File recovery method supporting mixed time points

Abstract

The invention discloses a file recovery method supporting mixed time points, which comprises the following steps: when production data cannot be normally used, carrying out recovery operation according to a recovery strategy; the recovery strategy comprises the following steps: selecting a data group backup set closest to a time point when the production data cannot be normally used for verification; if the verification is passed, executing a recovery operation; if the verification is not passed, the data set backup set which is not verified at the recent time point of the current data set backup set is selected for verification until the verification is passed; according to the file recovery method supporting the mixed time points, a mixed time point mounting technology is adopted, data loss is reduced to the maximum extent, the infected or attacked data can be recovered to the latest credible state by selecting a proper time point in backup data for mounting, meanwhile, recovery data states are reserved as many as possible, and the recovery efficiency is improved. The business system can be quickly recovered, the risk of data loss is reduced to the maximum extent, and a more reliable guarantee is provided for stable operation of enterprises.

Description

Technical Field

[0001] The present invention belongs to the technical field of file recovery, and in particular relates to a method for fast file recovery supporting mixed time points. Background Art

[0002] As enterprises and institutions become more information-based, the number of information systems continues to increase, and protecting important data and achieving rapid recovery have become key tasks. Especially when faced with massive unstructured files and malicious intrusions, traditional scheduled recovery methods take a long time and result in a lot of data loss after recovery, so an effective solution is needed.

[0003] In business production systems, a large number of unstructured files may be affected by various malicious intrusions such as ransomware and hacker attacks. Such infections often spread and last for hours or even days. Once an infection is discovered, it is critical to restore the files to a time when they were not infected or attacked. In this way, in the case of a large amount of data, general recovery methods cannot fully retain these changes, and the data changes during the spread process will be lost synchronously, causing great losses to users.

[0004] The current CDM fast recovery has the following advantages: 1. Determine the recovery time point: Confirm the required recovery time point based on the needs.

[0005] 2. Quickly restore data: Use CDM native format technology to quickly restore backup data to a specified time point.

[0006] 3. Verify data accuracy: Verify that the recovered data is correct. If the data is incorrect, reconfirm the time point and repeat the above recovery process until the correct recovery result is obtained.

[0007] The CMD recovery function does have certain advantages. It can quickly restore backup data to the state before the attack to restore system operation. However, this method has an obvious disadvantage, that is, the business data generated by the production system after the attack cannot be recovered and is permanently lost. This may cause significant losses to the enterprise, especially for those industries that are highly dependent on real-time data, such as finance and medical care. Therefore, it is necessary to develop a new file recovery method that supports mixed time points to solve the existing problem. Summary of the invention

[0008] The purpose of the present invention is to provide a file recovery method supporting mixed time points to solve the problem that business data cannot be recovered after an attack.

[0009] To achieve the above object, the present invention provides the following technical solution: a file recovery method supporting mixed time points, characterized in that it includes: When production data cannot be used normally, recovery operations are performed according to the recovery strategy; The recovery strategy includes: selecting a backup set of the data group closest to the time point when the production data cannot be used normally for verification; If the verification passes, the recovery operation is performed; If the verification fails, the backup set of the current data group that has not been verified at the most recent time point is selected for verification until the verification passes; If a file in a certain group of production data cannot be used normally, the backup set of the corresponding file in this group is selected for verification; The data group backup set includes: mixed time point data composed of backup sets at multiple different time points.

[0010] Preferably, the production data is grouped according to the degree of association, and the data group backup set of each group is stored in different areas of the backup server.

[0011] Preferably, when backing up each group, a backup set at a backup time point is generated and stored in a storage location corresponding to the backup server.

[0012] Preferably, the degree of association includes: year, functional domain or region.

[0013] Preferably, the production data cannot be used normally includes: the file cannot be opened, or garbled characters exist after opening.

[0014] Preferably, the recovery operation includes: regular recovery or fast recovery.

[0015] Preferably, the core data of the production system is restored through conventional means; The non-core data of the production system is quickly restored.

[0016] Preferably, the core data includes: index data, basic user information, etc.

[0017] Preferably, the degree of association includes: by year, by functional domain, by region, etc.

