File smashing method and device, storage medium and computer equipment
The file shredding method addresses the vulnerability of file data recovery by identifying and resolving occupancy before performing three-stage overwrite operations, ensuring secure and irreversible deletion in Windows systems.
Patent Information
- Application Number
- CN202411915116.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-24
- Publication Date
- 2025-05-06
AI Technical Summary
Existing file deletion methods in Windows operating systems do not physically remove file data from the hard disk, leaving it vulnerable to recovery, failing to meet user requirements for secure and irreversible file deletion.
A method and device for file shredding that identifies and resolves file occupancy before performing three-stage overwrite operations on the disk areas where the files are stored, using different patterns to ensure complete data destruction.
Ensures secure and irreversible file deletion by thoroughly overwriting disk areas, preventing data recovery and enhancing data protection with a convenient, reliable process.
Smart Images
Figure CN119938615A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of computer technology, and in particular to a file shredding method and device, a storage medium, and a computer device. Background Art
[0002] In today's information society, a large number of sensitive or confidential files are stored on user computer disks, such as personal privacy information, corporate financial data, confidential documents, etc. Once these files are leaked or illegally restored, they may pose a serious threat to personal privacy, corporate security, and even national security. Therefore, users have extremely high requirements for data security after deleting these sensitive files, hoping that the files cannot be recovered by data recovery software after being deleted, so as to achieve the effect of permanent deletion.
[0003] However, in the Windows operating system, the traditional way of deleting files is through a series of logical operations, such as updating the directory structure, releasing storage space, etc. These operations do not physically delete the file data from the hard disk, but only mark the file index in the file system as "deleted" and mark the corresponding storage space as available. This means that even if the file is no longer visible in the file system, its data still remains on the hard disk tracks. As long as these tracks are not overwritten by new data, it is possible to recover them through data recovery software. Summary of the invention
[0004] In view of this, the present application provides a file shredding method and device, storage medium, and computer equipment, which are applied to the Windows operating system. The target shredding file is determined based on the shredding target. The shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, the files in the folder are enumerated to obtain multiple target shredding files; for any target shredding file, the occupancy of the target shredding file is detected, and the target shredding file with occupancy is released; for any target shredding file that is not occupied, the disk area where the target shredding file is located is overwritten based on three different overwrite modes, until the disk areas where all the target shredding files are located are overwritten. By overwriting the storage space of the deleted files multiple times, it can ensure that the file data is completely destroyed, improve the security of file deletion, and provide users with a more convenient and reliable data protection method.
[0005] According to one aspect of the present application, a file shredding method is provided, the method comprising:
[0006] receiving a file shredding instruction, and determining a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, enumerating the files in the folder to obtain multiple target shredding files;
[0007] For any target shredded file, detect the occupancy of the target shredded file, and when occupancy is detected, obtain file occupancy information of the target shredded file, wherein the file occupancy information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID;
[0008] Based on a preset deoccupancy strategy corresponding to the occupancy situation and the file occupancy information, deoccupancy of the target shredded file;
[0009] For any target shredded file that is not occupied, the disk area where the target shredded file is located is overwritten respectively based on three different overwriting modes until the disk areas where all the target shredded files are located are overwritten.
[0010] Optionally, the three different overwriting modes include one-stage overwriting, two-stage overwriting and three-stage overwriting; and overwriting the disk area where the target shredded file is located based on the three different overwriting modes respectively includes:
[0011] Determine the target disk area where the target shredded file is located, and perform a one-stage overwriting of the entire target disk area based on 0x00 as the unit content;
[0012] In the target disk area after the first-stage overwriting, based on the preset second-stage overwriting times, the second-stage overwriting area for each second-stage overwriting is determined, and based on 0xCC as the unit content, the second-stage overwriting is performed on the entire second-stage overwriting area, wherein each second-stage overwriting area is smaller than the target disk area;
[0013] In the target disk area after the two-stage overwriting, the target disk area is overwritten in the three-stage overwriting in the whole area based on 0xCC as the unit content.
[0014] Optionally, the enumerating each file in the folder to obtain multiple target shredded files includes:
[0015] Call the first file search function to search for the first file in the storage directory corresponding to the folder and return the first file handle;
[0016] Based on the first file handle and the function of finding the next file, the remaining files except the first file in the storage directory are found to obtain all the target shredded files in the folder.
[0017] Optionally, the detecting the occupancy of the target shredded file includes:
[0018] Restarting the manager session based on the resource management session startup interface, and registering the target shredded file in the restarted manager session;
[0019] A registered file list corresponding to the restarted manager session is obtained, and target shredding files that need to be closed or ended are displayed in the registered file list, and it is determined that there is an occupation situation, wherein the occupation situation includes the occupation of the file handle, the occupation of the module memory of the process, and the occupation of the dependency of the continuously running process.
[0020] Optionally, when the occupancy is detected, obtaining the file occupancy information of the target shredded file includes:
[0021] If an occupied file handle matching the target shredded file is obtained from the file handles opened in the current Windows operating system, the occupancy status of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file;
[0022] If an occupied memory module matching the target shredded file is obtained in the memory module loaded by the running process, the occupancy of the target shredded file is the module memory occupied by the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file;
[0023] If it is obtained that the target shredded file is dependently occupied by a continuously running process, the occupancy status of the target shredded file is dependently occupied by the continuously running process, and the dependently occupied occupying process ID is recorded as the file occupancy information of the target shredded file.
[0024] Optionally, the releasing the occupation of the target shredded file based on a preset release strategy corresponding to the occupation status and the file occupation information includes:
[0025] For the target shredded file that is occupied by the file handle, closing the occupied file handle corresponding to the target shredded file;
[0026] For the target shredded file occupied by the module memory of the process, the occupied memory at the address of the occupied memory module is released by using the process termination function;
[0027] For the target shredded file that is occupied by the continuously running process, a process closing function is called to close the process corresponding to the occupying process ID.
