Data destruction anti-leakage control method and device

Abstract

The invention provides a data destruction anti-leakage control method and device, and relates to the technical field of data security, and the method comprises the steps: obtaining a data destruction request for verification, and generating a destruction signal; synchronizing to a protection mechanism, generating a closing instruction, and controlling the display screen; executing data destruction monitoring, and generating a destruction monitoring result; performing security detection according to the destruction monitoring result in combination with the synchronous closing information to generate a destruction security detection result; and performing destruction protection according to the destruction monitoring result and the destruction safety detection result, generating a destruction protection control instruction, and performing intelligent control of data destruction leakage prevention. By means of the data destruction method and device, the technical problem that in the prior art, the data leakage risk exists in the destruction process due to the fact that residual data in a memory will be displayed through a display screen can be solved, the display screen is turned off while the data destruction instruction is triggered and executed, the safety and reliability of data destruction are improved, and the data leakage risk is reduced.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a data destruction and anti-leakage control method and device. Background Art

[0002] In existing electronic devices, data is generally stored in solid-state drives (SSDs) or embedded multimedia cards (eMMCs) as storage media. In some industries, data security is critical, so a data destruction function has been developed. This function writes a value of 0 or random data to each storage unit of NAND Flash to overwrite the original data, or triggers a preset destruction instruction to physically damage the NAND Flash chip by electric shock or overheating, completely destroying the internal storage structure of the chip and making the data unrecoverable. Even during the destruction process, data may be intercepted or read. Therefore, it is crucial to prevent data leakage during the data destruction process, and a series of security measures need to be taken to ensure that the entire destruction process is irreversible and cannot be intercepted.

[0003] The current data destruction refers to the data destruction technology that deletes data from the SSD of electronic devices under special circumstances and cannot be recovered. It mainly relies on the hardware trigger of the host side and the destruction protocol inside the SSD. The destruction process is usually triggered by the host side level control (usually a button). However, the data destruction process requires waiting time, especially for large devices, during which time the data may still be read or copied. In addition, when the storage device performs the destruction operation, since the memory temporarily stores the CPU calculation data and the data exchanged between the hard disk and the memory, even if the data in the hard disk is being destroyed, some cached information in the memory can still be viewed and operated, and may be output to the screen by the display, posing a risk of leakage.

[0004] In summary, the prior art has a technical problem in which there is a risk of data leakage because some data may remain in the memory during or after data destruction and may be viewed through the device display or other means. Summary of the invention

[0005] The purpose of this application is to provide a data destruction and anti-leakage control method and device to solve the technical problem in the prior art that some data may remain in the memory during or after the data destruction process and may be viewed through the device display or other means, resulting in the risk of data leakage.

[0006] In view of the above problems, the present application provides a data destruction and anti-leakage control method and device.

[0007] In the first aspect, the present application provides a data destruction and anti-leakage control method, which is implemented by a data destruction and anti-leakage control device, wherein the data destruction and anti-leakage control method includes: obtaining a data destruction request for verification, and generating a destruction signal according to the verification result; synchronizing to a protection mechanism based on the destruction signal, generating a shutdown instruction, controlling the display screen through the shutdown instruction, and obtaining synchronous shutdown information; triggering a host to perform data destruction monitoring based on the destruction signal, and generating a destruction monitoring result; performing a security check according to the destruction monitoring result and the synchronous shutdown information, and generating a destruction safety check result; performing destruction protection according to the destruction monitoring result and the destruction safety check result, generating a destruction protection control instruction, and performing intelligent control of data destruction and anti-leakage through the destruction protection control instruction.

[0008] In the second aspect, the present application also provides a data destruction and anti-leakage control device for executing a data destruction and anti-leakage control method as described in the first aspect, wherein the data destruction and anti-leakage control device includes: a data verification module, the data verification module is used to obtain a data destruction request for verification, and generate a destruction signal according to the verification result; a data synchronization module, the data synchronization module is used to synchronize to a protection mechanism based on the destruction signal, generate a shutdown instruction, control the display screen through the shutdown instruction, and obtain synchronous shutdown information; a destruction monitoring module, the destruction monitoring module is used to trigger the host to perform data destruction monitoring based on the destruction signal, and generate a destruction monitoring result; a security detection module, the security detection module is used to perform security detection according to the destruction monitoring result combined with the synchronous shutdown information, and generate a destruction safety detection result; a destruction protection module, the destruction protection module is used to perform destruction protection according to the destruction monitoring result combined with the destruction safety detection result, generate a destruction protection control instruction, and perform intelligent control of data destruction and anti-leakage through the destruction protection control instruction.

[0009] One or more technical solutions provided in this application have at least the following technical effects or advantages:

[0010] Verification is performed by obtaining a data destruction request, and a destruction signal is generated according to the verification result; based on the destruction signal, the destruction signal is synchronized to the protection mechanism, a shutdown instruction is generated, the display screen is controlled by the shutdown instruction, and synchronous shutdown information is obtained; based on the destruction signal, the host is triggered to perform data destruction monitoring and generate a destruction monitoring result; according to the destruction monitoring result combined with the synchronous shutdown information, a safety check is performed to generate a destruction safety check result; according to the destruction monitoring result combined with the destruction safety check result, destruction protection is performed to generate a destruction protection control instruction, and intelligent control of data destruction and leakage prevention is performed through the destruction protection control instruction. In other words, after verifying the destruction request, a destruction signal is transmitted horizontally, and it is synchronized to the protection mechanism to turn off the display screen. The data destruction operation is performed, and a safety check is performed in combination with the synchronous shutdown information to ensure that all protection measures are operating normally during the destruction process, and the destruction protection is intelligently controlled to greatly reduce the risk of data leakage.

