state hard disk data destruction system. Background Art

[0002] Solid-state drives (SSDs) are currently widely used in personal computers, enterprise servers, data centers, and other fields, and data security and privacy protection have become crucial issues. Traditional methods of destroying mechanical hard disk data usually include repeatedly overwriting data and physically destroying the hard disk. However, the storage mechanism of SSDs is different from that of mechanical hard disks, and these traditional methods often cannot ensure the complete destruction of data on SSDs. In addition, the data erasure operation in SSDs may be affected by many factors, such as the working status of the storage system, the capacity of the hard disk, etc., resulting in low destruction efficiency and the risk of data recovery. Therefore, how to design an efficient and thorough SSD data destruction system has become an urgent problem to be solved.

[0003] Existing SSD data destruction technology mainly relies on the block erase command in the hard disk firmware to clear the data in the NAND flash memory. However, this method has many limitations: the erase command must be actively initiated by the normally working storage system, and the entire erase process takes a long time, especially on large-capacity SSDs, which may take tens of seconds or even minutes. If a power outage occurs or the hard disk is unplugged during the erase process, the data destruction operation cannot be completed, resulting in the risk of data recovery. In addition, even if the erase command is executed, it is still possible to recover the data by extracting the NAND flash chip and using a special recovery tool, which cannot achieve true data destruction. Summary of the invention

[0004] In view of the deficiencies of the prior art, the present invention provides a solid state hard disk data destruction system, which can quickly and completely destroy data through multi-stage encryption erasure and transient voltage shock and other means when illegal access or specific security events are detected.

[0005] To achieve the above objectives, the present invention is implemented through the following technical solutions: a solid state hard disk data destruction system, comprising:

[0006] A multi-stage cryptographic erase module, which performs multiple layers of encryption on data when it is written, and performs multiple inverse algorithm processing when data needs to be destroyed to ensure that the data is unrecoverable;

[0007] The transient voltage shock module is used to apply instantaneous high voltage to the Nand chip of the solid-state drive when illegal access or specific security events are detected, so as to physically damage the Nand chip and destroy data;

[0008] A partition sensitivity identification module is used to divide the storage space into multiple partitions according to the sensitivity of the data and mark the data sensitivity in the partition metadata;

[0009] Asynchronous monitoring module, used to monitor the access mode and command input of the SSD in real time, identify abnormal access mode and trigger corresponding destruction operation;

[0010] The central control unit is used to schedule and manage the work of the above modules and determine specific data destruction measures based on security events and partition sensitivity identification.

[0011] Preferably, the multi-stage encryption erasure module includes:

[0012] An initialization unit, used for applying AES-256 bit encryption technology to perform basic encryption when each data block of the solid state drive is initialized;

[0013] A dynamic key generation unit, used to generate a new dynamic key each time data is written;

[0014] The dynamic key management unit is used to store and manage dynamic keys and protect these keys through a hardware security module.

[0015] Preferably, the transient voltage impact module comprises:

[0016] The high-voltage generation unit is used to generate high-voltage transient voltage, which increases the voltage from the standard operating voltage to a voltage exceeding the withstand voltage limit of the Nand chip within milliseconds;

[0017] The trigger unit is used to start the high voltage generating unit when illegal access or a specific security event is detected.

[0018] Preferably, the partition sensitivity identification module includes:

[0019] A partition setting unit, used for dividing the storage space into partitions of multiple sensitivity levels according to data sensitivity when the solid state hard disk is formatted;

[0020] The sensitivity labeling unit is used to label the sensitivity information of data in the metadata of each partition.

[0021] Preferably, the asynchronous monitoring module includes:

[0022] Access pattern analysis unit, which continuously analyzes the access logs and real-time data streams of the SSD;

[0023] Anomaly detection unit for identifying abnormal access patterns and sending alarm signals to the central control unit.

[0024] Preferably, the central control unit comprises:

[0025] A scheduling management unit, used for scheduling and managing the work of the multi-stage encryption erasure module, the transient voltage impact module, the partition sensitivity identification module and the asynchronous monitoring module;

[0026] The decision unit is used to decide on specific measures such as cryptographic erasure or voltage shock according to security events and partition sensitivity identification.

[0027] Preferably, the dynamic key management unit periodically rotates and updates the dynamic keys, and deletes the relevant dynamic keys during the destruction phase.

[0028] Preferably, the high voltage generation unit of the transient voltage impact module can increase the voltage to 12V within milliseconds to ensure that the Nand chip is physically damaged quickly.

[0029] Preferably, the partition sensitivity identification module allows the user to specify the sensitivity level of the data through an interface when writing data, and writes the data into the corresponding partition.