[0018] Preferably, after the conventional recovery or fast recovery verification is completed, a mixed time point fast recovery data set of multiple different time points is formed.

[0019] Technical effects and advantages of the present invention: The file recovery method supporting mixed time points adopts mixed time point mounting technology to minimize data loss. By selecting a suitable time point in the backup data for mounting, the infected or attacked data can be restored to the most recent trusted state while retaining as much restored data state as possible, so that the business system can be quickly restored, the risk of data loss can be minimized, and a more reliable guarantee can be provided for the stable operation of the enterprise. The performance of the equipment used in the backup system is lower than that of the production environment, and the rapid recovery needs to provide recovery data to the production system through multiple protocols such as NFS and iSCSI, which may lead to relatively low recovery performance. This solution supports regular recovery of the core data of the production system (recovering the data directly to the production system requires a certain amount of transmission time) and rapid recovery of non-core data. Through the hierarchical recovery strategy, the backup system can better balance performance and recovery speed, and provide users with a more efficient and reliable data recovery experience. This will provide strong support for the business continuity and disaster recovery capabilities of the enterprise; the rapid recovery data set consists of backup sets at multiple different time points, forming a complete business data set at mixed time points. Such a data set can quickly restore each group of data, providing complete rapid recovery capabilities for mixed data; in addition to rapid recovery of data sets, some key core data can also be restored to the production system through conventional recovery methods. These key data are combined with the quick recovery data set to form a comprehensive recovery data set, which can ensure data integrity and normal operation of system functions during the recovery process; grouped data supports independent quick recovery, and specific data groups can be selectively restored as needed without restoring the entire system data. The flexibility makes the recovery process more efficient and can customize the recovery strategy according to specific circumstances; through the quick recovery technology of mixed time point files, customer data can be restored to the maximum extent, even if the data is completely destroyed or infected, this process may take a long time, especially when dealing with large amounts of data, the data of the production system can be quickly restored to different time points to generate a comprehensive and complete data, thereby minimizing the user's loss; it has the ability to selectively restore specific data groups without restoring the data of the entire system. This flexibility makes the recovery process more flexible and efficient, and the recovery strategy can be customized according to specific circumstances. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 This is a schematic diagram of the backup data storage structure of the present invention; Figure 2 This is a schematic diagram of the data structure after mixed recovery of the present invention. DETAILED DESCRIPTION

[0021] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0022] The present invention provides Figure 1 , Figure 2 A file recovery method supporting hybrid time points is shown in the figure. The unstructured file system has a directory structure. By grouping data directories according to the data characteristics generated by the production system, such as the degree of association, the data is stored in different storage locations, i.e., different areas, by group. This strategy plays a key role in realizing hybrid time point recovery.

[0023] Each data group is stored and managed independently. When quick recovery is needed, each data group can be quickly or normally restored independently, and the restored data can be checked. The method of quick switching verification includes: if a group of data is found to be at risk, it can be switched to a data group backup set at another time point for quick recovery. Once the check of the restored data group is completed, a complete quick recovery data set can be formed, which contains group data at multiple different time points.

[0024] The fast-recovery data set is composed of backup sets at multiple different time points, forming a complete business data set at mixed time points. For example, if the data set 1 is restored at 10 o'clock and the data set 2 is restored at 11 o'clock, such a data set can quickly restore the data of each group, providing a complete hybrid data fast recovery capability. Through fast switching verification, a complete business data set at a mixed time point with minimal loss is finally found.

[0025] In addition to the quick recovery data set, some key core data such as indexes can also be restored to the production system through conventional recovery methods. These key data are combined with the quick recovery data set to form a comprehensive recovery data set, which can ensure data integrity and normal operation of system functions during the recovery process.

[0026] Grouped data supports independent and fast recovery. You can selectively restore specific data groups as needed, without restoring the entire system data. This flexibility makes the recovery process more efficient and enables customized recovery strategies based on specific circumstances. Through fast switching verification, you can find available specific group data for recovery.