[0011] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented according to the contents of the specification, and in order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are specifically cited below. It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present application, nor is it intended to limit the scope of the present application. Other features of the present application will become easy to understand through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate the technical solutions in the present application or the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings in the following description are only exemplary, and for ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0013] Figure 1 A flowchart of a data destruction and anti-leakage control method for this application;

[0014] Figure 2 This is a structural schematic diagram of a data destruction and anti-leakage control device of the present application.

[0015] Explanation of the accompanying drawings: data verification module 11, data synchronization module 12, destruction monitoring module 13, security detection module 14, destruction protection module 15. DETAILED DESCRIPTION

[0016] This application solves the technical problem in the prior art that some data may remain in the memory during or after the data destruction process, and may be viewed through the device display or other means, resulting in the risk of data leakage by providing a data destruction and anti-leakage control method and device. After verifying the destruction request, a destruction signal is sent horizontally, and it is synchronized to the protection mechanism to turn off the display. The data destruction operation is executed, and security detection is performed in combination with the synchronization shutdown information to ensure that all protection measures are operating normally during the destruction process, and the destruction protection is intelligently controlled to greatly reduce the risk of data leakage.

[0017] Below, the technical solutions in the present application will be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments of the present application. It should be understood that the present application is not limited to the example embodiments described herein. Based on the embodiments of the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application. It should also be noted that, for the convenience of description, only the parts related to the present application are shown in the accompanying drawings, rather than all of them.

[0018] For example, please refer to the attached Figure 1 The present application provides a data destruction and leakage prevention control method, wherein the data destruction and leakage prevention control method is applied to a data destruction and leakage prevention control device, and the data destruction and leakage prevention control method specifically includes the following steps:

[0019] Step 1: Obtain a data destruction request for verification and generate a destruction signal based on the verification result.

[0020] Specifically, a data destruction request is obtained, which is a request initiated by the user to start the data destruction process, such as by pressing a button or entering a specific command. The data destruction request is verified to confirm the legitimacy of the request, including checking the user's identity and authority, device status, environmental conditions and other aspects to prevent misoperation or unauthorized personnel from triggering data destruction. It can also include checking whether the request complies with specific security protocols or standards. After verification, a destruction signal is generated to start the destruction process. The destruction signal can be a digital signal, software instruction or hardware signal, depending on the design and implementation of the destruction system. It is usually an electrical signal sent to the hardware or software module that controls data destruction. The destruction signal includes a list of hard disk serial numbers, destruction type (physical destruction / data overwrite), execution time, parallel operations (operations that need to be performed while executing the destruction signal), etc. By verifying the data destruction request, it is ensured that only authorized users can trigger the destruction operation, thereby preventing unauthorized data destruction.

[0021] Step 2: Based on the destruction signal, the protection mechanism is synchronized to generate a closing instruction, and the display screen is controlled by the closing instruction to obtain synchronous closing information.

[0022] Specifically, the destruction signal is encrypted, and the encrypted destruction signal is synchronized to the protection mechanism for parsing to obtain a specific destruction task. The protection mechanism is a comprehensive system that integrates the protection target, identity authentication module and protection control module to ensure that only authenticated users can start the data destruction operation, and during the destruction process, the display screen and other channels that may leak data are controlled to ensure the security protection of each link and prevent any form of data leakage. The protection mechanism will traverse the parsed destruction task and extract the protection response data related to the destruction task, including the equipment, storage medium, interface and display status information that need to be protected. The shutdown analysis is performed on the status and destruction task of the display screen to determine the shutdown method, time point, type of screen to be closed (main screen, secondary screen, extended screen, etc.) of the display screen, and whether there are special display devices that need to be closed synchronously. The shutdown response strategy is matched with the current display screen information to preliminarily determine the time, method and specific device to be closed (such as main screen, secondary screen or extended screen) of the display screen, and obtain the shutdown instruction. The shutdown instruction is a command that instructs the execution of the operation of closing the display screen, and usually includes specific parameters for executing the shutdown operation, such as the time point and duration of the shutdown, the target of the shutdown, etc.

[0023] The display control module receives the shutdown command and parses it, determines the specific steps and processes, executes the shutdown command, and records the shutdown process in real time, including the specific time, execution status, and devices involved in each shutdown operation. After the shutdown operation is completed, a feedback result is generated. If the display device is not closed or fails to close, a secondary shutdown is automatically performed or other remedial measures are taken to ensure that all display devices are closed as required. Finally, the synchronous shutdown information, that is, the final status information of the display control, is obtained, confirming that all display devices have been closed as required and the protection of the display devices during the destruction process has been completed. The shutdown command is generated through the destruction signal, and the display is controlled to ensure that sensitive information will not be leaked during the data destruction process.

[0024] Step three: triggering the host to perform data destruction monitoring based on the destruction signal and generating a destruction monitoring result.

