Data destruction method and device, equipment and storage medium

Abstract

The invention relates to a data destruction method and device, equipment and a storage medium. The method comprises the steps that in response to a data destruction instruction of the storage device, the storage capacity of the storage device is obtained through a hardware control port of the storage device, a data flow matched with the storage capacity is obtained, and data in the storage device is destructed based on the data flow. By adopting the method, the validity of data destruction on the storage equipment can be improved.

Description

Technical Field

[0001] This application relates to the field of computer security technology, and particularly to a data destruction method, apparatus, device, and storage medium. Background Art

[0002] With the development of computer technology, the update speed of storage devices on computers is getting faster and faster. Based on this, before updating the storage device, it is necessary to destroy the data on the storage device to avoid data leakage.

[0003] Taking the storage device as a hard disk as an example, in the related art, when destroying the hard disk data, a data destruction tool is usually used under the operating system to destroy the hard disk data.

[0004] However, the data destruction method in the related art still has the problem of incomplete data destruction. Summary of the Invention

[0005] Based on this, it is necessary to provide a data destruction method, apparatus, device, and storage medium for the above technical problems to improve the effectiveness of data destruction on the storage device.

[0006] In a first aspect, this application provides a data destruction method, which includes:

[0007] In response to a data destruction instruction of the storage device, obtain the storage capacity of the storage device through the hardware control port of the storage device;

[0008] Obtain a data stream that matches the storage capacity;

[0009] Destroy the data in the storage device based on the data stream.

[0010] In the technical solution provided by the embodiments of this application, in response to a data destruction instruction of the storage device, the storage capacity of the storage device is obtained through the hardware control port of the storage device, then a data stream that matches the storage capacity is obtained, and the data in the storage device is destroyed based on the data stream. In this method, obtaining the storage capacity through the hardware control port of the storage device is equivalent to a data reading method at the hardware level. In this way, the directly obtained storage capacity is more real and accurate compared to the storage capacity obtained at the software level. On this basis, the data stream determined according to the storage capacity can better match the storage device, and further, the effect of destroying the stored data on the storage device based on the data stream is more obvious and effective.

[0011] In one of the embodiments, destroying the data in the storage device based on the data stream includes:

[0012] Send a data stream and the number of overwrite times to the controller of the storage device to instruct the controller to circularly overwrite the data stream to the storage space of the storage device according to the number of overwrite times.

[0013] In the technical solution provided by the embodiments of the present application, by using the circular overwrite method, the data stream is overwritten to the storage space of the storage device multiple times, which is equivalent to performing multiple rounds of overwriting on the data of the storage device. While completely destroying the data, it can also effectively prevent the destroyed data from being recovered.

[0014] In one embodiment, the method further includes:

[0015] Monitor the overwrite progress of the controller on the storage space of the storage device;

[0016] If the overwrite progress is overwrite completed, execute a secure erase instruction; the secure erase instruction is used to instruct the controller to perform a formatting process on the data in the storage space.

[0017] In the technical solution provided by the embodiments of the present application, after the controller completes multiple rounds of circular overwrite operations, the data in the storage space is formatted again to fully erase the original data content on the storage device, change the data distribution of the storage device, and further improve the data destruction effect.

[0018] In one embodiment, the method further includes:

[0019] Send a preset standard data stream to the controller to instruct the controller to overwrite the standard data stream to the storage space of the storage device in the case of the last circular overwrite.

[0020] In the technical solution provided by the embodiments of the present application, during the circular overwrite process, the controller uses different data streams for overwriting in different overwrite rounds, further disturbing the possible remaining original data content or data distribution on the storage device, and improving the data destruction effect.

[0021] In one embodiment, the method further includes:

[0022] Send a status modification instruction to the controller, and the status modification instruction is used to instruct the controller to set the read / write status of the storage device to the read-only status in the case of the last circular overwrite.

[0023] In the technical solution provided by the embodiments of the present application, after the controller completes the overwrite operation, the read / write status of the storage device is set to the read-only status, so that the finally stored data on the storage device is fixed to the content of the last round of overwrite by the controller, avoiding users from writing new data and preventing the data from being unauthorizedly recovered.