[0028] Optionally, the method further comprises:
[0029] When all target shredding files are successfully shredded, a file shredding completion prompt is generated based on the successfully shredded file information, and the file shredding completion prompt is displayed on an operation interface of a preset file shredding platform, wherein the file shredding instruction is triggered based on the user selecting a shredding target on the operation interface.
[0030] According to another aspect of the present application, a file shredding device is provided, the device comprising:
[0031] A batch processing and enumeration module, for receiving a file shredding instruction, and determining a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, enumerate the files in the folder to obtain multiple target shredding files;
[0032] A file occupancy detection module is used to detect the occupancy of any target shredded file, and when occupancy is detected, obtain the file occupancy information of the target shredded file, wherein the file occupancy information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID;
[0033] A file occupancy release module, used to release the occupation of the target shredded file based on a preset occupancy release strategy corresponding to the occupation status and the file occupation information;
[0034] The one-click three-stage overwriting module is used to overwrite the disk area where any target shredded file is located based on three different overwriting modes for any target shredded file that is not occupied, until the disk areas where all target shredded files are located are overwritten.
[0035] Optionally, the three different overwrite modes include one-stage overwrite, two-stage overwrite and three-stage overwrite; the one-key three-stage overwrite module is further used to:
[0036] Determine the target disk area where the target shredded file is located, and perform a one-stage overwriting of the entire target disk area based on 0x00 as the unit content;
[0037] In the target disk area after the first-stage overwriting, based on the preset second-stage overwriting times, the second-stage overwriting area for each second-stage overwriting is determined, and based on 0xCC as the unit content, the second-stage overwriting is performed on the entire second-stage overwriting area, wherein each second-stage overwriting area is smaller than the target disk area;
[0038] In the target disk area after the two-stage overwriting, the target disk area is overwritten in the three-stage overwriting in the whole area based on 0xCC as the unit content.
[0039] Optionally, the batch processing and enumeration module is further used to:
[0040] Call the first file search function to search for the first file in the storage directory corresponding to the folder and return the first file handle;
[0041] Based on the first file handle and the function of finding the next file, the remaining files except the first file in the storage directory are found to obtain all the target shredded files in the folder.
[0042] Optionally, the file occupancy detection module is further used to:
[0043] Restarting the manager session based on the resource management session startup interface, and registering the target shredded file in the restarted manager session;
[0044] A registered file list corresponding to the restarted manager session is obtained, and target shredding files that need to be closed or ended are displayed in the registered file list, and it is determined that there is an occupation situation, wherein the occupation situation includes the occupation of the file handle, the occupation of the module memory of the process, and the occupation of the dependency of the continuously running process.
[0045] Optionally, the file occupancy detection module is further used to:
[0046] If an occupied file handle matching the target shredded file is obtained from the file handles opened in the current Windows operating system, the occupancy status of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file;
[0047] If an occupied memory module matching the target shredded file is obtained in the memory module loaded by the running process, the occupancy of the target shredded file is the module memory occupied by the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file;
[0048] If it is obtained that the target shredded file is dependently occupied by a continuously running process, the occupancy status of the target shredded file is dependently occupied by the continuously running process, and the dependently occupied occupying process ID is recorded as the file occupancy information of the target shredded file.
[0049] Optionally, the file unblocking module is further used to:
[0050] For the target shredded file that is occupied by the file handle, closing the occupied file handle corresponding to the target shredded file;
[0051] For the target shredded file occupied by the module memory of the process, the occupied memory at the address of the occupied memory module is released by using the process termination function;
[0052] For the target shredded file that is occupied by the continuously running process, a process closing function is called to close the process corresponding to the occupying process ID.
[0053] Optionally, the device further comprises: a file shredding completion prompting module, configured to:
[0054] When all target shredding files are successfully shredded, a file shredding completion prompt is generated based on the successfully shredded file information, and the file shredding completion prompt is displayed on an operation interface of a preset file shredding platform, wherein the file shredding instruction is triggered based on the user selecting a shredding target on the operation interface.
[0055] According to another aspect of the present application, a storage medium is provided, on which a computer program is stored, and when the program is executed by a processor, the above-mentioned file shredding method is implemented.
[0056] According to another aspect of the present application, a computer device is provided, including a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, wherein the processor implements the above-mentioned file shredding method when executing the program.
[0057] By means of the above technical scheme, the present application provides a file shredding method and device, storage medium, and computer equipment, which determine the target shredding file based on the shredding target. The shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, the files in the folder are enumerated to obtain multiple target shredding files; for any target shredding file, the occupancy of the target shredding file is detected, and the target shredding file with occupancy is released; for any target shredding file that is not occupied, the disk area where the target shredding file is located is overwritten based on three different overwrite modes, until the disk areas where all the target shredding files are located are overwritten. By overwriting the storage space of the deleted files multiple times, it can ensure that the file data is completely destroyed, improve the security of file deletion, and provide users with a more convenient and reliable data protection method.
[0058] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS
[0059] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:
[0060] Figure 1 A schematic diagram of a process flow of a file shredding method provided in an embodiment of the present application is shown;
[0061] Figure 2 A schematic diagram showing a flow chart of another file shredding method provided in an embodiment of the present application is shown;
[0062] Figure 3 A schematic diagram showing a flow chart of another file shredding method provided in an embodiment of the present application is shown;
[0063] Figure 4 A schematic diagram showing a flow chart of another file shredding method provided in an embodiment of the present application is shown;
[0064] Figure 5 A schematic diagram of the structure of a file shredding device provided in an embodiment of the present application is shown;
[0065] Figure 6 A schematic structural diagram of another file shredding device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION
[0066] The present application will be described in detail below with reference to the accompanying drawings and in combination with embodiments. It should be noted that the embodiments and features in the embodiments of the present application can be combined with each other without conflict.