[0030] The present invention also provides a method for destroying data on a solid state hard disk, comprising the following steps:

[0031] Initialization phase: basic encryption of each data block of the SSD;

[0032] Data writing phase: Generate and use dynamic keys to encrypt data twice;

[0033] The asynchronous monitoring module monitors the hard disk access pattern in real time and identifies abnormal access;

[0034] When illegal access or security events are detected, the central control unit decides to take multi-stage cryptographic erase or transient voltage shock;

[0035] Perform data destruction operations to ensure that data cannot be recovered through multiple inverse algorithm processing or instantaneous high-voltage shocks.

[0036] The present invention provides a solid state hard disk data destruction system, which has the following beneficial effects:

[0037] 1. The present invention allows data to be managed through user-specified data sensitivity levels and the system's automatic anomaly detection, ensuring that data is appropriately protected according to its sensitivity. This approach not only increases control over data, but also increases the flexibility of protection measures, because the system can flexibly adjust the protection level and response strategy based on the actual importance and risk level of the data.

[0038] 2. The real-time monitoring function of the asynchronous monitoring module of the present invention can continuously track the access pattern and data flow of the hard disk and promptly identify abnormal behavior, such as illegal access attempts. This real-time monitoring mechanism ensures that the system can respond quickly when potential threats are first discovered, thereby minimizing the risk of data leakage or damage.

[0039] 3. The present invention provides a complete and irreversible data destruction solution by combining two destruction technologies: multi-stage cryptographic erasure and transient voltage shock. Multiple inverse algorithm processing completely destroys the data structure, while high voltage shock physically damages the storage medium, making data recovery impossible, ensuring the complete unavailability and confidentiality of the processed data.

[0040] 4. By partitioning data and marking different sensitivity levels, the system can implement corresponding levels of protection measures for different categories of data, thereby optimizing the security of the entire storage system. In addition, the regular update and dynamic management of encryption keys further enhance the protection measures and reduce the security risks caused by key leakage or expiration. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a schematic diagram of the system structure of the present invention;

[0042] Figure 2 It is a schematic diagram of the method flow of the present invention. DETAILED DESCRIPTION

[0043] The following will be combined with the drawings in the specification of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0044] Please see attached Figure 1 The embodiment of the present invention provides a solid state drive data destruction system, which can effectively deal with various data security threats and ensure the security and irrecoverability of solid state drive data through multi-level technical means.

[0045] Specifically, the system includes a multi-stage encryption erasure module, a transient voltage impact module, a partition sensitivity identification module, an asynchronous monitoring module and a central control unit.

[0046] Multi-stage encryption erase module, the multi-stage encryption erase module is designed to use multi-layer encryption technology to encrypt data multiple times when writing data, and when data needs to be destroyed, it uses multiple inverse algorithm processing to ensure that the data is completely unrecoverable. The specific steps of the multi-stage encryption erase module are:

[0047] Initialization phase: When each data block of the SSD is initialized, AES-256 bit encryption technology is applied for basic encryption. This phase ensures that data is protected when it is written.

[0048] Data writing phase: Each time data is written, the system generates a new dynamic key and uses this key to encrypt the data twice. The dynamic key is protected by a hardware security module (HSM).

[0049] Destruction phase: When data needs to be destroyed, the system first deletes all relevant dynamic keys from the key management module, and then performs multiple inverse algorithm processing on the encrypted data (such as multiple pseudo-random number overwriting and inverse AES algorithm operations) to ensure that the data is completely unrecoverable.

[0050] This module enhances the security and irrecoverability of data through multi-layer encryption and inverse algorithm processing, ensuring that data will not be leaked even in the event of malicious attacks or illegal access.

[0051] The transient voltage shock module applies instantaneous high voltage to the Nand chip under certain circumstances to physically damage the Nand chip and completely destroy the data. The specific steps of the transient voltage shock module are:

[0052] Power module design: Design a power module that can generate high-voltage transient voltage. The module can increase the voltage from the standard operating voltage (such as 3.3V) to a voltage exceeding the withstand voltage limit of the Nand chip (such as 12V) within milliseconds.

[0053] Trigger mechanism: When illegal access or specific security events are detected, the power module starts immediately and applies high-voltage transient voltage to the Nand chip, quickly causing damage to the chip circuit.

[0054] Physical destruction execution: High-voltage transient voltage directly acts on the Nand chip, quickly destroying its storage unit and achieving physical destruction. The entire process is completed within milliseconds to ensure that the data cannot be recovered.

[0055] The module physically destroys the Nand chip to achieve rapid and complete destruction of data, effectively preventing data recovery and ensuring data security even in power outages or unplugging.

[0056] The partition sensitivity identification module divides the storage space into multiple partitions according to the sensitivity of the data, and marks the sensitivity of the data in the partition metadata so that appropriate strategies can be adopted when destroying the data. The specific steps of the partition sensitivity identification module are as follows:

[0057] Partition settings: When the SSD is formatted, the storage space is divided into partitions of multiple sensitivity levels (such as general data area and confidential data area) according to the data sensitivity. The partition information and sensitivity identification are stored in the metadata of the file system.

[0058] Sensitivity tagging: When writing data, users specify the sensitivity level of the data through the interface, and the system automatically writes the data to the corresponding partition. The sensitivity information is marked and stored in the metadata of each partition.

