Data security-based storage device identification method, electronic device, and storage medium
By performing security screening on storage devices to obtain features, pre-identification and backup are carried out. By utilizing the difference analysis of twin storage devices, the problems of single identification methods and low security in existing technologies are solved, and more efficient and secure storage device identification is achieved.
Patent Information
- Application Number
- CN202411882998.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-19
- Publication Date
- 2025-12-05
- Estimated Expiration
- 2044-12-19
AI Technical Summary
Existing methods for identifying storage devices are relatively simple, and the identification codes are easily cracked, resulting in low identification security and potential security risks.
By performing security screening on the data within the storage device, security device characteristics and storage characteristics are obtained, pre-identification and backup are performed, and differential analysis of twin storage devices is used to obtain distinguishing parameters, which are then combined with data security for identification.
It improves the security and efficiency of storage device identification, prevents the risk of cracking due to a single identification method, and ensures the security and accuracy of the identification process.
Smart Images

Figure CN119806414B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of device identification technology, specifically to a storage device identification method, electronic device, and storage medium based on data security. Background Technology
[0002] Storage device identification refers to the process by which a computer system identifies and confirms storage devices, including hardware-level identification, operating system-level identification, and device management software-level identification. Hardware-level identification refers to the chipset and BIOS on the server motherboard being responsible for identifying and managing storage devices. Operating system-level identification refers to the server's operating system further identifying and managing storage devices once hardware-level identification is completed. Device management software-level identification refers to the use of device management software to further identify and manage storage devices in some large server environments.
[0003] Existing improvements for storage device identification typically address identification methods under various access states. For example, they might store the target storage device's identification information in a shortcut, comparing the accessed storage device's identification information with the stored shortcut to identify the device. While this method can effectively identify storage devices under various access states, it relies solely on comparison of identification information. Furthermore, it requires creating a shortcut and storing the identification information within it, making the process cumbersome and resulting in slow identification efficiency and low security. For instance, in publication number CN111198830A... The patent application discloses a method, apparatus, electronic device, and storage medium for identifying mobile storage devices. This solution achieves the ability to identify the target mobile storage device even when its access status changes, by receiving a trigger operation on the shortcut icon, thus allowing the shortcut icon to function normally. Other improvements for storage device identification typically involve obtaining the corresponding identification code based on the basic information of the storage device and performing the corresponding identification. However, this improvement method still suffers from limitations such as a relatively simple identification method and the ease with which the identification code corresponding to the storage device can be cracked, leading to security risks and low identification security during the identification process. Therefore, it is necessary to improve the existing methods for identifying storage devices. Summary of the Invention
[0004] This invention aims to at least partially solve one of the technical problems in the prior art. By proposing a storage device identification method, electronic device, and storage medium based on data security, it addresses the issues that existing storage device identification methods are relatively simple, the identification codes corresponding to storage devices are easily cracked, resulting in security risks and low identification security during the identification process.
[0005] To achieve the above objectives, in a first aspect, this application provides a storage device identification method based on data security, comprising the following steps:
[0006] Perform security screening on existing data within the storage device and acquire security device characteristics during the security screening; pre-identify the storage device based on the security device characteristics and acquire the storage characteristics of the security device based on the pre-identification results;
[0007] The storage device is identified and backed up using security device characteristics and storage characteristics, and the twin storage device is obtained based on the backup results; the twin storage device is subjected to difference analysis, and the distinguishing parameters of the storage device containing the twin storage device are obtained based on the processing results.
[0008] When identifying storage devices, a security screening is performed on the storage devices to be identified based on data security, and the storage devices are identified based on distinguishing parameters.
[0009] Furthermore, security screening is performed on the existing data within the storage device, and the security device characteristics are obtained during the security screening process, including:
[0010] The storage hard drives within the storage device are designated as Device Hard Drive SY1 to Device Hard Drive SY2. n Obtain existing data security screening software, and use the software to screen hard drives SY1 through SY2 respectively. n Perform security screening; for any device hard drive SY c SY device hard drive c The capacity is recorded as the total hard drive capacity. The device hard drive SY c The capacity occupied by the data in the middle is recorded as the total data capacity, and the value of dividing the total data capacity by the total hard disk capacity is recorded as the data percentage.