[0067] In this embodiment, a file shredding method is provided. Figure 1 As shown, applied to the Windows operating system, the method includes:
[0068] Step 101, receiving a file shredding instruction, and determining a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, enumerate the files in the folder to obtain multiple target shredding files.
[0069] At present, when deleting or shredding files, there are the following problems: the file information on the disk cannot be completely cleared, it is impossible to identify whether the file is occupied, resulting in the inability to overwrite the occupied file, and the inability to shred the occupied file. In order to meet the high requirements of users for data security, to completely delete the file and ensure that it cannot be recovered, a deeper physical operation of the disk is required. This operation requires overwriting the storage space of the deleted file, so that its data is completely destroyed and cannot be recovered by any technical means. Therefore, the development of an efficient and reliable file shredding method is of great significance for protecting user data security and preventing the leakage of sensitive information.
[0070] In the above embodiment of the present application, it can be applied to a preset file shredding platform, which is installed in the Windows operating system of the user terminal. The user can log in to the preset file shredding platform through the terminal (such as a computer), and select the file or folder to be shredded on the operation interface of the preset file shredding platform, and then trigger the file shredding instruction. After receiving the file shredding instruction, the preset file shredding platform can provide the user with a one-click file shredding function, which supports the user to select a single file, multiple files or an entire folder as a shredding target. When the user selects the shredding target and clicks the one-click shredding button, the preset file shredding platform determines the target shredding file based on the shredding target corresponding to the file shredding instruction. By enumerating and listing all the files in the folder selected by the user, multiple target shredding files are obtained, so that the user can shred multiple files at the same time with "one click".
[0071] Step 102, for any target shredded file, detect the occupancy status of the target shredded file, and when occupancy is detected, obtain file occupancy information of the target shredded file, wherein the file occupancy information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID.
[0072] Step 103: based on a preset deoccupancy strategy corresponding to the occupancy status and the file occupancy information, deoccupancy of the target shredded file is deoccupied.
[0073] Step 104 , for any target shredded file that is not occupied, overwrite the disk area where the target shredded file is located based on three different overwriting modes respectively until the disk areas where all the target shredded files are located are overwritten.
[0074] Next, the occupancy status of each target shredded file is detected. Specifically, the file occupancy information such as the occupied handle, occupied memory module address or occupied process ID of the occupied target shredded file can be obtained. Once the occupancy status is detected, the deoccupancy strategy is immediately selected and executed intelligently according to the file occupancy information. The aforementioned deoccupancy strategy includes but is not limited to closing the handle, releasing the memory, terminating the process, etc., to ensure that all target shredded files are in an unoccupied state before shredding.
[0075] Next, after ensuring that all target shredding files are not occupied, the one-click three-stage overwriting process is started, which includes three different modes of overwriting operations on the disk area where each target shredding file is located, ensuring that the file data is completely cleared and cannot be recovered. No matter how many files the user needs to shred at one time, all files can be overwritten and shredded at one time, which greatly improves the operation efficiency and convenience. In particular, during the one-click file shredding process, the preset file shredding platform can also provide real-time feedback on the progress of the file shredding process, and after all target shredding files are successfully shredded, a completion prompt will be issued to the user, ensuring that the user can clearly understand the status of the file shredding process.
[0076] Specifically, Figure 2 As shown, the user selects a file or folder through the operation interface of the preset file shredding platform, then the directory path is transmitted to the processing center through the operation interface, the processing center enumerates all files and refreshes the operation interface, then the user clicks whether to perform file shredding, after the file shredding operation is started, the shredding list (including multiple target shredding files) is transmitted to the processing center, then the processing center quickly determines whether each target shredding file is occupied in batches, and scans the occupied situation, and when there is occupation, releases the occupation and refreshes the operation interface again. Subsequently, the processing center selects any target shredding file and finds the disk area where the aforementioned target shredding file is stored, through a one-stage overwrite operation (with 0X00 as the unit content, the coverage range is the file size), a two-stage overwrite operation (with 0XCC as the unit content, the coverage range is a random size, a total of 5 overwrite operations) and a three-stage overwrite operation (with 0XCC as the unit content, the coverage range is the file size), in particular, in the two-stage overwrite operation, the default can be set to at least 5 overwrite processes, so that the disk area can be completely overwritten, and the file cannot be restored from the disk after being deleted. Finally, when all target shredding files are shredded, the files are completely deleted and the results are summarized in the operation interface of the preset file shredding platform. Therefore, users can enjoy a one-click file shredding experience, from unblocking to file shredding, the whole process can be completed with only one click, and it supports the simultaneous shredding of large batches of files, which greatly improves the operation efficiency and convenience.
[0077] By applying the technical solution of this embodiment, the target shredding file is determined based on the shredding target. The shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, the files in the folder are enumerated to obtain multiple target shredding files; for any target shredding file, the occupancy of the target shredding file is detected, and the target shredding file with occupancy is released; for any target shredding file that is not occupied, the disk area where the target shredding file is located is overwritten based on three different overwrite modes until the disk areas where all the target shredding files are located are overwritten. By overwriting the storage space of the deleted files multiple times, it can ensure that the file data is completely destroyed, improve the security of file deletion, and provide users with a more convenient and reliable data protection method.
[0078] Further, as a refinement and extension of the specific implementation of the above embodiment, in order to fully illustrate the specific implementation process of this embodiment, another file shredding method is provided, such as Figure 3 As shown, applied to the Windows operating system, the method includes:
[0079] Step 201: receiving a file shredding instruction, and determining a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files.