[0059] Monitoring and execution of destruction: When illegal access or abnormal conditions are detected, the central control unit determines the destruction strategy based on the sensitivity identification of the partition. For highly sensitive areas, voltage shock physical destruction is performed first; for ordinary areas, standard cryptographic erasure is performed.

[0060] This module makes data destruction more flexible and efficient through sensitivity identification and partition management, and can adopt different destruction strategies for data of different sensitivities to improve the overall security of the system.

[0061] The asynchronous monitoring module monitors the access mode and command input of the SSD in real time, identifies abnormal access modes and triggers corresponding destruction operations. Specific steps:

[0062] Module design: Design a real-time monitoring module, deployed in the SSD controller, responsible for detecting the hard disk access pattern and command input. The monitoring module uses a machine learning-based algorithm to identify normal and abnormal access patterns.

[0063] Anomaly detection: The monitoring module continuously analyzes access logs and real-time data streams, and immediately sends an alarm signal to the central control unit once an abnormal access pattern (such as frequent invalid access, abnormal read and write speeds, etc.) is detected.

[0064] Automatically trigger destruction: After receiving the alarm signal, the central control unit determines the specific destruction operation based on the partition sensitivity identification. For highly sensitive partitions, a transient voltage shock is immediately triggered; for other partitions, an encrypted erase operation is performed. The destruction process is recorded in real time and stored in the security log for auditing.

[0065] Through real-time monitoring and anomaly detection, the module can quickly respond to illegal access or security incidents and automatically trigger corresponding destruction operations to ensure data security and system response speed.

[0066] The central control unit is used to schedule and manage the work of the multi-stage encryption erase module, transient voltage shock module, partition sensitivity identification module and asynchronous monitoring module, and determine the specific data destruction measures according to the security events and partition sensitivity identification. Specific steps:

[0067] Functional integration: The central control unit is responsible for scheduling and managing the interaction between multi-stage cryptographic erasure, voltage shock and monitoring modules. When any security incident occurs, data protection and destruction measures are dynamically adjusted according to the preset strategy.

[0068] Operational logic: When the system is initialized, the central control unit configures each partition according to the sensitivity level set by the user. It monitors the access mode in real time and receives the alarm signal from the asynchronous monitoring module. It decides to take specific measures such as cryptographic erasure or voltage shock based on the alarm signal and the partition sensitivity identification. It coordinates the power supply module to provide instantaneous high voltage in an emergency to achieve physical destruction.

[0069] This module ensures that the system can quickly and accurately perform data destruction operations when encountering various threats through unified scheduling and management of various functional modules, thereby ensuring data security and system reliability.

[0070] The present invention realizes efficient and safe destruction of solid-state hard disk data through multi-level and multi-module collaborative work. The multi-stage encryption erasure technology ensures that data is fully protected during writing and destruction to prevent data recovery. The transient voltage impact technology physically destroys the Nand chip within milliseconds to ensure that data is quickly destroyed in an emergency. The partition sensitivity identification module enables the system to adopt different destruction strategies according to data sensitivity, thereby improving destruction efficiency and safety.

[0071] In a preferred embodiment of the present invention, the multi-stage encryption erasure module realizes multi-layer encryption and security management of data through the collaborative work of the initialization unit, the dynamic key generation unit and the dynamic key management unit, ensuring high security of data when writing and destroying.

[0072] The initialization unit applies AES-256 bit encryption technology to each data block of the SSD for basic encryption when initializing it. This process ensures that all data blocks on the hard drive have basic encryption protection before the first use. Specific steps:

[0073] Data block scanning: The system scans each data block on the hard disk to identify uninitialized data blocks.

[0074] Encryption: Each data block is encrypted using AES-256-bit encryption technology. AES-256-bit encryption algorithm uses symmetric encryption and has high security.

[0075] Key storage: The generated basic encryption keys are stored in a hardware security module (HSM), ensuring the security and non-tamperability of the keys.

[0076] By performing basic encryption on each data block, it ensures that the data blocks are fully protected even before the hard disk is used for the first time or when storing a small amount of data, preventing the leakage of unencrypted data.

[0077] The dynamic key generation unit generates a new dynamic key each time data is written, and uses the key to encrypt the data twice. The dynamic key is unique each time it is generated, ensuring that each written data has unique encryption protection. Specific steps:

[0078] Key generation: Each time data is written, the system generates a new dynamic key. The key generation algorithm is based on a high-strength pseudo-random number generator to ensure the uniqueness and unpredictability of the key.

[0079] Data encryption: Use the generated dynamic key to encrypt the written data twice. This encryption operation is performed on top of the basic encryption, forming a multi-layer encryption protection.

[0080] Key update: The generated dynamic key is stored in the dynamic key management unit and marked as the valid key for the current written data block.