[0024] In one embodiment, the method further includes:

[0025] By executing a preset resident program, obtain the hardware port identifier of the storage device;

[0026] Determine the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

[0027] In the technical solution provided by the embodiments of the present application, by executing the resident program to obtain the hardware port identifier of the storage device, and then based on the hardware port identifier, quickly and objectively determine the hardware control port of the storage device, which is beneficial for the server to access the hardware control port, thereby improving the speed of data destruction. Moreover, due to the high reusability of the resident program, it avoids the cumbersome operation of deploying the data destruction program once for each data destruction, and improves the data destruction efficiency to a certain extent.

[0028] In one of the embodiments, obtaining a data stream that matches the device capacity includes:

[0029] Obtain an initial data stream;

[0030] If the capacity of the initial data stream is less than the storage capacity, perform an expansion process on the initial data stream; the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

[0031] In the technical solution provided by the embodiments of the present application, when the initial data stream cannot fully cover the storage capacity of the storage device, the capacity of the initial data stream is expanded so that the expanded data stream matches the storage capacity of the storage device, supporting the full coverage of all stored data on the storage device, and thus supporting the controller to use various processing methods such as batch processing and one-time overwriting to destroy the data on the storage device.

[0032] In a second aspect, the present application further provides a data destruction device, including:

[0033] A response module, configured to obtain the storage capacity of the storage device through the hardware control port of the storage device in response to a data destruction instruction of the storage device;

[0034] An acquisition module, configured to acquire a data stream that matches the storage capacity;

[0035] A destruction module, configured to destroy the data in the storage device based on the data stream.

[0036] In a third aspect, the present application further provides a computer device, including a memory and a processor, where the memory stores a computer program, and when the processor executes the computer program, it implements the steps of the method in any one of the embodiments in the first aspect above.

[0037] Fourthly, the present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method in any one of the embodiments in the first aspect are implemented.

[0038] Fifthly, the present application also provides a computer program product, including a computer program. When the computer program is executed by a processor, the steps of the method in any one of the embodiments in the first aspect are implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the following will briefly introduce the drawings required for use in the description of the embodiments or the related art. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can be obtained based on these drawings.

[0040] Figure 1 It is the internal structure diagram of a computer device in an embodiment;

[0041] Figure 2 It is the flowchart of the data destruction method in an embodiment;

[0042] Figure 3 It is the flowchart of the data processing steps in an embodiment;

[0043] Figure 4 It is the flowchart of the port determination steps in an embodiment;

[0044] Figure 5 It is the flowchart of the data stream acquisition steps in an embodiment;

[0045] Figure 6 It is the flowchart of the data destruction method in another embodiment;

[0046] Figure 7 It is the structural block diagram of a data destruction device in an embodiment. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0047] In order to make the purpose, technical solutions and advantages of the present application clearer, the following further details the present application in conjunction with the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, and are not used to limit the present application.

[0048] The data destruction method provided by the embodiments of the present application can be applied to a computer device. The computer device can be a server, and its internal structure diagram can be as Figure 1As shown in the figure. The computer device includes a processor, a memory, an input / output interface (Input / Output, abbreviated as I / O), and a communication interface. Among them, the processor, the memory, and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store the program required for executing data destruction. The input / output interface of the computer device is used to exchange information between the processor and external devices. The communication interface of the computer device is used to communicate with external terminals through a network connection. When the computer program is executed by the processor, it implements a data destruction method.

[0049] Those skilled in the art can understand that Figure 1 the structure shown in the figure is only a block diagram of some structures related to the solution of this application, and does not constitute a limitation on the computer device to which the solution of this application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine some components, or have different component arrangements.

[0050] With the development of computer technology, the iteration speed of storage devices on computers is getting faster and faster, and the data storage capacity of storage devices is also increasing continuously.

[0051] During the process of storage device scrapping, transferring, repairing, etc., in order to reduce the risk of storage data leakage on the storage device, it is necessary to timely destroy the storage data. At the same time, with the enhancement of users' privacy protection awareness, a more secure and effective data destruction method is also needed to completely destroy the unnecessary data and prevent the data from being restored by physical, magnetic, electrical and other technologies.