[0080] In the above embodiment of the present application, a file shredding instruction is received, and a target shredding file is determined based on a shredding target corresponding to the file shredding instruction, so as to prepare for subsequent file shredding.
[0081] Step 202: When the shredding target is a folder, a first file search function is called to search for the first file in the storage directory corresponding to the folder, and the first file handle is returned.
[0082] Step 203: Based on the first file handle and the function of searching for the next file, search for the remaining files except the first file in the storage directory to obtain all the target shredded files in the folder.
[0083] Next, you can recursively call the Find First File function (the Find First File function, which is used to find the first file or directory in the specified directory in the file system and return its handle) and the Find Next File function (the Find Next File function, which is a "partner" with the Find First File function and is used to continue to find the next file or directory) to obtain all file paths in the folder. Specifically, when the shredding target is a folder, call the Find First File function to find the first file in the storage directory corresponding to the folder and return the first file handle. Based on the first file handle and the Find Next File function, find the remaining files in the storage directory except the first file to obtain all the target shredded files in the folder.
[0084] Step 204: for any target shredded file, based on the resource management session startup interface, restart the manager session, and register the target shredded file in the restarted manager session.
[0085] Step 205, obtaining a registered file list corresponding to the restarted manager session, displaying the target shredded files that need to be closed or ended in the registered file list, and determining that there is an occupation situation, wherein the occupation situation includes the file handle being occupied, the module memory of the process being occupied, and the dependency of the continuously running process being occupied.
[0086] Next, for any target shredded file, based on the resource management session startup interface, the manager session is restarted, and the target shredded file is registered in the restarted manager session. The registered file list corresponding to the restarted manager session is obtained, and the target shredded file displayed in the registered file list as needing to be closed or ended is determined to be occupied. Specifically, the manager session interface can be restarted by starting the resource management session function (RmStartSession function, Rm represents resource management, i.e. the abbreviation of Resource Management, StartSession means starting a session, and Session means session) to open a new manager, and the RmRegisterResources function (register resources to the restart manager session function, used to register resources in the restart manager session) and the RmGetList function (get restart manager session resource list function) are used to determine whether there are resources (files) that need to be closed or ended. If there are resources (files) that need to be closed, it means that the file is currently occupied. In particular, the above process can be a batch file operation, which is very efficient and can return the judgment result quickly.
[0087] Step 206, when an occupation situation is detected, obtaining file occupation information of the target shredded file, wherein the file occupation information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID;
[0088] Step 207: based on the preset deoccupancy strategy corresponding to the occupancy status and the file occupancy information, deoccupancy of the target shredded file is deoccupied.
[0089] Next, when occupancy is detected, the file occupancy information of the target shredded file is obtained, and based on the preset deoccupancy strategy corresponding to the occupancy and the file occupancy information, the occupancy of the target shredded file is deoccupied so as to perform file shredding later.
[0090] Step 208: for any target shredded file that is not occupied, determine the target disk area where the target shredded file is located, and perform a one-stage overwrite of the entire target disk area based on 0x00 as the unit content.
[0091] Step 209, in the target disk area after the first-stage overwrite, based on the preset second-stage overwrite times, determine the second-stage overwrite area for each second-stage overwrite, based on 0xCC as the unit content, perform a second-stage overwrite on the entire area of each second-stage overwrite area, wherein each second-stage overwrite area is smaller than the target disk area.
[0092] Step 210, in the target disk area after the two-stage overwriting, based on 0xCC as the unit content, the target disk area is overwritten in the three-stage overwriting of the entire area until the disk areas where all the target shredded files are located are overwritten.
[0093] Finally, through three stages of overwriting, the first stage opens the file in binary read-write form, uses 0x00 to overwrite the file size once, and then closes and saves the file; the second stage performs a random size from 0 to the file size, opens in a loop, overwrites and saves the file using the 0xCC character, and the number of loops can be set to no less than 5 times; the third stage uses 0xCC to overwrite the file size once; the entire overwriting process is long, but the time is short, and the file directory can be deleted at the end. Specifically, for any target shredded file that does not have an occupied situation, determine the target disk area where the target shredded file is located, and perform a one-stage overwrite on the target disk area based on 0x00 as the unit content. In the target disk area after the first-stage overwrite, based on the preset number of two-stage overwrites, determine the two-stage overwrite area for each two-stage overwrite, and based on 0xCC as the unit content, perform a two-stage overwrite on the two-stage overwrite area in the entire area, wherein each two-stage overwrite area is smaller than the target disk area. In the target disk area after the second-stage overwrite, the target disk area is overwritten in the third stage based on the unit content of 0xCC until the disk area where all the target shredded files are located is overwritten. To this end, the three-stage overwrite is performed through multiple file overwrite strategies to ensure that the previous data cannot be restored. At the same time, during the file shredding process, the file occupation can be quickly identified through the Windows technology in a "one-click" manner, that is, the file occupation is released first, and then the file is shredded, which is convenient for users and improves the user experience.
[0094] By applying the technical solution of this embodiment, the target shredding file is determined based on the shredding target. When the shredding target is a folder, the first file search function is called to search for the first file in the storage directory corresponding to the folder, and the first file handle is returned. Based on the first file handle and the next file search function, the remaining files except the first file in the storage directory are searched to obtain all the target shredding files in the folder. For any target shredding file, the manager session is restarted based on the resource management session startup interface, and the target shredding file is registered in the restarted manager session. The registered file list corresponding to the restarted manager session is obtained, and the target shredding file displayed in the registered file list as needing to be closed or ended is determined to be occupied. When the occupation is detected, the occupation of the target shredding file is released. For any target shredding file that is not occupied, the target disk area where the target shredding file is located is determined, and the target disk area is overwritten in one stage in the entire area based on the unit content of 0x00. In the target disk area after the first-stage overwrite, based on the preset second-stage overwrite times, the second-stage overwrite area for each second-stage overwrite is determined, and based on 0xCC as the unit content, the second-stage overwrite area is overwritten in the entire area. In the target disk area after the second-stage overwrite, based on 0xCC as the unit content, the target disk area is overwritten in the third stage until the disk areas where all target shredded files are located are overwritten. By overwriting the storage space of the deleted files multiple times, it can ensure that the file data is completely destroyed, improve the security of file deletion, and provide users with a more convenient and reliable data protection method.