[0011] Establish a Cartesian coordinate system, denoted as the screening analysis coordinate system. The X-axis of the screening analysis coordinate system is in units of time, and the Y-axis is a number axis with corresponding values of... G0 is a data security screening software that checks the device's hard drive for SY. c When conducting security screening, the ratio of the amount of data screened to the total data volume is used, where G1 represents the percentage of data.
[0012] Furthermore, performing security screening on existing data within the storage device and acquiring security device characteristics during the security screening process also includes:
[0013] When data security screening software starts SYing the device's hard drive c After data screening, corresponding curves are plotted in the screening analysis coordinate system based on real-time data, until the device hard drive SY... cAfter completing the screening, the resulting curve is denoted as the screening curve SQ. c ;
[0014] Screening curve SQ c The points with the highest and lowest slopes in the curve are denoted as the fastest and slowest screening points, respectively. Connect the fastest and slowest screening points, and intersect the line with the screening curve SQ. c The intersection points are recorded as screening fluctuation points, and the number of screening fluctuation points is recorded as the screening fluctuation point count; the fluctuation feature algorithm is used to obtain the device hard drive SY. c The corresponding secure hard drive characteristics and fluctuation characteristic algorithm are as follows: Where F1 represents the characteristics of a secure hard drive, m represents the number of fluctuation points to be screened, and f i Let X be the slope corresponding to the i-th screening fluctuation point. i Let x be the x-coordinate of the i-th screening fluctuation point.
[0015] Furthermore, performing security screening on existing data within the storage device and acquiring security device characteristics during the security screening process also includes:
[0016] Get all device hard drives SY c The corresponding secure hard drive characteristics are used, and a comprehensive hard drive algorithm is employed to obtain the secure device characteristics of the storage device. The comprehensive hard drive algorithm is as follows: Among them, F2 represents the safety equipment characteristic, and H... j The security hard drive characteristics of the j-th device hard drive SY. This is the average value of the security hard drive characteristics of SY for all device hard drives.
[0017] Furthermore, the storage device is pre-identified based on security device characteristics, and the storage characteristics of the security device are obtained based on the pre-identification results, including:
[0018] Acquire and record the security device characteristics of all identifiable storage devices; set the pre-identification criteria of the recorded storage devices as the corresponding security device characteristics of the storage devices;
[0019] For any recorded storage device: simultaneously input data α to all hard disks SY of the storage device, and record the average instantaneous read / write rate of all hard disks SY at the start of data input as the input storage mean; after data α is input to all hard disks SY, record the average time of input of data α to all hard disks SY as the input time mean, and output data α from all hard disks SY.
[0020] The average instantaneous read / write rate of all hard drives SY at the start of data output is recorded as the output storage average. After data α is output from all hard drives SY, the average time taken for all hard drives to output data α is recorded as the output time average. Let v1 be the storage characteristic of the storage device, where t1 is the average input time, t2 is the average output time, v1 is the average input storage, and v2 is the average output storage.
[0021] Retrieve the storage characteristics corresponding to all recorded storage devices.
[0022] Furthermore, security device characteristics and storage characteristics are used to identify and back up storage devices, and twin storage devices are obtained based on the backup results; differential analysis is performed on the twin storage devices, and the distinguishing parameters of the storage devices containing twin storage devices are obtained based on the processing results, including:
[0023] Create an R-row × 3-column table, denoted as the identification backup table. In the top row of the identification backup table, except for the first cell, fill in the security device characteristics and storage characteristics in order. In the leftmost column, except for the top cell, fill in the names of all the recorded storage devices in order.
[0024] Fill the security device characteristics and storage characteristics of all recorded storage devices into the identification backup table; when the security device characteristics of any storage device β in the identification backup table are the same as the security device characteristics of storage device γ, record storage device γ as the twin storage device of storage device β.
[0025] Perform differential analysis on storage device γ; the differential analysis is as follows: when the storage characteristics of storage device γ are different from the storage characteristics of all other storage devices, the storage characteristics of storage device γ are recorded as the distinguishing parameter of storage device β.
[0026] Furthermore, differential analysis is performed on the twin storage devices, and the distinguishing parameters for storage devices containing twin storage devices are obtained based on the processing results, including:
[0027] When any storage device other than storage device γ has the same storage characteristics as storage device γ, the storage device with the same storage characteristics as storage device γ is denoted as the anchor device. The sum of the security device characteristics of storage device γ and the security device characteristics of all anchor devices is denoted as the distinguishing parameter of storage device β. Storage device β may have multiple distinguishing parameters.