[0052] Taking the hard disk as an example of the storage device, in the related technology, usually based on the file system under the operating system (Operating System, OS), tools are used to destroy the hard disk data, and the most basic destruction operation cannot be achieved. And when the hard disk data is exposed under the OS, there is also a risk of being remotely stolen.

[0053] Based on this, the embodiment of this application provides a data destruction method. In response to a data destruction instruction of a storage device, the storage capacity of the storage device is obtained through the hardware control port of the storage device, and a data stream matching the storage capacity is used to destroy the data in the storage device, controlling the data processing process of the storage device at the hardware level to improve the effectiveness of data destruction.

[0054] The following uses specific embodiments to elaborate in detail on the technical solution of this application and how the technical solution of this application solves the above technical problems. These several specific embodiments below can be combined with each other, and the same or similar concepts or processes may not be elaborated in some embodiments. The embodiments of this application will be described below in conjunction with the accompanying drawings.

[0055] In an exemplary embodiment, as Figure 2 shown, a data destruction method is provided. Taking the server in Figure 1 as an example for illustration, it can be understood that this method can also be applied to a server, and can also be applied to a system including a terminal and a server, and is implemented through the interaction between the terminal and the server. In the embodiments of this application, this method includes the following steps:

[0056] S201, in response to the data destruction instruction of the storage device, obtain the storage capacity of the storage device through the hardware control port of the storage device.

[0057] Among them, the storage device is a hardware device for storing data in a computer system, which can be an internal memory, such as a random-access memory (RAM), or an external memory, such as a hard disk. In scenarios where the storage device in the computer system needs to be replaced, repaired, or transferred, etc., it is necessary to promptly destroy the data stored on the storage device to avoid data leakage.

[0058] The data destruction instruction of the storage device can be automatically triggered by the startup system in the computer system, such as the Basic Input Output System (BIOS), during the power-on self-test of the computer system, or can be triggered by the user based on the data destruction requirement in the startup system.

[0059] In response to the data destruction instruction of the storage device, access the hardware control port of the storage device, and then obtain the amount of binary information that the storage device can accommodate, that is, the storage capacity.

[0060] S202, obtain a data stream that matches the storage capacity.

[0061] A data stream is an ordered data sequence of a group of consecutive bytes with a starting point and an ending point. In the embodiments of this application, the capacity of the data stream can be equal to the storage capacity or a multiple of the storage capacity.

[0062] It should be noted that the storage capacity refers to the amount of binary information, that is to say, the data stored on the storage device is in the form of binary bits. Correspondingly, the data stream is also a bit stream constructed by a string of binary data.

[0063] The server randomly generates a bitstream that matches the storage capacity, such as binary data of all 0s, or binary data of all 1s, or binary data in the 5A5A pattern. Among them, the 5A5A pattern means that the number of "0"s and "1"s in the binary data stream is both 50%.

[0064] S203, Destroy the data in the storage device based on the data stream.

[0065] Input the data stream into the storage device, and overwrite all the storage spaces in the storage device through the data stream to achieve the destruction of the data in the storage device.

[0066] In an actual scenario, when the storage space of the storage device may not be fully occupied, the storage space can be further divided into free storage space and occupied storage space.

[0067] Then in an exemplary embodiment, the server can also overwrite the occupied storage space in the storage device through the data stream to achieve the destruction of the data in the storage device.

[0068] In the embodiment of the present application, in response to the data destruction instruction of the storage device, the storage capacity of the storage device is obtained through the hardware control port of the storage device, then a data stream that matches the storage capacity is obtained, and the data in the storage device is destroyed based on the data stream. In this method, obtaining the storage capacity through the hardware control port of the storage device is equivalent to a data reading method at the hardware level. In this way, the directly obtained storage capacity is more real and accurate compared to the storage capacity obtained at the software level. On this basis, the data stream determined according to the storage capacity can better match the storage device, and the effect of destroying the data stored on the storage device based on the data stream is more obvious and effective.