[0095] Further, as a refinement and extension of the specific implementation of the above embodiment, in order to fully illustrate the specific implementation process of this embodiment, another file shredding method is provided, such as Figure 4 As shown, applied to the Windows operating system, the method includes:
[0096] Step 301, receiving a file shredding instruction, and determining a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, enumerate the files in the folder to obtain multiple target shredding files.
[0097] In the above embodiment of the present application, a file shredding instruction is received, and a target shredding file is determined based on a shredding target corresponding to the file shredding instruction, so as to prepare for subsequent file shredding.
[0098] Step 302, for any target shredded file, detect the occupancy status of the target shredded file. If an occupied file handle matching the target shredded file is obtained from the file handles opened by the current Windows operating system, the occupancy status of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file.
[0099] Step 303, if an occupied memory module matching the target shredded file is obtained in the memory module loaded by the running process, the occupancy of the target shredded file is the module memory occupied by the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file.
[0100] Step 304: if it is obtained that the target shredded file is dependently occupied by a continuously running process, the occupancy status of the target shredded file is dependently occupied by the continuously running process, and the ID of the dependently occupied process is recorded as the file occupancy information of the target shredded file.
[0101] Next, for any target shredded file, the occupancy of the target shredded file is detected. If an occupied file handle matching the target shredded file is obtained from the file handles opened by the current Windows operating system, the occupancy of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file. If an occupied memory module matching the target shredded file is obtained from the memory module loaded by the running process, the occupancy of the target shredded file is that the module memory is occupied by the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file. If the target shredded file is obtained to be occupied by a continuously running process, the occupancy of the target shredded file is that it is occupied by the continuously running process, and the occupied process ID of the dependent process is recorded as the file occupancy information of the target shredded file. Specifically, the occupation of the occupied file can be obtained by comparing the two methods of enumerating the global file handle and enumerating the module information in the process memory. The file occupation information includes the handle of the occupied file, the module memory address, the process information, etc. The enumeration interface includes NtOpenProcess (open process function), NtDevice IoControl File (device input and output control file function), NtQuerySystemInformation (query system information function), NtQueryVirtual Memory (query virtual memory information function), and NtTerminateProcess (terminate process function). In particular, the file handle is occupied, which means that a certain file has been referenced by a certain process through the file handle allocated by the operating system. In the operating system, the file handle is a mechanism for identifying and accessing file resources, which is equivalent to the "identity card" of the file. When a file is opened by a process, the operating system will allocate one or more file handles to it so that the process can perform operations such as reading and writing on it. If other processes or threads try to open the same file at this time, and the file handle has not been released, then the file handle will be occupied. The situation of being occupied by the module memory of a process means that a file (usually a dynamic link library or executable file) has been loaded into the module memory of a process. In operating systems such as Windows, a process can expand its functions by loading modules such as dynamic link libraries (DLLs). These module files will be loaded into the address space of the process and managed by the module memory of the process. If you try to delete or modify these loaded module files at this time, the file will be occupied by the module memory of the process.Being occupied by a continuously running process means that a file is occupied by a continuously running process, that is, a file is being used or referenced by a continuously running process. At this time, the process may be running all the time and continuously performing read and write operations on the file, or simply keeping a reference to the file through the file handle. Since the process is always running, the file it occupies cannot be released or modified by other processes or operations. In this case, it is usually necessary to end the process occupying the file, or wait for it to release the file handle by itself before performing other operations on the file.
[0102] Step 305: For the target shredded file that is occupied by the file handle, close the occupied file handle corresponding to the target shredded file.
[0103] Step 306: For the target shredded file occupied by the module memory of the process, the occupied memory at the occupied memory module address is released by using the process termination function.
[0104] Step 307: For the target shredded file that is occupied by the continuously running process, a process closing function is called to close the process corresponding to the occupying process ID.
[0105] Next, you can choose according to the specific occupancy situation scanned by closing handles, releasing module memory, closing processes, etc., that is, based on the occupancy situation, determine the deoccupancy strategy. When the occupancy situation is that the file handle is occupied, the deoccupancy strategy is to close the handle. When the occupancy situation is occupied by the module memory of the process, the deoccupancy strategy is to release the module memory. Finally, based on the deoccupancy strategy and file occupancy information, the occupation of the target shredded file is released. If the occupancy situation is occupied by a continuously running process, the deoccupancy strategy is to close the process.
[0106] Step 308 , for any target shredded file that is not occupied, overwrite the disk area where the target shredded file is located based on three different overwriting modes respectively until the disk areas where all the target shredded files are located are overwritten.
[0107] Step 309, when all target shredding files are successfully shredded, a file shredding completion prompt is generated based on the successfully shredded file information, and the file shredding completion prompt is displayed on the operation interface of the preset file shredding platform, wherein the file shredding instruction is triggered based on the user selecting a shredding target on the operation interface.
[0108] Finally, for any target shredding file that is not occupied, the disk area where the target shredding file is located is overwritten based on three different overwriting modes until the disk areas where all target shredding files are located are overwritten. In particular, after all target shredding files are successfully shredded, a file shredding completion prompt can be generated based on the successfully shredded file information, and the file shredding completion prompt can be displayed on the operation interface of the preset file shredding platform to immediately notify the user of the task completion.