[0028] Retrieve the distinguishing parameters for all storage devices containing twin storage devices in the identification backup table.
[0029] Furthermore, when identifying storage devices, security screening is performed on the storage devices to be identified based on data security, and identification of storage devices is performed based on distinguishing parameters, including:
[0030] When identifying storage devices, the storage devices being identified are recorded as devices to be identified; the storage characteristics of the devices to be identified are obtained using a storage characteristic acquisition method and recorded as identification storage characteristics; storage devices whose storage characteristics in the identification backup table are equal to the identification storage characteristics are recorded as devices to be confirmed.
[0031] When the number of devices to be verified is 1: the data security screening software is used to perform security screening on the device to be identified, and the security device characteristics of the device to be identified are obtained during the security screening based on the security device characteristic acquisition method; when the security device characteristics of the device to be identified are equal to the security device characteristics of the device to be verified, the device to be identified is identified as the device to be verified; when the security device characteristics of the device to be identified are not equal to the security device characteristics of the device to be verified, the device to be identified is identified as an unrecorded device.
[0032] When the number of devices to be verified is greater than 1: use data security screening software to perform security screening on the devices to be identified, and obtain the security device features of the devices to be identified during the security screening based on the security device feature acquisition method; record the sum of the security device features of all devices to be verified as the verification parameter; when the distinguishing parameter of any device to be verified Ω is equal to the storage feature or verification parameter of the device to be identified, the device to be identified is identified as the device to be verified Ω.
[0033] When the distinguishing parameters of all devices to be identified are not equal to the storage characteristics or the parameters to be identified of the device to be identified, the device to be identified will be identified as an unrecorded device.
[0034] Secondly, this application provides an electronic device including a processor and a memory, wherein the memory stores computer-readable instructions, and when the computer-readable instructions are executed by the processor, the steps in the method described above are performed.
[0035] Thirdly, this application provides a storage medium on which a computer program is stored, which, when executed by a processor, performs the steps of the method described above.
[0036] The beneficial effects of this invention are as follows: This application first performs security screening on the existing data in the storage device and obtains security device characteristics during the security screening; based on the security device characteristics, the storage device is pre-identified, and based on the pre-identification results, the storage characteristics of the security device are obtained. The advantage of this is that by obtaining the security device characteristics and the storage characteristics, it is possible to obtain the features that can be extracted when the storage device is subjected to security screening and the features that can be extracted when it is not subjected to security screening, respectively. This ensures that when identifying the storage device, identification can be prioritized based on the security device characteristics when security screening is possible, and identification can be based on the storage characteristics when security screening is not possible. At the same time, the obtained security identification features and device features are parameters that are more unique and consistent with the actual characteristics of the storage device compared with other storage devices, ensuring that the identification process of the storage device will not be easily cracked due to the relatively simple identification method. In addition, since the security device characteristics are obtained during the security screening, the identification of the storage device can be completed during the security screening, ensuring that there are no security risks in the identification process. Furthermore, the combination of security screening and device identification improves both identification efficiency and identification security.
[0037] This application also uses security device characteristics and storage characteristics to identify and back up storage devices, and obtains twin storage devices based on the backup results; it performs difference analysis on the twin storage devices, and obtains the distinguishing parameters of the storage devices containing twin storage devices based on the processing results; finally, when identifying storage devices, it performs security screening on the storage devices to be identified based on data security, and identifies the storage devices based on the distinguishing parameters. The advantage of this is that by obtaining twin storage devices and performing difference analysis to obtain distinguishing parameters, it is possible to effectively distinguish storage devices with the same security device characteristics, preventing identification errors caused by the same security device characteristics during identification. Attached Figure Description
[0038] Figure 1 This is a flowchart of the steps of the method of the present invention;
[0039] Figure 2 This is a schematic diagram of the screening curve SQ of the present invention;
[0040] Figure 3 This is a schematic diagram of the structure of the electronic device of the present invention;
[0041] Figure 4 This is a flowchart illustrating the identification process of the device to be identified according to the present invention. Detailed Implementation
[0042] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0043] Example 1, please refer to Figure 1 As shown, this application provides a storage device identification method based on data security, including the following steps:
[0044] Step S1: Perform security screening on the existing data in the storage device and obtain security device characteristics during the security screening; pre-identify the storage device based on the security device characteristics and obtain the storage characteristics of the security device based on the pre-identification results;
[0045] Step S1 includes: Step S101, designating the storage hard disks within the storage device as Device Hard Disk SY1 to Device Hard Disk SY2 respectively. n Obtain existing data security screening software, and use the software to screen hard drives SY1 through SY2 respectively. n Perform security screening; for any device hard drive SY c SY device hard drive c The capacity is recorded as the total hard drive capacity. The device hard drive SY c The capacity occupied by the data in the middle is recorded as the total data capacity, and the value of dividing the total data capacity by the total hard disk capacity is recorded as the data percentage.
