Real-time incremental backup method for domestic operating system

Abstract

The invention discloses a method for real-time incremental backup of a domestic operating system, which comprises a configuration management module and a data protection module, an incremental system file is transferred to a backup area in real time through a redirection mechanism, and real-time backup is performed transparently in the process of not influencing normal system operation of a user. The method is used for solving the problem of file loss in a timing backup process. And meanwhile, by establishing a mapping relationship between redirection and restoration points, the backup area file is not only a file currently used by the system, but also a backup file, so that the problem that the storage space occupied by the backup file is larger and larger due to timed incremental backup is solved.

Description

Technical Field

[0001] The present invention relates to a method, in particular to a method for real-time incremental backup of a domestic operating system. Background Art

[0002] With the development of domestic operating systems, the application fields of information technology innovation terminals are becoming wider and wider. Due to different reasons such as security vulnerabilities and misoperations, operating system files may be lost or damaged, resulting in the inability of the domestic operating system on the information technology innovation terminal to run properly. To ensure the integrity and security of the operating system, the backup and recovery operations of operating system data are crucial.

[0003] At present, the backup and recovery solution for the domestic operating system on the information technology innovation terminal is to perform a full backup of the system through backup and recovery software, and then periodically save key data through incremental backup. However, as the backup data increases, the disk space consumption gradually increases. In addition, the periodic backup operation is based on time periods. If the operating system crashes severely and cannot be started, the data in the time period after the periodic incremental backup will still be lost and cannot be restored to the last operating system version.

[0004] The prior art CN111831484A discloses a method for automatic system backup and restoration, including implementing a one-key backup and restoration solution using an independent system and implementing a one-key system restoration solution in the form of a startup service. The one-key backup and restoration solution using an independent system includes an independent system and an independent storage partition. The independent system includes a manager and a backup and restoration subsystem, and the independent storage partition is used to store the backup files of the backup and restoration subsystem. The present invention implements two solutions, namely, one-key backup and restoration using an independent system and one-key system restoration in the form of a startup service, which can meet different scenario requirements. The two solutions are not mutually exclusive and can be used simultaneously to improve the system's recovery ability when encountering faults and reduce the difficulty for users to use the system. This prior art is implemented by using a one-key backup and restoration solution using an independent system and a one-key system restoration solution in the form of a startup service. The incremental backup device is implemented by the system's regular automatic backup method, resulting in an increasing occupation of the backup area space until the occupied space of the backup data reaches the threshold. In addition, if change files are generated in the system before the periodic backup is executed and the system crashes abnormally during this period and is restored through the system, these change files will be lost. Summary of the Invention

[0005] In order to solve both the problem of continuous consumption of disk space in periodic incremental backup and the problem of data loss, the present invention proposes a device for real-time incremental backup of a domestic operating system, and specifically adopts the following technical solutions:

[0006] A device for real-time incremental backup of a domestic operating system, including a configuration management module and a data protection module, is characterized in that:

[0007] The configuration management module runs in the user layer and includes a storage area configuration module, a directory configuration module, a restore point management module, and a communication module I;

[0008] The storage area configuration module is used to set the storage path of the backup file;

[0009] The directory configuration module includes a backup directory configuration sub-module, a protected directory and file configuration sub-module, and a filtered directory and file configuration sub-module;

[0010] The restore point management module is used to set restore points during the real-time backup process and switch to restore point backups during the restoration process;

[0011] The communication module I is used to notify the above configuration policy information to the data protection module, receive the feedback information from the data protection module, and perform corresponding processing;

[0012] The data protection module runs in the kernel layer and includes a communication module II and a file access control module;

[0013] The communication module II is used to receive and execute the policy information sent by the configuration management module in the kernel layer, and at the same time feedback the execution results and other running status information to the configuration management module;

[0014] The file access control module realizes redirection through HOOK system calls, thereby establishing a mapping relationship with the restore point to realize real-time file backup.