[0081] By generating a new dynamic key each time data is written, the system is able to provide unique encryption protection for each data block, preventing security vulnerabilities caused by key reuse.

[0082] The dynamic key management unit is used to store and manage dynamic keys and protect these keys through a hardware security module (HSM) to ensure that the keys are not leaked or tampered with during storage and use. Specific steps:

[0083] Key storage: All generated dynamic keys are stored in a hardware security module (HSM). HSM has high physical and logical security protection to prevent unauthorized access and tampering.

[0084] Key management: The key management unit is responsible for classifying and labeling the stored keys to ensure that the key of each data block corresponds to its encrypted data.

[0085] Key update and deletion: The system regularly updates the key management strategy and safely deletes old keys that are no longer in use to prevent the abuse of expired keys. At the same time, when data needs to be destroyed, the system will first delete the corresponding dynamic key.

[0086] By using hardware security modules for key management, the system can ensure the security of all keys during storage and use, and prevent key leakage and tampering. At the same time, the regular update and secure deletion mechanism of keys further enhances the security and data protection capabilities of the system.

[0087] This preferred embodiment ensures that the encryption protection of each data block is unique and powerful through the design of a multi-stage encryption erasure module, multi-layer encryption technology and a dynamic key generation mechanism. The dynamic key management unit protects the key security through a hardware security module to prevent key leakage and tampering. When data needs to be destroyed, the data is completely unrecoverable by deleting the dynamic key and performing multiple inverse algorithm processing, thereby improving the security and thoroughness of data destruction.

[0088] In a preferred embodiment of the present invention, the transient voltage impact module realizes rapid and complete physical destruction of the Nand chip through the coordinated work of the high voltage generation unit and the trigger unit to ensure that the data is irrecoverable.

[0089] The high voltage generation unit is used to generate high voltage transient voltage, which increases the voltage from the standard working voltage (such as 3.3V or 5V) to a voltage exceeding the withstand voltage limit of the Nand chip (such as 12V or higher) within milliseconds, thereby physically damaging the Nand chip. Specific steps:

[0090] Standard working voltage conversion: Design an efficient voltage conversion circuit that can instantly increase the input standard working voltage to the required high voltage within milliseconds. The conversion circuit includes a boost converter and an energy storage capacitor.

[0091] Transient high voltage output: The energy storage capacitor discharges rapidly under the trigger signal, providing a high voltage transient pulse. This high voltage transient pulse needs to have sufficient amplitude and duration to ensure that it can effectively damage the storage unit of the Nand chip.

[0092] Safety protection mechanism: The high voltage generation unit has a built-in multi-layer protection mechanism to ensure that the high voltage pulse output will not be accidentally triggered under normal working conditions. The high voltage output will only be activated when a clear destruction instruction or trigger signal is received.

[0093] By designing efficient voltage conversion and transient high-voltage output circuits, the high-voltage generation unit can generate sufficient voltage pulses in a very short time to ensure physical damage to the Nand chip, thereby achieving complete destruction of data.

[0094] The trigger unit is used to start the high voltage generation unit when illegal access or specific security events are detected, ensuring that data destruction operations can be quickly performed in an emergency. Specific steps:

[0095] Event detection: The trigger unit is connected to the asynchronous monitoring module and receives signals from the monitoring module in real time. The monitoring module detects the access mode and command input of the hard disk and identifies abnormal behavior and illegal access attempts.

[0096] Signal processing: When the trigger unit receives an abnormal alarm signal from the monitoring module, it immediately performs signal processing and verification to ensure the validity and urgency of the alarm signal.

[0097] Trigger mechanism: After confirming the abnormal event, the trigger unit immediately sends a start signal to the high voltage generation unit. This start signal needs to have a high priority and can bypass the conventional control path and directly activate the high voltage generation unit.

[0098] Redundant protection: The trigger unit is designed with a redundant protection mechanism to confirm the authenticity of abnormal events under multiple conditions to avoid false triggering. At the same time, the trigger unit has a built-in delay mechanism to ensure that the high voltage generation unit is started the moment the abnormal event is confirmed.

[0099] By connecting the asynchronous monitoring module and the high-voltage generation unit, the trigger unit can respond quickly when an abnormal event is detected and start the high-voltage generation unit to destroy data, ensuring that the data can be destroyed promptly and thoroughly when illegal access or specific security incidents occur.

[0100] This preferred embodiment realizes the rapid and thorough physical destruction of the Nand chip through the design of the transient voltage impact module. The transient voltage impact module can generate high-voltage pulses within milliseconds to physically damage the Nand chip, ensuring the rapid destruction of data. By physically destroying the Nand chip, the data is ensured to be irrecoverable, and data security can be guaranteed even in extreme situations (such as power failure or plugging and unplugging). At the same time, the trigger unit is combined with the asynchronous monitoring module to realize real-time monitoring and rapid response to illegal access and security events, ensuring that data destruction can be performed immediately when a threat is detected.