[0046] In the specific implementation process, the actual acquisition of the device hard disk SY can be based on the independent hard disks in the storage device. For example, the hard disks in the storage device may include mechanical hard disks, solid-state drives, hybrid hard disks, and network hard disks; then, the mechanical hard disks and solid-state drives that are mutually exclusive can be recorded as two device hard disks SY respectively.
[0047] Step S102: Establish a Cartesian coordinate system, denoted as the screening analysis coordinate system. The X-axis of the screening analysis coordinate system is in units of time, and the Y-axis is a number axis with corresponding values of... G0 is a data security screening software that checks the device's hard drive for SY. c When conducting security screening, the ratio of the amount of data screened to the total data volume is used, where G1 represents the data percentage.
[0048] In specific implementation, for example, in a data processing scenario, if the total data capacity corresponding to hard drive SY on a single device is 100TB and the total hard drive capacity is 200TB, then the data proportion can be calculated to be 0.5. Simultaneously, the obtained screening curve SQ is as follows: Figure 2As shown, curve SQ is the screening curve SQ, point MI is the slowest screening point, and point MA is the fastest screening point. Figure 2 The line connecting point MI and point MA does not intersect with the screening curve SQ, meaning the number of screening fluctuation points is 0. In this case, the fluctuation feature algorithm cannot be calculated. Therefore, in this embodiment, when the number of screening fluctuation points is 0, the security hard disk feature is set to 0.
[0049] Step S103, when the data security screening software starts SY on the device hard drive c After data screening, corresponding curves are plotted in the screening analysis coordinate system based on real-time data, until the device hard drive SY... c After completing the screening, the resulting curve is denoted as the screening curve SQ. c ;
[0050] Step S104, the screening curve SQ c The points with the highest and lowest slopes in the curve are denoted as the fastest and slowest screening points, respectively. Connect the fastest and slowest screening points, and intersect the line with the screening curve SQ. c The intersection points are recorded as screening fluctuation points, and the number of screening fluctuation points is recorded as the screening fluctuation point count; the fluctuation feature algorithm is used to obtain the device hard drive SY. c The corresponding secure hard drive characteristics and fluctuation characteristic algorithm are as follows: Where F1 represents the characteristics of a secure hard drive, m represents the number of fluctuation points to be screened, and f i Let X be the slope corresponding to the i-th screening fluctuation point. i Let x be the x-coordinate of the i-th screening fluctuation point;
[0051] For example, in a data processing session, if the number of screening fluctuation points is 1, the coordinates of the screening fluctuation point are (20, 3), and the slope of the screening fluctuation point is 2, then the number of screening fluctuation points is 1. By calculation, the security hard drive feature is 2 / 3. By obtaining the security hard drive feature, based on the speed at which each device hard drive is security screened, the feature corresponding to each device hard drive can be obtained, thereby ensuring that the obtained security device feature can match the status of all device hard drives within the security device feature.
[0052] Step S105: Obtain the hard drive SY data for all devices. c The corresponding secure hard drive characteristics are used, and a comprehensive hard drive algorithm is employed to obtain the secure device characteristics of the storage device. The comprehensive hard drive algorithm is as follows: Among them, F2 represents the safety equipment characteristic, and H... j The security hard drive characteristics of the j-th device hard drive SY. The average value of the security hard drive characteristics of all device hard drives SY;
[0053] In a specific implementation process, for example, during a data processing session, if the security hard drive characteristics of all the device's hard drives are obtained as 0.5, 1, 1, 0.5, and 2 respectively, then calculations can be performed to obtain... F1 is 1, F2 is 0.3; therefore, the security device characteristic of the storage device can be set to 0.3.