[0015] The present invention also discloses a method for real-time incremental backup of a domestic operating system, which is characterized in that:

[0016] Step S1, configure the backup storage area of the file;

[0017] Step S2, configure the backup policy;

[0018] Step S3, start real-time backup, and save the file to the backup storage in real time through the redirection mechanism.

[0019] The present invention also discloses a non-volatile storage medium, which is characterized in that the non-volatile storage medium includes a stored program, wherein the program controls the device where the non-volatile storage medium is located to execute the above method when running.

[0020] The present invention also discloses a terminal device, characterized in that the terminal device includes: a processor, a memory, a communication interface and a bus; the processor, the memory and the communication interface are connected through the bus and complete communication with each other; the memory stores executable program codes; the processor runs a program corresponding to the executable program codes by reading the executable program codes stored in the memory, so as to execute the method as above.

[0021] Beneficial effects

[0022] (1) Save disk storage space

[0023] By means of the redirection mechanism, the Xinchuang terminal system files are saved in the storage area. The files in the storage area are both system operation files and backup files, and the disk occupied space will not continuously increase due to continuous data backup.

[0024] (2) Prevent data loss

[0025] By means of the redirection mechanism, the newly added file data is saved in real time to the corresponding files in the storage area, avoiding the loss of file data due to untimely saving.

[0026] (3) Protect the system files from malicious damage

[0027] By HOOKing system calls and writing custom HOOK functions, malicious operations such as deletion, writing, moving, and permission setting of underlying runtime libraries or core system configuration files are effectively intercepted, avoiding the tampering of file data.

[0028] (4) Quick switch of restore points

[0029] Combining the restore point control and the redirection mechanism, when performing restore point restoration, only the mapping relationship between the redirection and the restore point needs to be established, and the traditional backup file copying operation is not required, realizing the quick switch of restore points. Description of the drawings

[0030] Figure 1 It is a schematic structural diagram of the real-time incremental backup device for the domestic operating system of the present invention;

[0031] Figure 2 It is a flowchart of the real-time incremental backup method for the domestic operating system of the present invention;

[0032] Figure 3 It is a schematic structural diagram of the restore point management module of the present invention;

[0033] Figure 4 It is a schematic diagram of the internal operation process of the file open HOOK function of the present invention;

[0034] Figure 5Create a schematic diagram of the internal operation process of the HOOK function for this invention document;

[0035] Figure 6 Create a schematic diagram of the internal operation process of the moving HOOK function for this invention document;

[0036] Figure 7 Create a schematic diagram of the internal operation process of the write operation HOOK function for this invention document;

[0037] Figure 8 Create a schematic diagram of the internal operation process of the enumeration HOOK function for this invention document. Detailed implementation manners

[0038] Example 1

[0039] The present invention discloses a real-time incremental backup device for a domestic operating system, including a configuration management module and a data protection module, characterized in that:

[0040] The configuration management module runs in the user layer and includes a storage area configuration module, a directory configuration module, a restore point management module, and a communication module I;

[0041] The storage area configuration module is used to set the storage path of the backup file;

[0042] The directory configuration module includes a backup directory configuration sub-module, a protected directory and file configuration sub-module, and a filtered directory and file configuration sub-module;

[0043] The restore point management module is used to set a restore point during the real-time backup process and switch to the restore point backup during the restore process;

[0044] The communication module I is used to notify the above configuration policy information to the data protection module, receive the feedback information from the data protection module, and perform corresponding processing;

[0045] The data protection module runs in the kernel layer and includes a communication module II and a file access control module;

[0046] The communication module II is used to receive and execute the policy information sent by the configuration management module in the kernel layer, and at the same time feedback the execution result and other running status information to the configuration management module;

[0047] The file access control module realizes redirection through HOOK system calls, thereby establishing a mapping relationship with the restore point to realize real-time file backup.

[0048] The backup directory configuration sub-module is used to set the directories that need to be backed up. If no configuration is performed, the default is to perform incremental backup on all directories on the entire disk;

[0049] The protected directory and file configuration sub-module is used to set the directories and files to be protected, and these directories and files are prohibited from being moved, renamed, deleted, having their permissions set, or written to, to prevent the system directories and files from being maliciously damaged;

[0050] The filtered directory and file configuration sub-module is used to set some directories and files that need to be ignored.