[0101] In a preferred embodiment of the present invention, the partition sensitivity identification module realizes the sensitivity level management of the solid state drive storage space through the collaborative work of the partition setting unit and the sensitivity marking unit to ensure that the data is protected and destroyed accordingly according to its sensitivity.

[0102] The partition setting unit is used to divide the storage space into multiple partitions of different sensitivity levels according to the sensitivity of the data when the solid state drive is formatted. In this way, data of different sensitivities can be classified and managed so that appropriate handling measures can be taken when a security incident occurs. Specific steps:

[0103] Initial formatting: During the initial formatting of the SSD, the partition setting unit divides the storage space into multiple logical partitions. Each partition is set according to a preset sensitivity level, such as a general data area, a confidential data area, etc.

[0104] Sensitivity level definition: The system predefines multiple data sensitivity levels, each corresponding to different security and processing policies. These levels can be modified and extended through system configuration files.

[0105] Partition configuration: During the partition setup process, the partition setup unit configures each partition accordingly based on the preset sensitivity level definition. This includes setting the partition size, boundaries, and other necessary metadata.

[0106] Security initialization: After each partition is set up, the partition setting unit performs security initialization, including writing the initial sensitivity tag and applying basic encryption protection to ensure that the partition has basic security before use.

[0107] By partitioning the storage space according to data sensitivity during formatting, the partition setting unit can achieve classified management of data of different sensitivities, thereby improving the flexibility and effectiveness of data protection.

[0108] The sensitivity tagging unit is used to tag the sensitivity information of data in the metadata of each partition to ensure that corresponding security measures can be taken according to the sensitivity information during data writing and access. Specific steps:

[0109] Sensitivity information storage: In the metadata structure of each partition, the sensitivity tagging unit reserves specific fields for storing the data sensitivity information of the partition. This information includes sensitivity level, tagging timestamp, and other relevant security attributes.

[0110] Data write tag: When a user or system writes data to the SSD, the sensitivity tag unit updates the sensitivity information in the metadata of the corresponding partition based on the data attributes or user instructions. For example, for highly sensitive data, the sensitivity level of the corresponding partition is set to high.

[0111] Dynamic sensitivity adjustment: During data storage and use, the system can dynamically adjust the sensitivity level of the partition according to the access mode and security policy. The sensitivity labeling unit is responsible for updating the sensitivity information of the partition in real time to ensure the accuracy and real-time performance of the sensitivity labeling.

[0112] Metadata protection: The sensitivity labeling unit encrypts and verifies the metadata structure to prevent sensitive information from being tampered with or accessed without authorization, ensuring the integrity and credibility of the sensitivity labeling.

[0113] By marking the sensitivity information of the data in the partition metadata, the sensitivity labeling unit can provide precise sensitivity management and protection during data storage and access, ensuring that the system can take appropriate security measures based on the sensitivity of the data.

[0114] This preferred embodiment realizes refined sensitivity management of solid-state hard disk storage space through the design of a partition sensitivity identification module. Through the partition setting unit and the sensitivity marking unit, the system can perform refined management of data of different sensitivities and provide targeted protection and destruction strategies. The sensitivity marking unit supports dynamic adjustment of partition sensitivity to ensure that the system can adjust security strategies in real time according to actual conditions and enhance the flexibility and adaptability of data protection. At the same time, the partition sensitivity identification module protects sensitivity information through encryption and verification mechanisms to prevent unauthorized access and tampering, thereby ensuring the security and reliability of sensitivity management.

[0115] In a preferred embodiment of the present invention, the asynchronous monitoring module realizes real-time monitoring and anomaly detection of solid-state hard disk access behavior through the collaborative work of the access pattern analysis unit and the anomaly detection unit, so as to ensure rapid response when illegal access or security incidents occur and protect data security.

[0116] The access pattern analysis unit is used to continuously analyze the access logs and real-time data streams of the SSD, and identify normal and abnormal access patterns by monitoring and analyzing access behaviors. Specific steps:

[0117] Log collection: The access pattern analysis unit continuously collects access logs of the SSD, including read and write operations, access time, access frequency, etc. The unit records all access events in real time through the built-in log collector.

[0118] Data Stream Analysis: This unit analyzes real-time data streams to detect the type, rate, and pattern of data transmission, ensuring timely acquisition of the latest access behavior information.

[0119] Behavior modeling: By analyzing the collected logs and data streams, the access pattern analysis unit builds a baseline model of normal access behavior. This includes common access patterns, frequency, and access time distribution.

[0120] Dynamic update: The baseline model is dynamically updated according to the actual access situation to adapt to changes in the usage environment. The system regularly adjusts the model to ensure its accuracy and timeliness.

[0121] The access pattern analysis unit can establish an accurate baseline model through continuous monitoring and analysis of access behavior, effectively distinguish between normal and abnormal access behavior, and provide a reliable basis for anomaly detection.