[0025] Specifically, when the host receives the destruction signal, it triggers the host to perform data destruction monitoring. The host is a computer or server that performs data destruction operations, which is responsible for receiving destruction signals and performing corresponding data destruction operations. During the data destruction process, the storage medium (such as hard disk, SSD, eMMC, etc.) is monitored to ensure that the data destruction process is carried out according to the predetermined plan and protocol, including monitoring the execution of the destruction operation, such as checking the progress, results and any abnormalities of the data destruction operation. Based on the monitored storage medium status, destruction progress, execution success or failure information, a destruction monitoring result is generated, including the progress, completion status, destruction time, any errors or abnormalities of the destruction operation. For example, the failure of some or all destruction operations may be caused by hardware failure, storage medium damage or other problems. Destruction monitoring can confirm whether the data has been completely destroyed as planned to prevent data from remaining in the storage device. When problems occur during the destruction process, such as device failure or storage unit abnormality, destruction monitoring can detect these abnormalities in time, generate corresponding reports, and prompt users or systems to take further measures to remedy the situation. During the destruction monitoring process, real-time monitoring and alarm mechanisms can be combined. If an abnormality is found during the destruction process, an alarm notification will be immediately generated to prompt the terminal administrator to intervene in time to avoid potential data leakage risks. By triggering the host to perform data destruction monitoring based on the destruction signal and generating destruction monitoring results, the security and integrity of the data destruction process are ensured.

[0026] Step 4: Perform safety detection according to the destruction monitoring result and the synchronous shutdown information to generate a destruction safety detection result.

[0027] Specifically, data destruction information, including the data destruction time period, is extracted from the destruction monitoring results to determine whether the predetermined destruction conditions are met. If not, it indicates that there is a destruction anomaly and data remains, which will lead to data leakage. If it is met, a successful destruction prompt data is generated, which proves that there is no data residue and all data is completely destroyed. Next, the data destruction time period is compared with the display screen shutdown time period to determine whether the data destruction time period is less than or equal to the display screen shutdown time period. If it is less than, it indicates that the display screen is safely closed during the data destruction period and there is no risk of data leakage. If the data destruction time period is greater than the display screen shutdown time period, it indicates that the data destruction process may be exposed on the display screen that is not closed, and there is a risk of data leakage. It is necessary to generate security anomaly data, mark the anomalies in the destruction process, and enter the anomaly handling process. Adding the anomaly identifier to the security detection result is the final assessment of the security of the entire destruction process, ensuring that all possible risk points in the destruction process are recorded and marked. By synchronously shutting down the destruction monitoring results and the display screen, a more comprehensive security assessment is provided to identify possible data leakage, capture and handle anomalies in a timely manner, and prevent potential data leakage.

[0028] Step 5: Perform destruction protection according to the destruction monitoring result and the destruction safety detection result, generate a destruction protection control instruction, and perform intelligent control of data destruction and leakage prevention through the destruction protection control instruction.

[0029] Specifically, the destruction monitoring results are used to determine multiple destruction data nodes according to the destruction process, that is, the specific execution points of the destruction task. Each destruction data node will have its corresponding destruction completion progress information, such as the node's data erasure progress, number of overwrites, whether there are abnormalities, etc. According to the completion progress information of each destruction node, and combined with the previously generated security anomaly identification (such as some nodes failed to complete the destruction as planned, hardware failure, etc.), the destruction task is dynamically adjusted. For example, for nodes with slow progress, resources are reallocated to speed up destruction; for nodes marked with abnormalities, remedial measures are taken such as re-executing the destruction or taking physical destruction measures. Based on the results of the dynamic adjustment, a new destruction update task is generated to revise or supplement the original destruction task, aiming to ensure that all nodes can complete the destruction as expected.

[0030] According to the destruction process, the entire destruction process is recorded in real time, including the progress of the destruction operation, the status of success or failure, the number of destruction coverage, etc., to generate a specific destruction execution status. According to the destruction process information and the destruction execution status, the current destruction update task is traversed to find and confirm multiple data nodes to be destroyed that have not been completed or have not reached the expected destruction standard. According to multiple destruction completion progress information, combined with the nodes that have not been destroyed, the entire destruction process is backtracked to find the source of data destruction anomalies. Backtracking determines the following: why some data was not destroyed, or why the display screen was not shut down synchronously or displayed abnormally during the destruction process, or why the destruction signal and the display screen operation failed to cooperate effectively, to find out the specific problems and abnormal sources in the destruction process.

[0031] According to multiple abnormal sources, the destruction signal is corrected and improved, such as restarting the destruction signal or updating the destruction signal. If there is a problem with the destruction signal, the continuity and security of task execution are ensured by regenerating and triggering the destruction signal. If the destruction signal needs to be corrected, it is updated according to the abnormal source, and its triggering mechanism, data processing flow or security protection strategy are optimized. By adjusting and protecting the destruction signal, it is ensured that the security of data destruction will not be affected when facing destruction abnormalities.

[0032] After processing and updating the destruction signal, a destruction protection control instruction is generated to further control and guide the execution of the destruction task, including turning off the display screen, disconnecting the external interface, starting encryption destruction, multi-level destruction verification, etc. According to the destruction protection control instruction, intelligent anti-leakage control of data destruction is carried out, which not only requires static execution of the destruction instruction, but also dynamic adjustment and real-time monitoring during the destruction process. For example, if a new potential risk is detected during the destruction process (such as an interface not disconnected or the display device is abnormally turned on), the protection strategy is automatically adjusted to ensure that protective measures are in place. By combining the destruction monitoring results and the destruction safety detection results, a protection control instruction is generated, and a comprehensive anti-leakage operation is performed on data destruction through an intelligent control system to ensure the security and integrity of the data destruction process, to prevent data leakage to the greatest extent possible during the entire destruction task, and to ensure that data is safely destroyed in place.

[0033] Further, step 2 of this application includes:

[0034] Perform data analysis based on the destruction signal to generate a destruction analysis result, and formulate a protection target based on the destruction analysis result; perform destruction safety analysis on the destruction signal based on the protection target to determine security requirement information; construct an identity authentication module in accordance with the protection target and the security requirement information; determine identity authentication information based on the identity authentication module, and generate a destruction start instruction when the identity authentication information is authenticated; perform control analysis based on the destruction start instruction and display screen information to construct a protection control module; integrate the protection target with the identity authentication module and the protection control module to construct the protection mechanism.