[0109] By applying the technical solution of this embodiment, for any target shredded file, the occupancy of the target shredded file is detected. If an occupied file handle matching the target shredded file is obtained from each file handle opened by the current Windows operating system, the occupancy of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file. If an occupied memory module matching the target shredded file is obtained from the memory module loaded by the running process, the occupancy of the target shredded file is occupied by the module memory of the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file. If the target shredded file is obtained to be occupied by a continuously running process, the occupancy of the target shredded file is occupied by the continuously running process, and the occupied process ID occupied by the dependent process is recorded as the file occupancy information of the target shredded file. For the target shredded file occupied by the file handle, the occupied file handle corresponding to the target shredded file is closed. For the target shredded file occupied by the module memory of the process, the occupied memory at the occupied memory module address is released by using the termination process function. For target shredded files that are occupied by continuously running processes, call the process closing function to close the process corresponding to the process ID. For any target shredded file that is not occupied, overwrite the disk area where the target shredded file is located based on three different overwrite modes until the disk areas where all target shredded files are located are overwritten. When all target shredded files are successfully shredded, a file shredding completion prompt is generated based on the successfully shredded file information, and the file shredding completion prompt is displayed on the operation interface of the preset file shredding platform. By overwriting the storage space of the deleted files multiple times, it can ensure that the file data is completely destroyed, improve the security of file deletion, and provide users with a more convenient and reliable data protection method.
[0110] Further, as Figure 1 The specific implementation of the method, the embodiment of the present application provides a file shredding device, such as Figure 5 As shown, the device comprises:
[0111] The batch processing and enumeration module 401 is used to receive a file shredding instruction, and determine a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, each file in the folder is enumerated to obtain multiple target shredding files;
[0112] The file occupancy detection module 402 is used to detect the occupancy of any target shredded file, and when occupancy is detected, obtain the file occupancy information of the target shredded file, wherein the file occupancy information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID;
[0113] A file occupancy release module 403 is used to release the occupation of the target shredded file based on a preset occupancy release strategy corresponding to the occupation status and the file occupation information;
[0114] The one-click three-stage overwriting module 404 is used to overwrite the disk area where any target shredded file is located based on three different overwriting modes, until the disk areas where all target shredded files are located are overwritten.
[0115] Optionally, the three different overwrite modes include one-stage overwrite, two-stage overwrite and three-stage overwrite; the one-key three-stage overwrite module 404 is further used to:
[0116] Determine the target disk area where the target shredded file is located, and perform a one-stage overwriting of the entire target disk area based on 0x00 as the unit content;
[0117] In the target disk area after the first-stage overwriting, based on the preset second-stage overwriting times, the second-stage overwriting area for each second-stage overwriting is determined, and based on 0xCC as the unit content, the second-stage overwriting is performed on the entire second-stage overwriting area, wherein each second-stage overwriting area is smaller than the target disk area;
[0118] In the target disk area after the two-stage overwriting, the target disk area is overwritten in the three-stage overwriting in the whole area based on 0xCC as the unit content.
[0119] Optionally, the batch processing and enumeration module 401 is further used for:
[0120] Call the first file search function to search for the first file in the storage directory corresponding to the folder and return the first file handle;
[0121] Based on the first file handle and the function of finding the next file, the remaining files except the first file in the storage directory are found to obtain all the target shredded files in the folder.
[0122] Optionally, the file occupancy detection module 402 is further used to:
[0123] Restarting the manager session based on the resource management session startup interface, and registering the target shredded file in the restarted manager session;
[0124] A registered file list corresponding to the restarted manager session is obtained, and target shredding files that need to be closed or ended are displayed in the registered file list, and it is determined that there is an occupation situation, wherein the occupation situation includes the occupation of the file handle, the occupation of the module memory of the process, and the occupation of the dependency of the continuously running process.
[0125] Optionally, the file occupancy detection module 402 is further used to:
[0126] If an occupied file handle matching the target shredded file is obtained from the file handles opened in the current Windows operating system, the occupancy status of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file;
[0127] If an occupied memory module matching the target shredded file is obtained in the memory module loaded by the running process, the occupancy of the target shredded file is the module memory occupied by the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file;
[0128] If it is obtained that the target shredded file is dependently occupied by a continuously running process, the occupancy status of the target shredded file is dependently occupied by the continuously running process, and the dependently occupied occupying process ID is recorded as the file occupancy information of the target shredded file.
[0129] Optionally, the file occupancy release module 403 is further configured to:
[0130] For the target shredded file that is occupied by the file handle, closing the occupied file handle corresponding to the target shredded file;
[0131] For the target shredded file occupied by the module memory of the process, the occupied memory at the address of the occupied memory module is released by using the process termination function;
[0132] For the target shredded file that is occupied by the continuously running process, a process closing function is called to close the process corresponding to the occupying process ID.
[0133] Furthermore, the present application provides another file shredding device, such as Figure 6 As shown, the device comprises:
[0134] The batch processing and enumeration module 501 is used to receive a file shredding instruction, and determine a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, each file in the folder is enumerated to obtain multiple target shredding files;
[0135] The file occupancy detection module 502 is used to detect the occupancy of any target shredded file, and when occupancy is detected, obtain the file occupancy information of the target shredded file, wherein the file occupancy information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID;
[0136] A file occupancy release module 503 is used to release the occupation of the target shredded file based on a preset occupancy release strategy corresponding to the occupation status and the file occupation information;
[0137] A one-click three-stage overwriting module 504 is used to overwrite the disk area where any target shredded file is located based on three different overwriting modes, until all the disk areas where all the target shredded files are located are overwritten;
[0138] The file shredding completion prompt module 505 is used to generate a file shredding completion prompt based on the successfully shredded file information after all target shredding files are successfully shredded, and display the file shredding completion prompt on the operation interface of the preset file shredding platform, wherein the file shredding instruction is triggered based on the user selecting a shredding target on the operation interface.