[0051] Embodiment 2

[0052] The present invention discloses a real-time incremental backup method for a domestic operating system, including the following steps:

[0053] Step S1, configure the file backup storage area:

[0054] Step S11. The real-time backup service is installed in the system / opt / sisbck directory. After the storage area configuration module completes the setting of the backup storage area, it saves the path of the backup storage area into the backupCfg.ini configuration file, and the backupCfg.ini file is stored in the / opt / sisbck / directory;

[0055] Step S12. The implementation backup service sends the backup storage area path information to the data protection module. The data protection module creates a backup directory, creates an initial restore point, and saves the mapping relationship between the backup directory and the initial restore point into the backupCfg.ini configuration file;

[0056] Step S13. The data protection module protects the backupCfg.ini configuration file and prohibits users from performing operations such as opening, moving, deleting, writing, setting permissions, and setting attributes on the backupCfg.ini file;

[0057] Step S131. Obtain the system call table address and save it in the global variable __sys_call_table; obtain the original system call function address and save the corresponding global variable. The original system call function addresses are for file opening, creating, deleting, renaming, writing, setting permissions, setting attributes, deleting attributes, obtaining status, creating directories, deleting directories, and file enumeration;

[0058] Step S132. Write the hook function of the original system call described in S131 above and replace the hook function address into the system call table;

[0059] Step S133. In the hook functions corresponding to file opening, deleting, renaming, writing, setting permissions, setting attributes, and deleting attributes, if it is detected that the operating file is the configuration file backupCfg.ini and the operating process is not the configuration management module process, directly feedback an error;

[0060] Step S2, configure the backup policy:

[0061] Step S21. Use the built-in backup and restore software of the system to create a system restore point to support system restoration when the system crashes and cannot run;

[0062] Step S22. Set the backup directory through the directory configuration module. The backup directory includes the entire disk, system directory, and user directory. If no configuration is performed, full disk real-time backup is performed by default. Save the configuration information in the backupPolicy.ini configuration file, and the configuration file backupPolicy.ini is stored in the backup storage area path;

[0063] Step S23. Set the core system files and their directories that need to be protected through the directory configuration module, and save the configuration information in the backupPolicy.ini configuration file. The backupPolicy.ini file is stored in the backup storage area path;

[0064] Step S24. Set the temporary directories and files that need to be ignored for backup through the directory configuration, and save the configuration information in the backupPolicy.ini configuration file. The backupPolicy.ini file is stored in the backup storage area path;

[0065] Step S25. The data protection module protects the backupPolicy.ini and prohibits users from viewing, deleting, and writing operations on the backupPolicy.ini;

[0066] Step S3, start real-time backup, and save files to the backup storage in real-time through the redirection mechanism:

[0067] Step S31. The configuration management module process issues a start command to the data protection module, and the data module starts the redirection operation to redirect the changed files to the backup path of the corresponding restore point;

[0068] Specifically, it includes the following sub-steps:

[0069] Step S311. Send the backupPolicy.ini information to the data protection module, and the data protection module parses the configuration file backupPolicy.ini information into global variables;

[0070] Step S312: In the file open system call hook function, check the input parameters. If the file is in the backup directory, check whether the file exists in the restore point in the backup area. If it does not exist, directly call the original system call function. If the file exists in the restore point in the backup area, apply for user memory space through do_mmap, convert the file path to the corresponding file path of the restore point, store the path in the user memory space, call the original system call function to implement file redirection. After the original system call is completed, release the user memory space through do_munmap; the internal operation process of the file open HOOK function is as follows Figure 4 。

[0071] Step S313: In the custom hook function when creating a file, check whether the file path is a file to be backed up. If the file is in the backup directory, further check whether the storage space is sufficient. If the space is insufficient, notify the configuration management module of insufficient space. Otherwise, further check the restore point status. If it is the initial restore point, directly convert the file path to the corresponding path of the restore point and call the system call to implement redirected storage; if it is not the initial restore point, modify the file path to the corresponding path under the current restore point temporary directory, delete the existing identification file in the temporary directory, and call the system call function to implement redirected storage; the internal operation process of the file creation HOOK function is as follows Figure 5 。