[0035] Specifically, a destruction signal is an instruction for initiating data destruction, which usually contains detailed information about the destruction operation, such as the storage device, scope, type, and priority of the destroyed storage device. The data in the destruction signal is parsed and processed to obtain the destruction parsing result, that is, the specific requirements for executing the destruction operation, and determine the type, location, scope, requirements, etc. of the data to be destroyed. According to the destruction parsing result, a protection target is formulated, that is, to determine which aspects need to be protected during the data destruction process (such as display screens, data buses, storage units, etc.), in order to protect the data from unauthorized access or leakage during the destruction process. Based on the protection target, the destruction signal is further analyzed for security. By analyzing the content of the destruction signal, the impact of the destruction signal on the protection target during the destruction process and the potential security risks (such as possible data leakage points, unstable parts of the destruction process, etc.) are evaluated, and security requirement information is generated. Security requirement information is the security conditions that need to be met based on the analysis results, including specific security measures, monitoring requirements or backup strategies.

[0036] The protection target and security requirement information are combined to form an authentication module, that is, to authenticate the user or device that triggers the destruction request, including username and password verification, biometric verification, etc., to ensure that only authorized users can start the destruction process. The current user or device is authenticated using the authentication module to generate authentication information. Once the user's authentication information is verified, a destruction start instruction is generated to start the data destruction process. For example, the authentication module requires the user to enter a security code and fingerprint. When a user enters the correct code and the fingerprint scan matches the pre-stored fingerprint data, the authentication information will be confirmed as authenticated, and then a destruction start instruction will be generated and sent to the device that controls the data destruction, such as a solid-state drive or storage server.

[0037] After the destruction start instruction is generated, a control analysis is performed in combination with the status information of the display screen, that is, the data or image displayed on the device display screen. The impact of the destruction start instruction on the display screen information is evaluated, and how to control the display screen to prevent data leakage. The control analysis may include determining when to turn off the display screen and how to keep the display screen turned off during the destruction process. Analyze the shutdown status of the display screen and the current displayed data status, and build a protection control module to ensure that the display screen is turned off and the data is not visible during the data destruction process. After the destruction start instruction is generated and the protection control module is built, the protection target, identity authentication module and protection control module are integrated together to form a complete protection mechanism. The protection mechanism is a comprehensive system that performs security protection at each link in the entire destruction operation to prevent any form of data leakage, ensure that only authenticated users can start data destruction, and effectively control the display screen and other channels that may leak data during the destruction process. Through multiple measures such as identity authentication, display screen control, and protection module construction, a comprehensive protection mechanism is formed to ensure that no leakage occurs at any link in the data destruction process, and effectively prevent data from leaking through the display or other channels during the destruction process. It is especially suitable for data destruction scenarios that require high security.

[0038] Furthermore, the present application also includes the following steps:

[0039] The destruction signal is encrypted to generate an encrypted destruction signal, and the encrypted destruction signal is synchronized to the protection mechanism for parsing to obtain a destruction task; based on the protection mechanism, the destruction task is traversed to extract protection response data, and the display screen is closed according to the protection response data. Analysis, generate a closing response strategy; match the display screen information according to the closing response strategy, and generate the closing instruction according to the matching result.

[0040] Specifically, the destruction signal is encrypted using the AES encryption algorithm to generate a destruction encryption signal to ensure that the signal will not be intercepted or tampered with during the transmission or processing of the data destruction process. The destruction encryption signal is an encrypted destruction signal, and only the system with the correct decryption key can interpret its content. The destruction encryption signal is transmitted to the protection mechanism for decryption and parsing. The corresponding decryption key is used in the protection mechanism to decrypt the encrypted signal and obtain the destruction task, that is, the specific operation instructions extracted from the destruction signal, including the specific data to be destroyed, the target device, and the protection requirements during the destruction process. The protection mechanism traverses the parsed destruction tasks, extracts the protection response data related to the destruction tasks, and instructs how to respond to the destruction tasks, including the status information of the devices, storage media, interfaces, and display screens that need to be protected.

[0041] According to the protection response data, a shutdown analysis is performed on the status and destruction task of the display screen, and a set of shutdown response strategies are generated, including determining the shutdown method, time point, type of screen to be closed (main screen, secondary screen, extended screen, etc.), and whether there are special display devices that need to be shut down synchronously. The shutdown response strategy is a strategy generated based on the shutdown analysis, which is used to guide how to shut down the display screen during the data destruction process. The shutdown response strategy is matched with the current display screen information to preliminarily determine the time and method of shutting down the display screen and the specific devices that need to be shut down (such as the main screen, secondary screen, extended screen, etc.). The display screen information includes the display status of the current device, whether multiple screens are connected, and the specific configuration of the display. When processing the shutdown of the display screen, some redundant protection measures are added, such as continuing to monitor whether the display device is mistakenly turned on or reconnected after the display screen is turned off to ensure the stability of the device status during the destruction. While shutting down the display device, considering the possibility of data leakage through other output interfaces, the external interfaces (such as HDMI, VGA, USB, etc.) are synchronously shut down to further enhance data protection.

[0042] Generate specific shutdown instructions based on the matching results, determine the shutdown time to ensure that there is no information leakage during the destruction process, determine the shutdown method (such as immediate shutdown, gradual shutdown, etc.), and determine the device to be shut down (such as main screen, secondary screen or extended screen, etc.). The generation of shutdown instructions ensures that the system can accurately shut down all necessary display devices according to the current protection requirements to ensure that data is not leaked through visual channels. By encrypting the destruction signal, extracting the protection response data, and accurately controlling the shutdown of the display screen, the security of the data destruction process is effectively improved, especially in preventing display screen data leakage, showing excellent protection capabilities to ensure that data is not leaked through the display device during the destruction process.