[0122] The anomaly detection unit is used to identify abnormal access patterns and send alarm signals to the central control unit to ensure that it can respond quickly when illegal access or security incidents occur and initiate corresponding protection and destruction measures. Specific steps:

[0123] Abnormal pattern recognition: The anomaly detection unit identifies abnormal access patterns by comparing them with the baseline model. Detection criteria include abnormal increase in access frequency, unauthorized access, invalid access attempts, etc.

[0124] Signal processing: After identifying abnormal access patterns, the anomaly detection unit performs signal processing and verification on the abnormal event to ensure the validity and urgency of the abnormal signal. The unit uses a multi-layer filtering and verification mechanism to reduce the false alarm rate.

[0125] Alarm sending: After confirming an abnormal event, the abnormal detection unit immediately sends an alarm signal to the central control unit. The alarm signal contains detailed abnormal access information, such as access source, time, type, etc.

[0126] Real-time response: The anomaly detection unit is designed with a quick response mechanism to ensure that the alarm signal is sent in the shortest time after the abnormal event is confirmed, triggering the corresponding protection measures of the central control unit.

[0127] The anomaly detection unit uses efficient anomaly identification and signal processing mechanisms to respond quickly when abnormal access patterns are detected, ensuring that the system can initiate protection and destruction measures in a timely manner to ensure data security.

[0128] This preferred embodiment realizes real-time monitoring and anomaly detection of SSD access behavior through the design of asynchronous monitoring module. Through continuous monitoring and analysis by access pattern analysis unit, the system can grasp the access behavior of SSD in real time and establish accurate access behavior model. The anomaly detection unit can quickly identify abnormal access pattern and send alarm signal to central control unit to ensure rapid response when illegal access or security incident occurs. At the same time, through efficient anomaly detection and real-time response mechanism, the system can quickly start protection and destruction measures when abnormal incident occurs to ensure data security.

[0129] In a preferred embodiment of the present invention, the central control unit realizes unified management and control of the multi-stage encryption erasure module, the transient voltage shock module, the partition sensitivity identification module and the asynchronous monitoring module through the coordinated work of the scheduling management unit and the decision-making unit, ensuring that rapid decisions can be made and appropriate destruction measures can be taken when a security incident occurs to ensure data security.

[0130] The scheduling management unit is used to coordinate and manage the work of the multi-stage encryption erase module, transient voltage shock module, partition sensitivity identification module and asynchronous monitoring module to ensure the coordinated operation of each module. Specific steps:

[0131] Task allocation: According to the system operation status and security policy, the scheduling management unit allocates different tasks to each module. For example, during normal operation, the multi-stage encryption erase module is instructed to process data encryption; when an abnormality is detected, the transient voltage shock module is instructed to prepare for destruction operation.

[0132] Resource management: The scheduling management unit monitors the resource usage of each module to ensure that system resources (such as processor time and memory) are allocated reasonably to avoid resource competition and conflicts.

[0133] Status monitoring: Continuously monitor the operating status of each module, collect and summarize the module status information (such as task completion status, abnormal alarms, etc.), and adjust the scheduling strategy in a timely manner.

[0134] Coordinated communication: Ensure smooth communication between modules. The scheduling management unit realizes efficient data exchange and command transmission between modules through the internal bus or communication protocol.

[0135] The scheduling management unit ensures the stable operation and efficient collaboration of the system by reasonably allocating tasks and resources, thereby improving the overall performance and response speed of the data destruction system.

[0136] The decision-making unit decides on specific measures such as cryptographic erasure or voltage shock based on security events and partition sensitivity identification, ensuring that appropriate destruction measures can be taken quickly in different scenarios. Specific steps:

[0137] Security incident assessment: Receive abnormal alarm signals from the asynchronous monitoring module, analyze and assess the severity and urgency of security incidents. Assessment criteria include the type of access anomaly, scope of impact, urgency, etc.

[0138] Sensitivity judgment: Based on the data sensitivity information provided by the partition sensitivity identification module, determine whether the partition involved contains highly sensitive data. Sensitivity information includes the sensitivity level and data type of the partition.

[0139] Destruction strategy selection: Based on the evaluation results and sensitivity judgment, the decision unit selects an appropriate destruction strategy. For example, for highly sensitive data, when a serious security incident is detected, transient voltage shock is preferred for physical destruction; for low-sensitivity data, multi-stage encryption erasure can be selected for logical destruction.

[0140] Instruction issuance: Once the decision is made, the decision-making unit immediately issues execution instructions to the relevant modules and initiates the corresponding destruction operation. This ensures that the destruction operation is executed in the shortest possible time to prevent data leakage.

[0141] By accurately assessing security incidents and data sensitivity, the decision-making unit can quickly select and execute appropriate destruction strategies in different scenarios to ensure data security and thorough destruction.