[0072] Step S314: In the corresponding hook function for file and directory move, delete, and rename operations, check the file path. If the file is in the directory to be backed up, further check the current restore point status. If it is the initial restore point, create an identification file in the corresponding path in the backup area, modify the target path to the backup area path, and perform a move operation on the backup area file; if it is not the initial restore point, modify the target path to the corresponding file under the restore point temporary directory, then call the original system call to move the file to the restore point temporary directory, and finally create an identification file in the path corresponding to the original file in the temporary directory; the identification file is used to record the files and directories that have been moved, deleted, or renamed. For example, if file xx is moved, an identification file xx.move.f is created in the directory where xx is located; if directory dd is moved, the identification file is dd.move.d; the internal operation process of the file move HOOK function is as follows Figure 6 。

[0073] Step S315: In the custom hook function when writing data to a file, check whether the file is a protected file. If it is a protected file, directly feedback an error to the user layer; if it is a file to be backed up, copy the file in the system directory to the backup file in the corresponding restore point, and then write the new data to the backup file; the backup file in the restore point needs to be determined whether it is in the backup directory or the temporary directory according to the current restore point status; the internal operation process of the file write operation HOOK function is as followsFigure 7 as shown

[0074] Step S316: When enumerating files, the custom hook function checks the status of the restore point. If it is not the initial restore point, it checks whether the corresponding directories exist in the backup directory and the temporary directory. If they exist, it first merges the file lists in the backup directory and the temporary directory, then deletes the files with the identification files and the records of the identification files themselves, and finally merges and deduplicates with the enumerated items in the system directory. If it is the initial restore point, it first obtains the file list in the backup directory, deletes the files with the identification files and the records of the identification files themselves, and then merges and deduplicates with the enumerated items in the system directory. The internal operation process of the file enumeration HOOK function is as Figure 8 as shown

[0075] Step S317: The operations of directory creation, file and directory permission setting, attribute setting, and attribute deletion are similar to those in Step S312. Calculate the redirected file path that needs to be replaced, and replace this path into the system call. After file redirection is implemented, set the permissions, attributes, etc. to the files in the backup path.

[0076] Step S32: Through the restore point management module in the configuration management, incremental restore points and switchable restore points can be set while performing real-time backup. It specifically includes the following sub-steps:

[0077] When creating Restore Point 1, first create a backup directory and a temporary directory. Then, the restore point management module creates hard links to the files in the corresponding directories in the backup directory based on the files in the initial restore point directory. The temporary directory is used to store the files for incremental backup, and the new restore point is recorded in the backupCfg.ini configuration file.

[0078] When creating a new restore point based on Step S321, first create the corresponding backup directory and temporary directory. Merge and deduplicate the file lists in the backup directory and the temporary directory of the previous restore point. Create hard links to the corresponding files in the backup directory of the new restore point, and record the new restore point information in the backupCfg.ini configuration file.

[0079] When switching the restore point, the restore point management module clears the files in the temporary directory of the target restore point, updates the current restore point in the backupCfg.ini to the target restore point. After restarting the operating system, the data protection module parses the current restore point in the backupCfg.ini and performs real-time incremental backup of files according to Step S31.

[0080] The technical problem to be solved by the present invention is to provide a method for real-time incremental backup of a domestic operating system. Through a redirection mechanism, incremental system files are transferred to the backup area in real time, and real-time backup is transparently performed without affecting the normal system operation of users, so as to solve the problem of file loss in the timed backup process. At the same time, by establishing a mapping relationship between redirection and restore points, it is realized that the files in the backup area are both the files currently used by the system and the backup files, so as to solve the problem that the storage space occupied by the backup files increases more and more due to timed incremental backup.