[0027] First, based on the characteristics of the user's unstructured production photo or file data, after sufficient communication with the user, the production data is grouped according to the degree of association, such as dividing photos or files by year, and the backup data of each group is stored in different areas of the backup server. Each backup will generate a time point for the native format data of each group, generating Figure 1 The grouped data shown; When production data is damaged or infected, for example, if you find that photos or files cannot be opened, you can first quickly restore the latest time point data of Group 1 and check whether there is potential damage or infection; the inspection method includes: according to the modification time, query whether the latest photo or file can be opened normally. If there is a risk, we can quickly switch to other backup time points and check whether the backed up production data is normal at other backup time points.

[0028] If the data in group 1 is a core data group, which is the index data of photos or files and needs to be accessed frequently, and has a significant impact on performance, you can restore the data in group 1 directly to the production system through regular recovery to achieve optimal performance; For other groups of data, similar processing is adopted as for group 1, and the available backup time points and recovery modes for each group are gradually found. A recovery strategy can be configured to specify the recovery time points and recovery modes for each group in the strategy. The recovery modes include regular or fast recovery, and a mixed time point unstructured production data set is quickly provided for use by the production system, and finally the following is generated: Figure 2 A production system data is shown.

[0029] In this implementation, if the user's production system is damaged due to erroneous operations such as accidental deletion or writing, the problem can be solved by quickly restoring the corresponding group data. The following is a possible solution: Quick data recovery: First, quickly restore the damaged data to the backup point in time through the backup system or other data recovery tools. This can help restore the data to the state before the error operation.

[0030] Check the backup data: Once the data is restored to the backup time point, it is necessary to carefully check the data to ensure that they are accurate data before the error operation. This may involve operations such as comparing and verifying the data to confirm the integrity and accuracy of the data.

[0031] Multiple switching checks: Perform multiple data switching and checks to ensure that available data is found. This means switching between different backup points multiple times, verifying the correctness of the data, and finding the most suitable data point for recovery.

[0032] Data recovery to production system: Once the available data point is confirmed, the corresponding set of data files can be restored to the production system. This process may require careful operation to ensure the correctness and integrity of the data.

[0033] Testing and verification: After restoring the data to the production system, perform necessary testing and verification to ensure that the system is functioning properly and that the data has been successfully restored to the state before the erroneous operation.

[0034] Through the above optimization measures, we can efficiently manage and restore unstructured production data, ensure data security and availability, and provide stable and efficient data support for production systems.

[0035] Finally, it should be noted that the above is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A file recovery method supporting mixed time points, characterized in that: include: When production data cannot be used normally, recovery operations are performed according to the recovery strategy; The recovery strategy includes: selecting a backup set of the data group closest to the point in time when the production data cannot be used normally for verification; If the verification passes, the recovery operation is performed; If the verification fails, the backup set of the current data group that has not been verified at the most recent time point is selected for verification until the verification passes; If a file in a certain group of production data cannot be used normally, the backup set of the corresponding file in this group is selected for verification; The data group backup set includes: mixed time point data composed of backup sets at multiple different time points.

2. A file recovery method supporting mixed time points according to claim 1, characterized in that: The production data is grouped according to the degree of association, and a backup set of each grouped data group is stored in different areas of the backup server.

3. The file recovery method supporting mixed time points according to claim 2, characterized in that: When backing up each group, a backup set at the backup time point is generated and stored in a storage location corresponding to the backup server.

4. The method for recovering files at mixed time points according to claim 3, characterized in that: The degree of association includes: year, functional domain or region.

5. The file recovery method supporting mixed time points according to claim 1, characterized in that: The production data cannot be used normally, including: the file cannot be opened or garbled characters exist after opening.

6. The file recovery method supporting mixed time points according to any one of claims 1 to 5, characterized in that: The recovery operation includes: normal recovery or fast recovery.

7. The file recovery method supporting mixed time points according to claim 6, characterized in that: The core data of the production system is restored through routine recovery; The non-core data of the production system is quickly restored.

8. The method for recovering files at mixed time points according to claim 7, characterized in that: After the conventional recovery or fast recovery operation is completed, a mixed time point fast recovery data set is formed.

9. The method for recovering files at mixed time points according to claim 7, characterized in that: The core data includes: index data or user basic information.

Images