[0069] On the basis of obtaining a data stream that matches the storage capacity, various processing methods such as batch destruction, one-time full destruction, and combined destruction can be adopted to destroy the data in the storage device. The following uses an embodiment to illustrate an achievable way of data destruction.

[0070] In an exemplary embodiment, destroying the data in the storage device based on the data stream includes:

[0071] Send the data stream and the overwrite times to the controller of the storage device to instruct the controller to circularly overwrite the data stream to the storage space of the storage device according to the overwrite times.

[0072] Among them, the controller is used to manage and control the storage device of computer hardware devices. By receiving and processing instructions, it operates or controls the storage device. In the embodiments of the present application, the controller of the storage device has data storage and device control functions.

[0073] The server sends a data stream and the number of overwrite times that match the storage capacity of the storage device to the controller, instructing the controller to cyclically write the data stream into the storage space in the storage device, which is equivalent to performing multiple rounds of overwriting on the storage device to largely weaken the original data that may remain on the storage device.

[0074] In the embodiments of the present application, in a cyclic overwrite manner, the data stream is overwritten multiple times into the storage space of the storage device, which is equivalent to performing multiple rounds of overwriting on the data of the storage device. While completely destroying the data, it can also effectively prevent the destroyed data from being recovered.

[0075] As can be seen from the foregoing embodiments, the controller can use the cyclic overwrite method to destroy data to completely eliminate the data on the storage device. To further enhance the data destruction effect, means such as hard disk formatting and deleting track identifiers can also be combined to process the storage device. Then in an exemplary embodiment, as Figure 3 shown, the method further includes:

[0076] S301, monitor the overwrite progress of the controller on the storage space of the storage device.

[0077] The overwrite progress includes two cases: overwrite completed and overwrite not completed. In the case of overwrite completed, the overwrite progress can include the overwrite duration of the controller; in the case of overwrite not completed, the overwrite progress can also include the overwrite round, data stream content, and estimated overwrite completion time of the controller at the current moment, etc.

[0078] S302, if the overwrite progress is overwrite completed, execute the secure erase instruction; the secure erase instruction is used to instruct the controller to perform a formatting process on the data in the storage space.

[0079] After the overwrite is completed, the server instructs the controller to format regular sectors for the data in the storage space by executing the secure erase instruction, and reformat the storage device.

[0080] In the embodiments of the present application, after the controller completes multiple rounds of cyclic overwrite operations, the data in the storage space is formatted again to fully erase the original data content on the storage device, change the data distribution of the storage device, and further improve the data destruction effect.

[0081] When the controller performs multiple rounds of overwriting on the data in the storage space, the content of the data stream for each round of overwriting can be the same, which is a data stream matching the storage capacity, or different data stream contents can be selected for different rounds of overwriting to further enhance the effect of data destruction. Based on this, through an embodiment below, another overwriting method of the controller will be described. Then in an exemplary embodiment, the method further includes:

[0082] Send a preset standard data stream to the controller to instruct the controller to overwrite the standard data stream into the storage space of the storage device when the cyclic overwriting reaches the last time.

[0083] The server sends a standard data stream of a specific pattern, such as "10101010", to the controller to instruct the controller to perform the last overwriting using the standard data stream, further disturbing the original data information remaining on the hard disk.

[0084] It should be noted that the pattern of the standard data stream is different from the pattern of the data stream matching the storage capacity obtained in the foregoing embodiment. For example, the standard data stream is "01011010", and the obtained data stream is "01011010".

[0085] If the controller needs to perform n rounds of overwriting, the controller performs the first (n - 1) rounds of overwriting with the "01011010" data stream and the last overwriting with the "01011010" data stream.

[0086] In the embodiment of the present application, during the cyclic overwriting process, the controller uses different data streams for different overwriting rounds to further disturb the original data content or data distribution that may remain on the storage device, improving the data destruction effect.

