Overlay-based traceless data cleaning method

Abstract

The invention discloses an overlay-based traceless data cleaning method, which comprises the following steps of: after a file system is loaded when a system is started, creating an overlay file system, and overlapping and mounting contents of a root directory into the overlay file system according to a data protection partition range set by a user; data generated in the process of using the operating system by the user is stored in the overlay file system; and when data cleaning is needed, calling shred to perform physical layer deep cleaning on all data in the overlay file system. According to the method, the disk space does not need to be wasted for backup in advance, the file is backed up only when the file is changed, the disk space consumption is small (only the changed file is backed up), and the implementation (cleaning and restoring) time is short.

Description

Technical Field

[0001] The present invention relates to the technical field of data security, and particularly to a method for cleaning trace-free data based on overlay. Background Art

[0002] In scenarios where users are involved in data security, to ensure the information protection of data during the use of the system, it is necessary to clear all usage traces (data) of their own computers. The commonly used data cleaning method in the current Linux system is to use the backup and restoration method, which requires backing up the data first and then restoring it with the backup data during cleaning.

[0003] The existing backup and restoration solutions in the data cleaning process have the following defects: 1. Back up all data (including data that has not changed), wasting disk space and taking a long time for restoration; 2. Unable to meet the requirements of in-depth data cleaning; 3. The backup points are not flexible. If you need to add content to the restored environment, you need to generate a new backup file again. Summary of the Invention

[0004] To solve the deficiencies of the existing technology, the present invention provides a method for cleaning trace-free data based on overlay, which is characterized by including the following steps: Step S1: After loading the file system when the system starts, create an overlay file system, and mount the content of the root directory to the overlay file system according to the data protection partition range set by the user; Step S2: The data generated during the user's use of the operating system is stored in the overlay file system; Step S3: When data cleaning is required, call shred to perform in-depth physical cleaning on all data in the overlay file system.

[0005] The present invention does not need to waste disk space for early backup, and only backs up the file when the file changes. The disk space consumption is small (only back up the changed files), and the implementation (cleaning and restoration) time is fast. Description of the Drawings

[0006] Figure 1 It is a schematic diagram of the overlay principle.

[0007] Figure 2 It is a comparison diagram of the backup and restoration principles in the data cleaning process between the existing technology and the present invention.

[0008] Figure 3 It is a logical framework diagram of the method for cleaning trace-free data based on overlay of the present invention.

[0009] Figure 4 This is the implementation flowchart of the overlay-based traceless data cleaning method of the present invention. Detailed implementation manners

[0010] In order to have a further understanding of the technical solutions and beneficial effects of the present invention, the technical solutions of the present invention and the beneficial effects produced thereby will be described in detail below with reference to the accompanying drawings.

[0011] Figure 1 is a schematic diagram of the overlay principle. As Figure 1 shown, in order to solve the deficiencies of the existing technologies, the overlay-based traceless data cleaning method provided by the present invention mounts the content of the root directory in the overlay file system manner, and stores all the changed (added, deleted, modified) files during the user's use in the overlay file system (storage disk). When cleaning / restoring data, only the data in this memory space needs to be deleted to achieve the data restoration function; at the same time, the physical storage disk module for storing the changed files is repeatedly overwritten and erased using shred to achieve deep cleaning of the data.

[0012] Figure 2 is a comparison diagram of the backup and restoration principles during the data cleaning processes of the existing technology and the present invention. Figure 3 This is the logic framework diagram of the overlay-based traceless data cleaning method of the present invention. Figure 4 This is the implementation flowchart of the overlay-based traceless data cleaning method of the present invention. As Figure 3 and Figure 4 shown, the overlay-based traceless data cleaning method of the present invention mainly includes the following steps: S1: After loading the file system when the system starts, create an overlay file system, and mount the content of the root directory to the overlay file system in an overlay manner according to the data protection partition range set by the user.

[0013] S2: When the user uses the operating system, all the data generated during the use will be stored in the overlay file system; S3: When data cleaning is required (such as when shutting down the system), call shred to perform deep physical cleaning on all the data in the overlay file system, so that all the newly generated data during the user's use will be deeply cleaned; The present invention can achieve the following technical effects: 1. There is no need to waste disk space for backup in advance. Only when a file is changed, the file is backed up. The disk space consumption is small (only the changed files are backed up), and the implementation (cleaning and restoration) time is fast; 2. Data cleaning standards that can achieve deep levels; 3. Flexible switching. When the restoration is turned off, the data generated can be directly stored on the disk, and only the data generated when the restoration function is turned on will be cleared.

[0014] The overlay-based traceless data cleaning method provided by the present invention is mainly applicable to units with confidentiality requirements, such as conference computers, educational computers, etc., where all data generated during use needs to be securely deleted after use.

[0015] Although the present invention has been described using the above preferred embodiments, it is not intended to limit the protection scope of the present invention. Any person skilled in the art can make various changes and modifications to the above embodiments without departing from the spirit and scope of the present invention, and such changes and modifications still fall within the protection scope of the present invention. Therefore, the protection scope of the present invention shall be defined by the claims.

Claims

1. A traceless data cleaning method based on overlay, characterized in that: The steps include: Step S1: after the file system is loaded when the system starts, an overlay file system is created, and the content of the root directory is mounted on the overlay file system according to the data protection partition range set by the user; Step S2: the data generated when the user uses the operating system is stored in the overlay file system; Step S3: When data cleaning is required, shred is called to perform a deep cleanup of the physical layer on all data in the overlay file system.

Images