[0139] Optionally, the three different overwrite modes include one-stage overwrite, two-stage overwrite and three-stage overwrite; the one-key three-stage overwrite module 504 is further used to:
[0140] Determine the target disk area where the target shredded file is located, and perform a one-stage overwriting of the entire target disk area based on 0x00 as the unit content;
[0141] In the target disk area after the first-stage overwriting, based on the preset second-stage overwriting times, the second-stage overwriting area for each second-stage overwriting is determined, and based on 0xCC as the unit content, the second-stage overwriting is performed on the entire second-stage overwriting area, wherein each second-stage overwriting area is smaller than the target disk area;
[0142] In the target disk area after the two-stage overwriting, the target disk area is overwritten in the three-stage overwriting in the whole area based on 0xCC as the unit content.
[0143] Optionally, the batch processing and enumeration module 501 is further used for:
[0144] Call the first file search function to search for the first file in the storage directory corresponding to the folder and return the first file handle;
[0145] Based on the first file handle and the function of finding the next file, the remaining files except the first file in the storage directory are found to obtain all the target shredded files in the folder.
[0146] Optionally, the file occupancy detection module 502 is further used to:
[0147] Restarting the manager session based on the resource management session startup interface, and registering the target shredded file in the restarted manager session;
[0148] A registered file list corresponding to the restarted manager session is obtained, and target shredding files that need to be closed or ended are displayed in the registered file list, and it is determined that there is an occupation situation, wherein the occupation situation includes the occupation of the file handle, the occupation of the module memory of the process, and the occupation of the dependency of the continuously running process.
[0149] Optionally, the file occupancy detection module 502 is further used to:
[0150] If an occupied file handle matching the target shredded file is obtained from the file handles opened in the current Windows operating system, the occupancy status of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file;
[0151] If an occupied memory module matching the target shredded file is obtained in the memory module loaded by the running process, the occupancy of the target shredded file is the module memory occupied by the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file;
[0152] If it is obtained that the target shredded file is dependently occupied by a continuously running process, the occupancy status of the target shredded file is dependently occupied by the continuously running process, and the dependently occupied occupying process ID is recorded as the file occupancy information of the target shredded file.
[0153] Optionally, the file occupancy release module 503 is further used to:
[0154] For the target shredded file that is occupied by the file handle, closing the occupied file handle corresponding to the target shredded file;
[0155] For the target shredded file occupied by the module memory of the process, the occupied memory at the address of the occupied memory module is released by using the process termination function;
[0156] For the target shredded file that is occupied by the continuously running process, a process closing function is called to close the process corresponding to the occupying process ID.
[0157] It should be noted that for other corresponding descriptions of the functional units involved in the file shredding device provided in the embodiment of the present application, reference can be made to Figure 1 , Figure 3 and Figure 4 The corresponding description in the method will not be repeated here.
[0158] Based on the above Figure 1 , Figure 3 and Figure 4 The method shown in the embodiment of the present application is accordingly provided with a storage medium on which a computer program is stored, and when the computer program is executed by a processor, the above-mentioned Figure 1 , Figure 3 and Figure 4 The file shredding method shown.
[0159] Based on this understanding, the technical solution of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each implementation scenario of the present application.
[0160] Based on the above Figure 1 , Figure 3 and Figure 4 The method shown, and Figure 5 and Figure 6 In order to achieve the above-mentioned purpose, the embodiment of the present application further provides a computer device, which can be a personal computer, a server, a network device, etc. The computer device includes a storage medium and a processor; the storage medium is used to store a computer program; the processor is used to execute the computer program to achieve the above-mentioned Figure 1 , Figure 3 and Figure 4 The file shredding method shown.
[0161] Optionally, the computer device may also include a user interface, a network interface, a camera, a radio frequency (RF) circuit, a sensor, an audio circuit, a WI-FI module, etc. The user interface may include a display screen (Displ ay), an input unit such as a keyboard (Keyboard), etc., and the optional user interface may also include a USB interface, a card reader interface, etc. The network interface may optionally include a standard wired interface, a wireless interface (such as a Bluetooth interface, a WI-FI interface), etc.
[0162] Those skilled in the art will appreciate that the computer device structure provided in this embodiment does not limit the computer device, and may include more or fewer components, or a combination of certain components, or different component arrangements.
[0163] The storage medium may also include an operating system and a network communication module. The operating system is a program that manages and saves the hardware and software resources of the computer device, and supports the operation of information processing programs and other software and / or programs. The network communication module is used to realize communication between the components inside the storage medium, and communication with other hardware and software in the physical device.
[0164] Through the description of the above implementation methods, those skilled in the art can clearly understand that the present application can be implemented by means of software plus necessary general hardware platforms, or can be implemented by hardware to determine the target shredding file based on the shredding target, the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, enumerate the files in the folder to obtain multiple target shredding files; for any target shredding file, detect the occupancy of the target shredding file, and release the target shredding file with occupancy; for any target shredding file that is not occupied, overwrite the disk area where the target shredding file is located based on three different overwrite modes, until the disk areas where all the target shredding files are located are overwritten. By overwriting the storage space of the deleted files multiple times, it can ensure that the file data is completely destroyed, improve the security of file deletion, and provide users with a more convenient and reliable data protection method.