[0142] This preferred embodiment realizes the unified management and efficient scheduling of the multi-stage encryption erasure module, transient voltage impact module, partition sensitivity identification module and asynchronous monitoring module through the design of the central control unit. The scheduling management unit ensures the coordinated work of each module and the stable operation of the system by reasonably allocating tasks and resources, thereby improving the response speed and efficiency of the system. At the same time, the decision-making unit selects appropriate destruction strategies according to security events and data sensitivity, ensuring that data can be destroyed quickly and effectively in various security events to prevent data leakage.

[0143] In a preferred embodiment of the present invention, the dynamic key management unit updates the dynamic keys by regular rotation and deletes the relevant dynamic keys during the destruction phase to ensure the security of data throughout the storage life cycle and the thoroughness of the destruction process.

[0144] The dynamic key management unit regularly rotates and updates the dynamic key to ensure that the encryption key of each data block is automatically updated after being used for a period of time to prevent security risks caused by long-term use of the key. Specific steps:

[0145] Key generation: Use a high-strength pseudo-random number generator to periodically generate new dynamic keys. The generated new keys must meet the security standards preset by the system.

[0146] Key replacement: Check the dynamic keys currently in use regularly (such as every certain number of write operations or fixed time intervals) and replace keys that have expired or are about to expire.

[0147] Data re-encryption: During the key replacement process, the affected data blocks are re-encrypted using the newly generated dynamic key to ensure that the data remains highly secure under the new key.

[0148] Key storage: Store newly generated dynamic keys in a hardware security module (HSM) and label and manage them appropriately.

[0149] By regularly rotating and updating dynamic keys, the system can significantly reduce the potential security risks brought about by long-term use of keys, ensuring that data is always in a highly secure state throughout the entire storage life cycle.

[0150] When data needs to be destroyed, the dynamic key management unit deletes the relevant dynamic keys to ensure that the encrypted data cannot be decrypted, thereby achieving data irreversibility. Specific steps:

[0151] Destruction trigger: When the system detects an event that requires data destruction (such as illegal access, equipment decommissioning, etc.), the dynamic key management unit receives a destruction instruction.

[0152] Key location: Determine the relevant dynamic keys based on the data blocks to be destroyed. The key management unit quickly locates these keys through indexes and mapping tables.

[0153] Key deletion: Completely delete the located dynamic keys. The deletion operation includes clearing the keys from the hardware security module and overwriting the storage area to ensure that the keys cannot be recovered.

[0154] Data destruction confirmation: After the key is deleted, the system performs data destruction confirmation, ensuring that the original data cannot be recovered by overwriting it with pseudo-random numbers multiple times.

[0155] By deleting the relevant dynamic keys during the destruction phase, the system can ensure that the encrypted data cannot be decrypted, making the data unrecoverable, thereby achieving complete destruction and improving data security.

[0156] This preferred embodiment achieves efficient management of dynamic keys and thoroughness of the data destruction process through the design of a dynamic key management unit. By regularly rotating and updating dynamic keys, the system can continuously ensure high data security and prevent security risks caused by long-term use of keys. It also deletes relevant dynamic keys during the data destruction phase to ensure that encrypted data cannot be decrypted, making the data irreversible and ensuring the thoroughness of the destruction process.

[0157] Please see attached Figure 2 The present invention also provides a method for destroying data on a solid state hard disk, comprising the following steps:

[0158] S1, initialization phase: basic encryption of each data block of the SSD

[0159] When the SSD is used for the first time, the system performs AES-256 bit encryption on each data block. The initialization phase ensures that even newly written data has basic security protection.

[0160] The system scans all data blocks on the hard drive and identifies unencrypted data blocks. Each data block is encrypted using the AES-256 bit encryption algorithm. The underlying encryption key is stored in a hardware security module (HSM) to ensure the security and non-tamperability of the key.

[0161] S2, data writing phase: Generate and use dynamic keys to encrypt data twice

[0162] Each time data is written, the system generates a new dynamic key and encrypts the data twice, ensuring that each written data has unique encryption protection.

[0163] Generate a new dynamic key using a high-strength pseudo-random number generator. Use the generated dynamic key to encrypt the written data twice. Store the dynamic key in the hardware security module and label and manage it appropriately.

[0164] S3, asynchronous monitoring module monitors hard disk access mode in real time and identifies abnormal access

[0165] The asynchronous monitoring module monitors the hard disk's access logs and data streams in real time, identifies abnormal access patterns, and triggers an alarm when an anomaly is detected.

[0166] The access pattern analysis unit continuously collects and analyzes the access logs and real-time data streams of the hard disk. It identifies abnormal access patterns by establishing a baseline model of normal access behavior. When an abnormal access pattern is detected, an alarm signal is sent to the central control unit.

[0167] S4. When illegal access or security events are detected, the central control unit decides to take multi-stage encryption erasure or transient voltage shock

[0168] The central control unit decides to take appropriate data destruction measures based on the severity of the security incident and the sensitivity of the data.

[0169] Receive abnormal alarm signals from the asynchronous monitoring module. Evaluate the applicable destruction strategy based on the sensitivity of the data and the severity of the security incident. For highly sensitive data, prioritize transient voltage shock for physical destruction; for ordinary data, select multi-stage encryption erasure for logical destruction.