[0043] Furthermore, the present application also includes the following steps:

[0044] The closing instruction is received by the display screen control module for parsing to determine the closing process information; the closing instruction is executed according to the closing process information to record and generate a closing operation log; feedback is given to the display screen control module based on the closing operation log to generate a closing feedback result, and the display screen is synchronously controlled according to the closing feedback result to generate the synchronous closing information.

[0045] Specifically, the display screen control module is a software or hardware component used to manage display screen operations. After receiving the shutdown command, it parses the command content and determines the shutdown process information, that is, the specific steps and process of closing, including the specific steps of closing the display screen, the screens involved (main screen, secondary screen, extended screen), the time point and duration of closing, etc. The shutdown command is executed according to the shutdown process information obtained by the analysis, and the details of each step of the closing operation are recorded in real time to generate a closing operation log, including the sending time of the closing command, the start time and end time of the closing operation, the execution result, and other information. The closing operation log is a document used to record the process and results of the closing operation, including the specific time, execution status, and devices involved in each step of the closing operation.

[0046] Feedback the execution status of the display control module based on the shutdown operation log, including the success or failure status of the shutdown operation, the time point and duration of the shutdown operation, etc. The shutdown feedback result is the feedback information received by the display control module to determine the operation status and specific information. While generating the shutdown feedback result, the display device is monitored in real time to ensure that the display is not reopened or not closed during the shutdown operation. Perform synchronous control on the display according to the shutdown feedback result. If the feedback result during the shutdown process shows that some devices are not closed or fail to close, the system will automatically perform a secondary shutdown or take other remedial measures to ensure that all display devices are closed as required. Synchronous control includes operations such as turning off the display, keeping the display closed, or reopening the display after destruction is completed.

[0047] Synchronous shutdown information refers to the final status information of the display control, including the actual shutdown time of the display, confirming that all display devices have been shut down as required, and completing the protection of the display devices during the destruction process. A complete closed-loop control mechanism is formed by receiving shutdown instructions, execution, feedback and synchronous control to ensure that any abnormal operation can be captured and corrected in time, ensuring that the display device is completely shut down during the destruction process. A complete and secure display device management process is formed by receiving shutdown instructions, parsing execution, recording logs, feedback results, and performing synchronous control. The operation log and feedback mechanism ensure that each step of the shutdown operation is recorded in detail, further improving the traceability and compliance of the system, and can effectively prevent data leakage through the display, ensuring information security during the destruction process.

[0048] Further, step 4 of this application includes:

[0049] Based on the destruction monitoring result, data destruction information is extracted, and it is determined whether the data destruction information meets the expected destruction threshold, and the data destruction information includes data destruction duration information; if the data destruction information meets the expected destruction threshold, destruction success prompt data is generated, and according to the destruction success prompt data combined with the synchronous shutdown information, it is determined whether the data destruction duration information is less than or equal to the display screen shutdown duration information, and the synchronous shutdown information includes the display screen shutdown duration information; if the data destruction duration information is greater than the display screen shutdown duration information, security exception data is generated, and the destruction monitoring result is abnormally marked based on the security exception data, and multiple security exception marks are determined; the multiple security exception marks are added to the destruction safety detection result.

[0050] Specifically, data destruction information is extracted from the destruction monitoring results, including key data such as the completion status of the destruction, the duration of data destruction, etc., and it is judged whether the destruction process reaches the expected destruction threshold, that is, the predetermined destruction conditions, such as whether the destruction is thorough and whether the time is reasonable. The data destruction duration refers to the total time from the start to the completion of the destruction operation. The expected destruction threshold is a pre-set standard or target for the destruction operation, which is used to judge whether the destruction operation has achieved the expected effect, including the duration of the destruction operation, the amount of data destroyed, etc. If the data destruction information meets the expected destruction threshold, a successful destruction prompt data is generated, indicating that the destruction operation has been completed as planned. The successful destruction prompt data can also display information such as the success status of the destruction operation, the duration of the destruction operation, and the amount of data destroyed. The display screen closing duration information is extracted from the synchronous closing information. The display screen closing duration refers to the total time from the display screen closing to the next opening. The duration of the destruction operation and the display screen closing duration are compared to determine whether the data destruction duration information is less than or equal to the display screen closing duration information. In addition to comparing the total duration, the specific time nodes of the two need to be judged. If the start and end time points of the data destruction duration information are within the start and end time points of the display screen shutdown duration information, then the surface display screen is safely turned off during the data destruction period, and there is no risk of data leakage.

[0051] If the data destruction time exceeds the time the display screen is turned off, security anomaly data is generated, indicating that during the data destruction process, the display screen may be turned on prematurely or not turned off in time, and there is a risk of data leakage. The entire destruction monitoring result is marked with anomalies based on the security anomaly data, that is, all possible security anomalies in the destruction process are marked, including the display screen not being turned off in time or failing to be turned off, the destruction operation time is too long or other hardware problems occur, and the environment anomalies in the data destruction process (such as storage device failure) help administrators quickly identify and locate possible security issues. Add multiple security anomaly identifiers to the destruction security detection results to form a final security detection report, which includes all anomalies and risk points in the destruction operation. By comparing the data destruction time with the display screen shutdown time, it is ensured that data will not be leaked through the display screen during the destruction period, marking the anomalies in the destruction monitoring results, capturing and processing the anomalies in time, preventing potential data leakage, and effectively avoiding information leakage caused by the display screen not being turned off in time or the data destruction time being too long during the destruction process.