[0054] Step S106: Obtain and record the security device characteristics of all identifiable storage devices; set the pre-identification criteria of the recorded storage devices as the corresponding security device characteristics of the storage devices;
[0055] Step S107: For any recorded storage device: simultaneously input data α to all device hard disks SY of the storage device, and record the average instantaneous read / write rate of all device hard disks SY at the start of data input as the input storage average; after data α is input to all device hard disks SY, record the average time of inputting data α to all device hard disks SY as the input time average, and output data α from all device hard disks SY.
[0056] Step S108: Record the average instantaneous read / write rate of all device hard disks SY at the start of data output as the output storage average. After data α is output from all device hard disks SY, record the average time taken for all device hard disks to output data α as the output time average. Let v1 be the storage characteristic of the storage device, where t1 is the average input time, t2 is the average output time, v1 is the average input storage, and v2 is the average output storage.
[0057] In the specific implementation process, data α is only used to obtain storage characteristics. Data α can be set according to the actual situation. At the same time, it should be ensured that the data input and output are data α when obtaining storage characteristics of the storage device in the future. For example, in the process of obtaining storage characteristics, if the average input storage is 2mb / s, the average output storage is 4mb / s, the average input time is 20s, and the average output time is 10s, then the storage characteristic of the storage device can be calculated to be 1.5.
[0058] Step S109: Obtain the storage characteristics corresponding to all recorded storage devices.
[0059] Step S2: Use security device features and storage features to identify and back up the storage device, and obtain the twin storage device based on the backup results; perform difference analysis on the twin storage device, and obtain the distinguishing parameters of the storage device containing the twin storage device based on the processing results;
[0060] Step S2 includes: Step S201, creating a table of R rows × 3 columns, denoted as the identification backup table, wherein the top row of the identification backup table, except for the first cell, is filled with security device characteristics and storage characteristics in sequence, and the leftmost column, except for the top cell, is filled with the names of all recorded storage devices in sequence.
[0061] Step S202: Fill the security device characteristics and storage characteristics of all recorded storage devices into the identification backup table; when the security device characteristics of any storage device β in the identification backup table are the same as the security device characteristics of storage device γ, record storage device γ as the twin storage device of storage device β.
[0062] In the specific implementation process, the value of R is the value corresponding to the number of storage devices plus 1. For example, if the number of storage devices analyzed in one analysis is 10, then the value of R should be 11. For example, if the identification backup table is established after one data analysis as shown in Table 1: Identification Backup Table, then through analysis, it can be found that storage device A and storage device C have the same security device characteristics. Storage device A can be recorded as a twin storage device of storage device C, or storage device C can be recorded as a twin storage device of storage device A.
[0063] Table 1: Identifying Backup Tables
[0064] Safety equipment characteristics Storage characteristics Storage device A 0.5 2 Storage device B 0.3 1.4 Storage device C 0.5 1.6 Storage device D 1.3 5
[0065] The purpose of acquiring twin storage devices is to effectively distinguish storage devices with the same security device characteristics, and to prevent identification errors caused by the similarity of security device characteristics during identification.
[0066] Step S203: Perform differential analysis on storage device γ; the differential analysis is as follows: when the storage characteristics of storage device γ are different from the storage characteristics of all other storage devices, the storage characteristics of storage device γ are recorded as the distinguishing parameter of storage device β.
[0067] In the specific implementation process, for example, during a data processing, the identification backup table obtained is shown in Table 1. For twin storage devices: storage device A, since the storage characteristics of storage device A are different from the storage characteristics of all other storage devices, 2 can be set as the distinguishing parameter of storage device C.
[0068] Step S204: When the storage characteristics of any storage device other than storage device γ are the same as those of storage device γ, the storage device with the same storage characteristics as storage device γ is recorded as the anchor device, and the sum of the security device characteristics of storage device γ and the security device characteristics of all anchor devices is recorded as the distinguishing parameter of storage device β. Storage device β may have multiple distinguishing parameters.
[0069] Step S205: Obtain the distinguishing parameters corresponding to all storage devices containing twin storage devices in the identification backup table.
[0070] Step S3: When identifying a storage device, a security screening is performed on the storage device to be identified based on data security, and the storage device is identified based on the distinguishing parameters.