[0170] S5. Execute data destruction operation, through multiple inverse algorithm processing or instantaneous high voltage shock, to ensure that the data cannot be recovered

[0171] According to the instructions of the central control unit, the corresponding data destruction operations are performed to ensure that the data is completely unrecoverable.

[0172] 1. Multi-stage cryptographic erasure:

[0173] Delete the relevant dynamic key. Perform multiple inverse algorithm processing on the encrypted data (such as multiple pseudo-random number overwriting and inverse AES algorithm operations).

[0174] 2. Transient voltage shock:

[0175] The high voltage generation unit is activated to increase the voltage to 12V within milliseconds. The instantaneous high voltage is applied to the Nand chip, causing physical damage to the storage unit.

[0176] 3. After the destruction operation is completed, the system confirms the data destruction and ensures that the original data cannot be recovered by overwriting it with pseudo-random numbers multiple times.

[0177] The multi-level data destruction mechanism ensures that data cannot be recovered at both the logical and physical levels, achieving complete data destruction.

[0178] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A solid state hard disk data destruction system, characterized in that: include: A multi-stage cryptographic erase module, which performs multiple layers of encryption on data when it is written, and performs multiple inverse algorithm processing when data needs to be destroyed to ensure that the data is unrecoverable; The transient voltage shock module is used to apply instantaneous high voltage to the Nand chip of the solid-state drive when illegal access or specific security events are detected, so as to physically damage the Nand chip and destroy data; A partition sensitivity identification module is used to divide the storage space into multiple partitions according to the sensitivity of the data and mark the data sensitivity in the partition metadata; Asynchronous monitoring module, used to monitor the access mode and command input of the SSD in real time, identify abnormal access mode and trigger corresponding destruction operation; The central control unit is used to schedule and manage the work of the above modules and determine specific data destruction measures based on security events and partition sensitivity identification.

2. A solid state hard disk data destruction system according to claim 1, characterized in that: The multi-stage cryptographic erasure module includes: An initialization unit, used for applying AES-256 bit encryption technology to perform basic encryption when each data block of the solid state drive is initialized; A dynamic key generation unit, used to generate a new dynamic key each time data is written; The dynamic key management unit is used to store and manage dynamic keys and protect these keys through a hardware security module.

3. A solid state hard disk data destruction system according to claim 1, characterized in that: The transient voltage impact module comprises: The high-voltage generation unit is used to generate high-voltage transient voltage, which increases the voltage from the standard operating voltage to a voltage exceeding the withstand voltage limit of the Nand chip within milliseconds; The trigger unit is used to start the high voltage generating unit when illegal access or a specific security event is detected.

4. A solid state hard disk data destruction system according to claim 1, characterized in that: The partition sensitivity identification module includes: A partition setting unit, used for dividing the storage space into partitions of multiple sensitivity levels according to data sensitivity when the solid state hard disk is formatted; The sensitivity labeling unit is used to label the sensitivity information of data in the metadata of each partition.

5. A solid state hard disk data destruction system according to claim 1, characterized in that: The asynchronous monitoring module comprises: Access pattern analysis unit, which continuously analyzes the access logs and real-time data streams of the SSD; Anomaly detection unit for identifying abnormal access patterns and sending alarm signals to the central control unit.

6. A solid state hard disk data destruction system according to claim 1, characterized in that: The central control unit comprises: A scheduling management unit, used for scheduling and managing the work of the multi-stage encryption erasure module, the transient voltage impact module, the partition sensitivity identification module and the asynchronous monitoring module; The decision unit is used to decide on specific measures such as cryptographic erasure or voltage shock according to security events and partition sensitivity identification.

7. A solid state hard disk data destruction system according to claim 1, characterized in that: The dynamic key management unit periodically rotates and updates the dynamic keys, and deletes the relevant dynamic keys during the destruction phase.

8. The solid state hard disk data destruction system according to claim 1, characterized in that: The high voltage generation unit of the transient voltage impact module can increase the voltage to 12V within milliseconds to ensure that the Nand chip is physically damaged quickly.

9. The solid state hard disk data destruction system according to claim 1, characterized in that: The partition sensitivity identification module allows the user to specify the sensitivity level of the data through an interface when writing data, and writes the data into the corresponding partition.

10. A method for destroying data on a solid state hard disk, applied to the solid state hard disk data destruction system according to any one of claims 1 to 8, characterized in that: The following steps are involved: Initialization phase: basic encryption of each data block of the SSD; Data writing phase: Generate and use dynamic keys to encrypt data twice; The asynchronous monitoring module monitors the hard disk access pattern in real time and identifies abnormal access; When illegal access or security events are detected, the central control unit decides to take multi-stage cryptographic erase or transient voltage shock; Perform data destruction operations to ensure that data cannot be recovered through multiple inverse algorithm processing or instantaneous high-voltage shocks.

Images