[0052] Further, step five of this application includes:

[0053] Based on the destruction monitoring result, destruction analysis is performed according to the destruction process information to determine multiple destruction data nodes, and the multiple destruction data nodes have multiple destruction completion progress information; the destruction task is dynamically adjusted according to the multiple destruction completion progress information combined with the multiple security anomaly identifiers to generate a destruction update task; based on the destruction process information, the destruction update task is traced back to the destruction signal to perform destruction protection, and the destruction protection control instruction is generated.

[0054] Specifically, the destruction monitoring results are analyzed according to the destruction process information, and each stage and operation step in the destruction process is analyzed to determine multiple destruction data nodes. The destruction process information refers to the specific steps and sequence of the destruction operation. Multiple destruction data nodes are key points or stages defined in the destruction process. Each destruction data node represents an important step or stage in the destruction process, and will have its corresponding destruction completion progress information, such as the node's data erasure progress, number of overwrites, whether there are anomalies, etc. The destruction completion progress information provides detailed status feedback for the destruction task. Especially in multi-node destruction tasks, the progress information can help identify which nodes are completed faster and which nodes have delays or errors.

[0055] According to the completion progress information of each destruction node, and combined with the previously generated security anomaly identification (such as some nodes failed to complete the destruction as planned, hardware failure, etc.), the destruction task is dynamically adjusted to ensure that the destruction task can be carried out according to the established plan, while solving possible security problems. For example, for nodes marked as abnormal, remedial measures are taken, such as re-executing the destruction or taking physical destruction measures. Based on the results of the dynamic adjustment, a destruction update task is generated, which is a revision or supplement to the original destruction task, aiming to ensure that all nodes can complete the destruction as expected, including re-destroying unfinished or abnormal nodes, increasing the number of coverage of certain nodes, adding additional steps, etc.

[0056] Record the execution status of the destruction process information, traverse the destruction update tasks, and determine the destruction data nodes that still need to be processed. According to the destruction data nodes that still need to be processed, combined with the completion progress information of each destruction node, backtrack the destruction update tasks to find out the specific problems and abnormal sources in the destruction process. Further process and protect the destruction signal according to the abnormal source found, including restarting the destruction signal, correcting the destruction signal, etc., to obtain the destruction protection control instruction, which is used to further control and guide the execution of the destruction task, and ensure that all new update tasks are safely executed under the protection mechanism. The generation of protection control instructions ensures that all updated destruction tasks can be carried out under security protection to prevent data exposure or leakage during dynamic adjustment. By dynamically adjusting the destruction tasks, based on real-time destruction monitoring results and security abnormality identification, the flexibility and security of the data destruction process are ensured.

[0057] Furthermore, the present application also includes the following steps:

[0058] Based on the destruction process information, a destruction record is made to obtain a destruction execution status; according to the destruction process information and the destruction execution status, the destruction update task is traversed to determine a plurality of data nodes to be destroyed; according to the plurality of destruction completion progress information and the plurality of data nodes to be destroyed, the destruction update task is backtracked to determine a plurality of data destruction anomaly sources; according to the plurality of data destruction anomaly sources, the destruction signal is protected from destruction to generate the destruction protection control instruction.

[0059] Specifically, according to the process information of the destruction operation, the whole process is recorded, including the start time, end time, amount of data destroyed, destruction method used, any errors or abnormalities, etc. of the destruction operation. According to the result of the destruction record, the destruction execution status is obtained, that is, the current status of the destruction operation, including whether the destruction operation has been completed, whether errors or abnormalities have occurred, the progress of the destruction, etc. According to the destruction process information and the destruction execution status, the destruction update task is traversed to find and confirm multiple data nodes to be destroyed that have not been completed or have not reached the expected destruction standard. These nodes may be undestroyed data blocks due to hardware problems, storage medium damage, or execution delays.

[0060] According to the completion progress information of each destroyed data node, including whether each node has been completed, the time of completion, the percentage of completion, etc., combined with each data node to be destroyed, check each step of the destruction update task to determine the cause of data destruction failure or abnormality. Multiple data destruction abnormality sources are the causes of data destruction failure or abnormality during the destruction process, including hardware failure, software error, network problem, operator error, etc. Backtracking is a technique used in algorithms, mainly used to solve combinatorial optimization problems. Starting from a solution to the problem, it gradually explores. When it is found that the current solution does not meet the conditions or is not the optimal solution, it returns to the previous step and changes a path to continue exploring until the optimal solution is found or all solutions have been explored.

[0061] According to the determined data destruction anomaly source, the destruction signal is protected against destruction, such as restarting or updating the destruction signal, and the destruction protection control instruction is obtained until the destruction task is executed. Destruction protection refers to a series of measures taken during the data destruction process to ensure that the data is completely destroyed and prevent data leakage or unauthorized access. By backtracking the destruction update task, diagnosing the problems in the destruction process, locating the anomaly source, optimizing the destruction process, and preventing similar problems from occurring in the future.