[0081] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited by the above embodiments. What is described in the above embodiments and the specification is only the principle of the present invention. Without departing from the spirit and scope of the present invention, the present invention will have various changes and improvements, and these changes and improvements all fall within the scope of the present invention claimed. The scope of protection claimed by the present invention is defined by the appended claims and their equivalents.

Claims

1. A domestic operating system real-time incremental backup device, including a configuration management module and a data protection module, characterized by: The configuration management module runs at the user layer and includes a storage area configuration module, a directory configuration module, a restore point management module, and a communication module I; The storage area configuration module is used to set the storage path of the backup file; The directory configuration module includes a backup directory configuration submodule, a protection directory and file configuration submodule, and a filtering directory and file configuration submodule; The restore point management module is used to set the restore point during the real-time backup process and switch the restore point backup during the restore process; The communication module I is used to notify the data protection module of the above configuration strategy information, receive feedback information from the data protection module, and perform corresponding processing; The data protection module runs at the kernel layer and includes a communication module II and a file access control module; The communication module II is used to receive and execute the policy information issued by the configuration management module at the kernel layer, and feed back the execution results and other operation status information to the configuration management module; The file access control module implements redirection through HOOK system calls, thereby establishing a mapping relationship with the restore point to implement real-time file backup.

2. The domestic operating system real-time incremental backup device according to claim 1 is characterized by: The backup directory configuration submodule is used to set the directories that need to be backed up. If no configuration is performed, all directories on the entire disk will be incrementally backed up by default. The protection directory and file configuration submodule is used to set the protected directories and files. These directories and files are prohibited from being moved, renamed, deleted, permission set, and written to prevent system directories and files from being maliciously damaged; The filtering directory and file configuration submodule is used to set some directories and files that need to be ignored.

3. A real-time incremental backup method for a domestic operating system, the method is based on the device of claim 1, and is characterized by: Step S1, configuration file backup storage area; Step S2: configure backup strategy; Step S3: Start real-time backup and save the file to the backup storage in real time through the redirection mechanism.

4. The real-time incremental backup method of the domestic operating system according to claim 3 is characterized by: The step S1 includes the following contents: Step S11, the real-time backup service is installed in the system / opt / sisbck directory, and after the storage area configuration module completes the backup storage area setting, the path of the backup storage area is saved in the backupCfg.ini configuration file, and the backupCfg.ini file is stored in the / opt / sisbck / directory; Step S12, implementing the backup service to send the backup storage area path information to the data protection module, the data protection module creates a backup directory, creates an initialization restore point, and saves the mapping relationship between the backup directory and the initialization restore point into the backupCfg.ini configuration file; Step S13: The data protection module protects the backupCfg.ini configuration file and prohibits the user from operating the backupCfg.ini file.

5. The method for real-time incremental backup of a domestic operating system according to claim 4, wherein step S13 comprises the following contents: Step S131, obtain the system call table address and save it in the global variable __sys_call_table; obtain the original system call function address and save the corresponding global variable, the original system call function address file opening, creation, deletion, renaming, writing, permission setting, attribute setting, attribute deletion, status acquisition, directory creation, directory deletion, file enumeration; Step S132, write the hook function of the original system call described in S131 above, and replace the hook function address into the system call table; Step S133, if the hook function corresponding to file opening, deleting, renaming, writing, permission setting, property setting, and property deletion detects that the operation file is the configuration file backupCfg.ini, and the operation process is not the configuration management module process, an error is directly fed back.

6. The real-time incremental backup method of the domestic operating system according to claim 3 is characterized by: The step S2 includes the following contents: Step S21, using the system's own backup and restore software to create a system restore point to support system restoration when the system crashes and cannot run; Step S22, setting a backup directory through the directory configuration module, the backup directory includes the entire disk, the system directory, and the user directory. If no configuration is performed, the entire disk is backed up in real time by default, and the configuration information is saved in the backupPolicy.ini configuration file, and the backupPolicy.ini configuration file is stored in the backup storage area path; Step S23, setting the core system files and directories to be protected through the directory configuration module, saving the configuration information in the backupPolicy.ini configuration file, and storing the backupPolicy.ini file in the backup storage area path; Step S24, setting the need to ignore the backup temporary directory and files through the directory configuration, saving the configuration information in the backupPolicy.ini configuration file, and storing the backupPolicy.ini file in the backup storage area path; Step S25: The data protection module protects backupPolicy.ini and prohibits the user from viewing, deleting, or writing to backupPolicy.ini.