[0071] Step S301, when identifying the storage device, please refer to... Figure 4 As shown, the storage device to be identified is denoted as the device to be identified; the storage characteristics of the device to be identified are obtained by the storage characteristic acquisition method and denoted as the identification storage characteristics; the storage devices in the identification backup table whose storage characteristics are equal to the identification storage characteristics are denoted as the devices to be confirmed.
[0072] Step S302: When the number of devices to be verified is 1: Use data security screening software to perform security screening on the device to be identified, and obtain the security device features of the device to be identified during the security screening based on the security device feature acquisition method; when the security device features of the device to be identified are equal to the security device features of the device to be verified, identify the device to be identified as the device to be verified; when the security device features of the device to be identified are not equal to the security device features of the device to be verified, identify the device to be identified as an unrecorded device.
[0073] In the specific implementation process, when the number of devices to be confirmed is 1, it means that only one recorded storage device has the same storage characteristics as the device to be identified. Therefore, identification can be performed simply by comparing the characteristics of the security devices.
[0074] Step S303: When the number of devices to be confirmed is greater than 1: Use data security screening software to perform security screening on the devices to be identified, and obtain the security device features of the devices to be identified during the security screening based on the security device feature acquisition method; record the sum of the security device features of all devices to be confirmed as the confirmation parameter; when the distinguishing parameter of any device to be confirmed Ω is equal to the storage feature or the confirmation parameter of the device to be identified, the device to be identified is identified as the device to be confirmed Ω.
[0075] Step S304: When the distinguishing parameters of all devices to be identified are not equal to the storage characteristics or the parameters to be identified of the device to be identified, the device to be identified is identified as an unrecorded device.
[0076] Example 2, please refer to Figure 3 As shown, Figure 3A schematic diagram of an electronic device is provided, which may include a processor, a communication interface, a memory, and a communication bus. The processor, communication interface, and memory communicate with each other via the communication bus. The memory stores computer-readable instructions, and the processor can invoke these instructions. When the processor executes a computer-readable instruction, it performs steps as described in the data security-based storage device identification method to achieve the following functions: First, it performs a security screening on the existing data within the storage device and acquires security device characteristics during the screening; it pre-identifies the storage device based on these security device characteristics and acquires the storage characteristics of the security device based on the pre-identification results; it also uses the security device characteristics and storage characteristics to perform identification backup of the storage device and acquires a twin storage device based on the backup results; it performs difference analysis processing on the twin storage device and acquires the distinguishing parameters of the storage device containing the twin storage device based on the processing results; finally, when identifying the storage device, it performs a security screening on the storage device to be identified based on data security and identifies the storage device based on the distinguishing parameters.
[0077] Furthermore, the logical instructions in the aforementioned memory can be implemented as software functional units and sold or used as independent products, and can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.
[0078] Example 3: This application also provides a computer program product, which includes a computer program stored on a computer-readable storage medium. The computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the data security-based storage device identification method provided by the above methods. The method includes: firstly, performing security screening on existing data in the storage device and obtaining security device characteristics during the security screening; pre-identifying the storage device based on the security device characteristics and obtaining storage characteristics of the security device based on the pre-identification results; further using the security device characteristics and storage characteristics to identify and back up the storage device, and obtaining a twin storage device based on the backup results; performing difference analysis processing on the twin storage device and obtaining distinguishing parameters of the storage device containing the twin storage device based on the processing results; finally, when identifying the storage device, performing security screening on the storage device to be identified based on data security and identifying the storage device based on the distinguishing parameters.
[0079] Example 4: This application also provides a computer-readable storage medium. This application provides a storage medium storing a computer program thereon. When the computer program is executed by a processor, it performs the steps of the data security-based storage device identification method described above to achieve the following functions: First, it performs security screening on the existing data within the storage device and obtains security device characteristics during the security screening; it pre-identifies the storage device based on the security device characteristics and obtains the storage characteristics of the security device based on the pre-identification results; it also uses the security device characteristics and storage characteristics to perform identification backup of the storage device and obtains a twin storage device based on the backup results; it performs difference analysis processing on the twin storage device and obtains the distinguishing parameters of the storage device containing the twin storage device based on the processing results; finally, when identifying the storage device, it performs security screening on the storage device to be identified based on data security and identifies the storage device based on the distinguishing parameters.