[0062] In summary, the data destruction and anti-leakage control method provided by this application has the following technical effects:

[0063] Verification is performed by obtaining a data destruction request, and a destruction signal is generated according to the verification result; based on the destruction signal, the destruction signal is synchronized to the protection mechanism, a shutdown instruction is generated, the display screen is controlled by the shutdown instruction, and synchronous shutdown information is obtained; based on the destruction signal, the host is triggered to perform data destruction monitoring and generate a destruction monitoring result; according to the destruction monitoring result combined with the synchronous shutdown information, a safety check is performed to generate a destruction safety check result; according to the destruction monitoring result combined with the destruction safety check result, destruction protection is performed to generate a destruction protection control instruction, and intelligent control of data destruction and leakage prevention is performed through the destruction protection control instruction. In other words, after verifying the destruction request, a destruction signal is transmitted horizontally, and it is synchronized to the protection mechanism to turn off the display screen. The data destruction operation is performed, and a safety check is performed in combination with the synchronous shutdown information to ensure that all protection measures are operating normally during the destruction process, and the destruction protection is intelligently controlled to greatly reduce the risk of data leakage.

[0064] Embodiment 2: Based on the same inventive concept as the data destruction and leakage prevention control method in the above embodiment, the present application also provides a data destruction and leakage prevention control device, see the attached Figure 2 , the data destruction and anti-leakage control device comprises:

[0065] The data verification module 11 is used to obtain a data destruction request for verification and generate a destruction signal according to the verification result.

[0066] The data synchronization module 12 is used to synchronize to the protection mechanism based on the destruction signal, generate a closing instruction, control the display screen through the closing instruction, and obtain synchronous closing information.

[0067] The destruction monitoring module 13 is used to trigger the host to perform data destruction monitoring based on the destruction signal and generate a destruction monitoring result.

[0068] The safety detection module 14 is used to perform safety detection according to the destruction monitoring result and the synchronous shutdown information to generate a destruction safety detection result.

[0069] The destruction protection module 15 is used to perform destruction protection according to the destruction monitoring result in combination with the destruction safety detection result, generate a destruction protection control instruction, and perform intelligent control of data destruction and leakage prevention through the destruction protection control instruction.

[0070] Furthermore, the data synchronization module 12 in the data destruction and leakage prevention control device is also used for:

[0071] Perform data analysis based on the destruction signal to generate a destruction analysis result, and formulate a protection target based on the destruction analysis result; perform destruction safety analysis on the destruction signal based on the protection target to determine security requirement information; construct an identity authentication module in accordance with the protection target and the security requirement information; determine identity authentication information based on the identity authentication module, and generate a destruction start instruction when the identity authentication information is authenticated; perform control analysis based on the destruction start instruction and display screen information to construct a protection control module; integrate the protection target with the identity authentication module and the protection control module to construct the protection mechanism.

[0072] Furthermore, the data synchronization module 12 in the data destruction and leakage prevention control device is also used for:

[0073] The destruction signal is encrypted to generate an encrypted destruction signal, and the encrypted destruction signal is synchronized to the protection mechanism for parsing to obtain a destruction task; based on the protection mechanism, the destruction task is traversed to extract protection response data, and the display screen is closed according to the protection response data. Analysis, generate a closing response strategy; match the display screen information according to the closing response strategy, and generate the closing instruction according to the matching result.

[0074] Furthermore, the data synchronization module 12 in the data destruction and leakage prevention control device is also used for:

[0075] The closing instruction is received by the display screen control module for parsing to determine the closing process information; the closing instruction is executed according to the closing process information to record and generate a closing operation log; feedback is given to the display screen control module based on the closing operation log to generate a closing feedback result, and the display screen is synchronously controlled according to the closing feedback result to generate the synchronous closing information.

[0076] Furthermore, the security detection module 14 in the data destruction and leakage prevention control device is also used for:

[0077] Based on the destruction monitoring result, data destruction information is extracted, and it is determined whether the data destruction information meets the expected destruction threshold, and the data destruction information includes data destruction duration information; if the data destruction information meets the expected destruction threshold, destruction success prompt data is generated, and according to the destruction success prompt data combined with the synchronous shutdown information, it is determined whether the data destruction duration information is less than or equal to the display screen shutdown duration information, and the synchronous shutdown information includes the display screen shutdown duration information; if the data destruction duration information is greater than the display screen shutdown duration information, security exception data is generated, and the destruction monitoring result is abnormally marked based on the security exception data, and multiple security exception marks are determined; the multiple security exception marks are added to the destruction safety detection result.

[0078] Furthermore, the destruction protection module 15 in the data destruction and leakage prevention control device is also used for:

[0079] Based on the destruction monitoring result, destruction analysis is performed according to the destruction process information to determine multiple destruction data nodes, and the multiple destruction data nodes have multiple destruction completion progress information; the destruction task is dynamically adjusted according to the multiple destruction completion progress information combined with the multiple security anomaly identifiers to generate a destruction update task; based on the destruction process information, the destruction update task is traced back to the destruction signal to perform destruction protection, and the destruction protection control instruction is generated.

[0080] Furthermore, the destruction protection module 15 in the data destruction and leakage prevention control device is also used for:

[0081] Based on the destruction process information, a destruction record is made to obtain a destruction execution status; according to the destruction process information and the destruction execution status, the destruction update task is traversed to determine a plurality of data nodes to be destroyed; according to the plurality of destruction completion progress information and the plurality of data nodes to be destroyed, the destruction update task is backtracked to determine a plurality of data destruction anomaly sources; according to the plurality of data destruction anomaly sources, the destruction signal is protected from destruction to generate the destruction protection control instruction.

[0082] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. Figure 1The data destruction and leakage prevention control method and specific examples in the first embodiment are also applicable to the data destruction and leakage prevention control device in the present embodiment. Through the above detailed description of the data destruction and leakage prevention control method, those skilled in the art can clearly know the data destruction and leakage prevention control device in the present embodiment, so for the sake of brevity of the specification, it will not be described in detail here. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method description.

[0083] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

[0084] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application belong to the scope of the present application and its equivalent technology, the present application is also intended to include these modifications and variations.