7. The real-time incremental backup method of a domestic operating system according to claim 3 is characterized by: The step S3 includes the following contents: Step S31: The configuration management module process sends a start command to the data protection module, and the data module starts a redirection operation to redirect the changed files to the backup path of the corresponding restore point; Step S32: Through the restore point management module in the configuration management, incremental restore points and switch restore points can be set while performing real-time backup.

8. The method for real-time incremental backup of a domestic operating system according to claim 7 is characterized by: The step S31 includes the following contents: Step S311, sending the backupPolicy.ini information to the data protection module, and the data protection module parses the configuration file backupPolicy.ini information into a global variable; Step S312, the file opening system calls the hook function to check the input parameters. If it is a file in the backup directory, check whether the file exists in the restore point of the backup area. If not, directly call the original system call function. If the file exists in the restore point of the backup area, apply for user memory space through do_mmap, convert the file path to the file path corresponding to the restore point, and store the path in the user memory space, call the original system call function, implement file redirection, and release the user memory space through do_munmap after the original system call is executed; Step S313: when creating a file, the custom hook function checks whether the file path is a file to be backed up. If it is a file in the backup directory, further checks whether the storage space is sufficient. If the space is insufficient, the configuration management module is notified of the insufficient space. Otherwise, the restore point status is further checked. If it is an initial restore point, the file path is directly converted to the path corresponding to the restore point, and the system call is called to implement redirected storage. If it is not an initial restore point, the file path is modified to the corresponding path under the temporary directory of the current restore point, the existing identification file in the temporary directory is deleted, and the system call function is called to implement redirected storage. Step S314: The file and directory move, delete, and rename operations check the file path in the corresponding hook function. If it is a file in the directory to be backed up, further check the current restore point status. If it is an initial restore point, create an identification file in the corresponding path of the backup area, modify the target path to the backup area path, and move the backup area file; if it is a non-initial restore point, modify the target path to the corresponding file in the restore point temporary directory, and then call the original system call to move the file to the restore point temporary directory, and finally create an identification file in the temporary directory under the path corresponding to the original file; Step S315: When writing data to a file, the custom hook function checks whether the file is a protected file. If it is a protected file, an error is directly fed back to the user layer; if it is a file to be backed up, a copy of the file in the system directory is copied to the backup file in the corresponding restore point, and then the newly added data is written to the backup file; The backup files in the restore point need to be determined in the backup directory or the temporary directory according to the current restore point status; Step S316: When enumerating files, the custom hook function checks the restore point status. If it is not the initial restore point, check whether there is a corresponding directory in the backup directory and the temporary directory. If so, first merge the file list in the backup directory and the temporary directory, then delete the file with the identification file and the record of the identification file itself, and finally merge with the enumeration items of the system directory to remove duplicates; If it is the initial restore point, first obtain the file list in the backup directory, delete the files with the identification file and the record of the identification file itself, and then merge it with the enumeration items of the system directory to remove duplicates; Step S317, directory creation, file and directory permission setting, attribute setting, and attribute deletion operations are similar to step S312. The redirected file path that needs to be replaced is calculated, and this path is replaced into the system call to realize file redirection, and then the permissions and attributes are set to the files under the backup path.

9. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored program, wherein the program controls the device where the non-volatile storage medium is located to execute the method according to any one of claims 3 to 8 when the program is executed.

10. A terminal device, characterized in that: The terminal device includes: a processor, a memory, a communication interface and a bus; the processor, the memory and the communication interface are connected through the bus and communicate with each other; the memory stores executable program code; the processor runs a program corresponding to the executable program code by reading the executable program code stored in the memory, so as to execute the method described in any one of claims 3 to 8 above.

Images