[0080] Based on the above description of the embodiments, the embodiments of the present invention can be provided as methods, systems, or computer program products. Based on this understanding, the technical solutions described above, or the parts that contribute to the prior art, can be embodied in the form of software products. These computer software products can be stored in computer-readable storage media, such as ROM / RAM, magnetic disks, optical disks, etc., and include several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or certain parts of the embodiments.
[0081] In the embodiments provided in this application, it should be understood that the disclosed system or method can be implemented in other ways. The embodiments described above are merely illustrative. For example, the division of modules or units is only a logical functional division, and there may be other division methods in actual implementation. Furthermore, multiple modules or units may be combined or integrated into another system, or some features may be ignored or not executed. Additionally, the coupling or direct coupling or communication connection shown or discussed may be through some communication interfaces. The indirect coupling or communication connection between systems, modules, and units may be electrical, mechanical, or other forms.
[0082] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.
Claims
1. A method for identifying a storage device based on data security, characterized by, The method comprises the following steps: safety screening of existing data in the storage device, and obtaining security device features during the safety screening; pre-identifying the storage device based on the security device features, and obtaining the storage features of the security device based on the pre-identified results; identifying and backing up the storage device using the security device features and the storage features, and obtaining the twin storage device based on the backup results; differential analysis and processing of the twin storage device, and obtaining the distinguishing parameters of the storage device containing the twin storage device based on the processing results; when identifying the storage device, safety screening of the storage device to be identified based on data security, and identifying the storage device based on the distinguishing parameters; safety screening of existing data in the storage device, and obtaining security device features during the safety screening comprises: The storage hard disks in the storage device are respectively denoted as device hard disk SY1 to device hard disk SYn n ; existing data security screening software is acquired, and the data security screening software is used to respectively perform security screening on the device hard disk SY1 to device hard disk SYn n ; for any one device hard disk SYi c , the capacity of the device hard disk SYi c is denoted as a hard disk total capacity, the capacity occupied by data in the device hard disk SYi c is denoted as a data total capacity, and a value obtained by dividing the data total capacity by the hard disk total capacity is denoted as a data proportion. A plane rectangular coordinate system is established, denoted as a screening analysis coordinate system, wherein a unit of an X axis of the screening analysis coordinate system is time, a Y axis is a number axis and a corresponding numerical value is , G0 is a data security screening software, a security screening is performed on a device hard disk SY c , a ratio of a screened data amount to a total capacity, G1 is a data proportion; When the data security screening software starts to screen the device hard disk SY c , the corresponding curve is drawn in the screening analysis coordinate system based on real-time data until the screening of the device hard disk SY c is completed, and the obtained curve is recorded as a screening curve SQ c . The highest point and the lowest point of the slope in the screening curve SQ c are recorded as the fastest screening point and the slowest screening point respectively, the fastest screening point and the slowest screening point are connected, and the intersection of the connecting line and the screening curve SQ c is recorded as a screening fluctuation point, and the number of screening fluctuation points is recorded as the screening fluctuation point number; the fluctuation feature algorithm is used to obtain the corresponding security hard disk feature of the device hard disk SY c , and the fluctuation feature algorithm is as follows: , wherein F1 is the security hard disk feature, m is the screening fluctuation point number, f i is the slope corresponding to the i-th screening fluctuation point, and X i is the abscissa of the i-th screening fluctuation point. Get all the device hard disk SY c The corresponding security hard disk features, and use the hard disk comprehensive algorithm to obtain the security device features of the storage device, and the disk comprehensive algorithm is: , wherein F2 is the security device feature, H j is the security hard disk feature of the jth device hard disk SY j , is the average value of the security hard disk features of all device hard disks SY.