Claims

1. A data destruction and anti-leakage control method, characterized in that: include: Obtain a data destruction request for verification, and generate a destruction signal based on the verification result; Synchronize the protection mechanism based on the destruction signal, generate a closing instruction, control the display screen through the closing instruction, and obtain synchronous closing information; Triggering the host to perform data destruction monitoring based on the destruction signal and generating a destruction monitoring result; Perform safety detection according to the destruction monitoring result and the synchronous shutdown information to generate a destruction safety detection result; Destruction protection is performed according to the destruction monitoring result in combination with the destruction safety detection result, and a destruction protection control instruction is generated. Intelligent control of data destruction and leakage prevention is performed through the destruction protection control instruction.

2. A data destruction and anti-leakage control method as claimed in claim 1, characterized in that: The protection mechanism includes: Performing data analysis based on the destruction signal to generate a destruction analysis result, and formulating a protection target according to the destruction analysis result; Performing a destruction safety analysis on the destruction signal based on the protection target to determine security requirement information; Constructing an identity authentication module according to the protection target and the security requirement information; Determine identity authentication information based on the identity authentication module, and generate a destruction start instruction when the identity authentication information is authenticated; Perform control analysis based on the destruction start instruction combined with the display screen information to build a protection control module; The protection target is integrated with the identity authentication module and the protection control module to construct the protection mechanism.

3. A data destruction and anti-leakage control method as claimed in claim 2, characterized in that: Based on the destruction signal, the protection mechanism is synchronized to generate a shutdown instruction, including: Encrypting the destruction signal to generate a destruction encryption signal, synchronizing the destruction encryption signal to the protection mechanism for parsing, and obtaining a destruction task; Traversing the destruction task based on the protection mechanism to extract protection response data, performing shutdown analysis on the display screen according to the protection response data, and generating a shutdown response strategy; The closing response strategy is matched with the display screen information, and the closing instruction is generated according to the matching result.

4. A data destruction and anti-leakage control method as claimed in claim 1, characterized in that: The display screen is controlled by the closing instruction to obtain synchronous closing information, including: The closing instruction is received and analyzed by the display screen control module to determine the closing process information; Execute the closing instruction according to the closing process information to record and generate a closing operation log; Feedback is provided to the display screen control module based on the closing operation log to generate a closing feedback result, and the display screen is synchronously controlled according to the closing feedback result to generate the synchronous closing information.

5. A data destruction and anti-leakage control method as claimed in claim 3, characterized in that: Performing safety detection according to the destruction monitoring result and the synchronous shutdown information to generate a destruction safety detection result, including: Extracting data destruction information based on the destruction monitoring result, and determining whether the data destruction information meets the expected destruction threshold, wherein the data destruction information includes data destruction duration information; If the data destruction information meets the expected destruction threshold, then generating destruction success prompt data, and judging whether the data destruction duration information is less than or equal to the display screen shutdown duration information according to the destruction success prompt data combined with the synchronous shutdown information, wherein the synchronous shutdown information includes the display screen shutdown duration information; If the data destruction duration information is greater than the display screen shutdown duration information, security abnormality data is generated, and the destruction monitoring result is abnormally marked based on the security abnormality data to determine multiple security abnormality marks; The multiple security anomaly identifiers are added to the destruction security detection result.

6. A data destruction and leakage prevention control method as claimed in claim 5, characterized in that: Performing destruction protection according to the destruction monitoring result and the destruction safety detection result, and generating a destruction protection control instruction, including: Performing destruction analysis according to the destruction process information based on the destruction monitoring result to determine multiple destruction data nodes, wherein the multiple destruction data nodes have multiple destruction completion progress information; Dynamically adjusting the destruction task according to the multiple destruction completion progress information combined with the multiple security anomaly identifiers to generate a destruction update task; Based on the destruction process information, the destruction update task is traced back to the destruction signal for destruction protection, and the destruction protection control instruction is generated.

7. A data destruction and leakage prevention control method as claimed in claim 6, characterized in that: Based on the destruction process information, tracing back the destruction update task to the destruction signal for destruction protection, and generating the destruction protection control instruction, including: Perform destruction record based on the destruction process information to obtain the destruction execution status; The destruction update task is traversed according to the destruction process information and the destruction execution status to determine a plurality of data nodes to be destroyed; Backtracking the destruction update task according to the multiple destruction completion progress information in combination with the multiple data nodes to be destroyed, and determining multiple data destruction exception sources; The destruction signal is subjected to destruction protection according to the multiple data destruction exception sources, and the destruction protection control instruction is generated.

8. A data destruction and anti-leakage control device, characterized in that: A step for implementing a data destruction and leakage prevention control method as described in any one of claims 1 to 7, wherein the data destruction and leakage prevention control device comprises: A data verification module, the data verification module is used to obtain a data destruction request for verification and generate a destruction signal according to the verification result; A data synchronization module, the data synchronization module is used to synchronize to the protection mechanism based on the destruction signal, generate a shutdown instruction, control the display screen through the shutdown instruction, and obtain synchronous shutdown information; A destruction monitoring module, the destruction monitoring module is used to trigger the host to perform data destruction monitoring based on the destruction signal and generate a destruction monitoring result; A safety detection module, the safety detection module is used to perform safety detection according to the destruction monitoring result and the synchronous shutdown information, and generate a destruction safety detection result; A destruction protection module is used to perform destruction protection according to the destruction monitoring result in combination with the destruction safety detection result, generate a destruction protection control instruction, and perform intelligent control of data destruction and leakage prevention through the destruction protection control instruction.

Images