[0165] Those skilled in the art will appreciate that the accompanying drawings are only schematic diagrams of a preferred implementation scenario, and the modules or processes in the accompanying drawings are not necessarily necessary for implementing the present application. Those skilled in the art will appreciate that the modules in the devices in the implementation scenario can be distributed in the devices of the implementation scenario according to the description of the implementation scenario, or can be changed accordingly and located in one or more devices different from the present implementation scenario. The modules of the above-mentioned implementation scenario can be combined into one module, or can be further split into multiple submodules.
[0166] The above serial numbers of this application are only for description and do not represent the advantages and disadvantages of the implementation scenarios. The above disclosure is only a few specific implementation scenarios of this application, but this application is not limited to them, and any changes that can be thought of by technicians in this field should fall within the scope of protection of this application.
Claims
1. A file shredding method, characterized in that: Applied to Windows operating system, the method includes: receiving a file shredding instruction, and determining a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, enumerating the files in the folder to obtain multiple target shredding files; For any target shredded file, detect the occupancy of the target shredded file, and when occupancy is detected, obtain file occupancy information of the target shredded file, wherein the file occupancy information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID; Based on a preset deoccupancy strategy corresponding to the occupancy situation and the file occupancy information, deoccupancy of the target shredded file; For any target shredded file that is not occupied, the disk area where the target shredded file is located is overwritten respectively based on three different overwriting modes until the disk areas where all the target shredded files are located are overwritten.
2. The method according to claim 1, characterized in that The three different overwriting modes include one-stage overwriting, two-stage overwriting and three-stage overwriting; overwriting the disk area where the target shredded file is located based on the three different overwriting modes respectively includes: Determine the target disk area where the target shredded file is located, and perform a one-stage overwriting of the entire target disk area based on 0x00 as the unit content; In the target disk area after the first-stage overwriting, based on the preset second-stage overwriting times, the second-stage overwriting area for each second-stage overwriting is determined, and based on 0xCC as the unit content, the second-stage overwriting is performed on the entire second-stage overwriting area, wherein each second-stage overwriting area is smaller than the target disk area; In the target disk area after the two-stage overwriting, the target disk area is overwritten in the three-stage overwriting in the whole area based on 0xCC as the unit content.
3. The method according to claim 1, characterized in that The files in the folder are enumerated to obtain multiple target shredded files, including: Call the first file search function to search for the first file in the storage directory corresponding to the folder and return the first file handle; Based on the first file handle and the function of searching for the next file, the remaining files except the first file in the storage directory are searched to obtain all the target shredded files in the folder.
4. The method according to claim 1, characterized in that: The detecting the occupancy of the target shredded file includes: Restarting the manager session based on the resource management session startup interface, and registering the target shredded file in the restarted manager session; A registered file list corresponding to the restarted manager session is obtained, and target shredding files that need to be closed or ended are displayed in the registered file list, and it is determined that there is an occupation situation, wherein the occupation situation includes the occupation of the file handle, the occupation of the module memory of the process, and the occupation of the dependency of the continuously running process.
5. The method according to claim 1, characterized in that When the occupancy is detected, obtaining the file occupancy information of the target shredded file includes: If an occupied file handle matching the target shredded file is obtained from the file handles opened by the current Windows operating system, the occupancy status of the target shredded file is that the file handle is occupied, and the occupied file handle is recorded as the file occupancy information of the target shredded file; If an occupied memory module matching the target shredded file is obtained in the memory module loaded by the running process, the occupancy of the target shredded file is the module memory occupied by the process, and the occupied memory module address is recorded as the file occupancy information of the target shredded file; If it is obtained that the target shredded file is dependently occupied by a continuously running process, the occupancy status of the target shredded file is dependently occupied by the continuously running process, and the dependently occupied occupying process ID is recorded as the file occupancy information of the target shredded file.
6. The method according to claim 5, characterized in that The step of releasing the occupation of the target shredded file based on the preset release strategy corresponding to the occupation status and the file occupation information includes: For the target shredded file that is occupied by the file handle, closing the occupied file handle corresponding to the target shredded file; For the target shredded file occupied by the module memory of the process, the occupied memory at the address of the occupied memory module is released by using the process termination function; For the target shredded file that is occupied by the continuously running process, a process closing function is called to close the process corresponding to the occupying process ID.
7. The method according to any one of claims 1 to 6, characterized in that The method further comprises: When all target shredding files are successfully shredded, a file shredding completion prompt is generated based on the successfully shredded file information, and the file shredding completion prompt is displayed on an operation interface of a preset file shredding platform, wherein the file shredding instruction is triggered based on the user selecting a shredding target on the operation interface.
8. A file shredding device, characterized in that: The device comprises: A batch processing and enumeration module, for receiving a file shredding instruction, and determining a target shredding file based on a shredding target corresponding to the file shredding instruction, wherein the shredding target includes a single file or a folder containing multiple files. When the shredding target is a folder, enumerate the files in the folder to obtain multiple target shredding files; A file occupancy detection module is used to detect the occupancy of any target shredded file, and when occupancy is detected, obtain the file occupancy information of the target shredded file, wherein the file occupancy information includes at least one of an occupied file handle, an occupied memory module address, and an occupied process ID; A file occupancy release module, used to release the occupation of the target shredded file based on a preset occupancy release strategy corresponding to the occupation status and the file occupation information; The one-click three-stage overwriting module is used to overwrite the disk area where any target shredded file is located based on three different overwriting modes for any target shredded file that is not occupied, until the disk areas where all target shredded files are located are overwritten.
9. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method for shredding files as claimed in any one of claims 1 to 7 is implemented.
10. A computer device comprising a storage medium, a processor, and a computer program stored in the storage medium and executable on the processor, characterized in that: When the processor executes the computer program, the file shredding method according to any one of claims 1 to 7 is implemented.