2. The data security based storage device identification method of claim 1, wherein, pre-identifying the storage device based on the security device features, and obtaining the storage features of the security device based on the pre-identified results comprises: obtaining the security device features of all identifiable storage devices and recording them; setting the pre-identification standard of the recorded storage device as the security device features corresponding to the storage device; for any one of the recorded storage devices: simultaneously inputting data α to all device hard disks SY of the storage device, and recording the average value of the instantaneous read-write speed of all device hard disks SY at the time of starting data input as the input storage average value; after data α is input to all device hard disks SY, recording the average value of the time of inputting data α to all device hard disks SY as the input time average value, and outputting data α from all device hard disks SY; The average instantaneous read / write rate of all hard drives SY at the start of data output is recorded as the output storage average. After data α is output from all hard drives SY, the average time taken for all hard drives to output data α is recorded as the output time average. Let v1 be the storage characteristic of the storage device, where t1 is the average input time, t2 is the average output time, v1 is the average input storage, and v2 is the average output storage. obtaining the storage features corresponding to all recorded storage devices. 3.The data security based storage device identification method of claim 1, wherein, identifying and backing up the storage device using the security device features and the storage features, and obtaining the twin storage device based on the backup results; differential analysis and processing of the twin storage device, and obtaining the distinguishing parameters of the storage device containing the twin storage device based on the processing results comprises: establishing an R-row × 3-column table, denoted as an identification backup table, wherein the top row of the identification backup table is filled with the security device features and the storage features in turn except for the first cell, and the leftmost column is filled with the names of all recorded storage devices in turn except for the top cell; filling the security device features and the storage features of all recorded storage devices into the identification backup table; when the security device features of any one storage device β in the identification backup table are the same as the security device features of a storage device γ, recording the storage device γ as the twin storage device of the storage device β; differential analysis and processing of the storage device γ; the differential analysis and processing is that when the storage features of the storage device γ are different from the storage features of all storage devices except the storage device γ, recording the storage features of the storage device γ as the distinguishing parameters of the storage device β.
4. The data security based storage device identification method of claim 3, wherein, differential analysis and processing of the twin storage device, and obtaining the distinguishing parameters of the storage device containing the twin storage device based on the processing results further comprises: When the storage feature of any one of the storage devices other than the storage device γ is the same as the storage feature of the storage device γ, the storage device with the same storage feature as the storage device γ is recorded as an anchor device, and the sum of the security device features of the storage device γ and all the anchor devices is recorded as the distinguishing parameter of the storage device β, wherein there can be multiple distinguishing parameters of the storage device β; Obtaining the distinguishing parameters corresponding to all the storage device pairs containing twin storage devices in the backup table.
5. The data security based storage device identification method of claim 4, wherein, When identifying the storage device, the to-be-identified storage device is subjected to security screening based on data security, and the storage device is identified based on the distinguishing parameter, comprising: When identifying the storage device, the storage device to be identified is recorded as a to-be-identified device; the storage feature of the to-be-identified device is obtained based on the storage feature obtaining method, and is recorded as an identification storage feature; the storage device with the storage feature equal to the identification storage feature in the identification backup table is recorded as a to-be-confirmed device; When the number of to-be-confirmed devices is 1: the to-be-identified device is subjected to security screening using data security screening software, and the security device feature of the to-be-identified device is obtained during the security screening based on the security device feature obtaining method; when the security device feature of the to-be-identified device is equal to the security device feature of the to-be-confirmed device, the to-be-identified device is identified as the to-be-confirmed device; when the security device feature of the to-be-identified device is not equal to the security device feature of the to-be-confirmed device, the to-be-identified device is identified as an unrecorded device; When the number of to-be-confirmed devices is greater than 1: the to-be-identified device is subjected to security screening using data security screening software, and the security device feature of the to-be-identified device is obtained during the security screening based on the security device feature obtaining method; the sum of the security device features of all the to-be-confirmed devices is recorded as a to-be-confirmed parameter; when the distinguishing parameter of any one of the to-be-confirmed devices Ω is equal to the storage feature of the to-be-identified device or the to-be-confirmed parameter, the to-be-identified device is identified as the to-be-confirmed device Ω; When the distinguishing parameters of all the to-be-confirmed devices are not equal to the storage feature of the to-be-identified device or the to-be-confirmed parameter, the to-be-identified device is identified as an unrecorded device.
6. An electronic device, comprising: The computer program is executed by the processor to run the steps in the method of any one of claims 1-5.
7. A storage medium having stored thereon a computer program, characterized in that The computer program is executed by the processor to run the steps in the method of any one of claims 1-5.
Citation Information
Patent Citations
A mobile storage device identification method and apparatus, an electronic device and a storage medium
CN111198830A
Equipment type identification method and device
CN111625807A
Device identification apparatus, device identification system, device identification method and program
JP2014052825A