[0087] The foregoing embodiment describes the overwriting content corresponding to the last round of overwriting performed by the controller. However, in an actual scenario, it is not only the controller that writes data to the storage device, but there may also be users or the system itself saving temporary data at the same time. Based on this, in order to ensure that the content of the last round of overwriting is not tampered with, it is also necessary to set the read-write state of the storage device when receiving the last round of overwriting.

[0088] Then in an exemplary embodiment, the method further includes:

[0089] Send a status modification instruction to the controller, and the status modification instruction is used to instruct the controller to set the read-write state of the storage device to the read-only state when the cyclic overwriting reaches the last time.

[0090] Before the controller completes the overwriting operation, the server can set the status of the storage device to a read / write supported status, so as to facilitate the controller to write a data stream to the storage device. Moreover, a status modification instruction is sent to the controller to instruct the controller to set the read / write status of the storage device to a read-only status after the cyclic overwriting operation is completed, so as to prevent new data from being written to the storage device.

[0091] In the embodiment of the present application, after the controller completes the overwriting operation, the read / write status of the storage device is set to a read-only status, so that the data finally stored on the storage device is fixed to the content overwritten by the controller in the last round, preventing the user from writing new data and preventing unauthorized data recovery.

[0092] The storage device includes multiple physical ports of different types. Through different physical ports, different device control instructions are executed. For example, in the foregoing embodiment, the storage capacity is obtained through the hardware control port of the storage device. Based on this, through an embodiment below, a feasible way to quickly determine the port that fits the control command for the numerous physical ports of the storage device will be described.

[0093] In an exemplary embodiment, as Figure 4 shown, the method further includes:

[0094] S401, by executing a preset resident program, obtain the hardware port identifier of the storage device.

[0095] The resident program is a special application program deployed in the BIOS, and the code file of this program always resides in the memory. When this section of code is activated, the resident program will enter the running state here to determine the hardware interface identifier of the storage device in the computer system.

[0096] In response to the data destruction instruction, execute the resident program on the BIOS, detect the storage device on the computer system, and determine the hardware port identifier of the storage device. Among them, the hardware port identifier refers to the port identifier of the physical port of the storage device.

[0097] In another scenario, the hardware port identifier is set in the resident program, and the server outputs the hardware port identifier by executing the resident program.

[0098] S402, determine the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

[0099] Taking the storage device as a hard disk as an example, the hardware port identifier refers to the register port corresponding to the hard disk. Among the multiple physical interfaces on the server, the register control port corresponding to the hardware port identifier is determined as the hardware control port of the hard disk.

[0100] In the embodiments of the present application, the hardware port identifier of the storage device is obtained by executing a resident program. Then, based on the hardware port identifier, the hardware control port of the storage device is quickly and objectively determined, which is conducive to the server accessing the hardware control port, thereby improving the speed of data destruction. Moreover, due to the high reusability of the resident program, the cumbersome operation of deploying a data destruction process for each execution of data destruction is avoided, and the data destruction efficiency is improved to a certain extent.

[0101] As can be seen from the foregoing embodiments, the capacity of the data stream matches the storage capacity of the storage device, and the data stream is the basis for destroying the data in the storage device. Then, in order to comprehensively destroy the data in the storage device, it is at least necessary to ensure that the capacity of the data stream is greater than or equal to the storage capacity. Based on this, an implementable manner for obtaining the data stream will be described below through an embodiment.

[0102] In an exemplary embodiment, as Figure 5 shown, obtaining a data stream that matches the device capacity includes:

[0103] S501, obtain an initial data stream.

[0104] Among them, the data stream pattern of the initial data stream is "5A5A". In the embodiments of the present application, when the data stream pattern is determined to be the 5A5A pattern, an initial data stream with a certain capacity is randomly generated to improve the complexity and randomness of the initial data stream.

[0105] In addition, due to the relatively complex characteristics of the initial data stream, the data stream in the 5A5A pattern requires higher data recovery technology compared to the data stream in the simple all-0 or all-1 pattern. In other words, the data stream in the 5A5A pattern is more difficult to recover.

[0106] S502, if the capacity of the initial data stream is less than the storage capacity, perform an expansion process on the initial data stream; the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

[0107] The fact that the capacity of the initial data stream is less than the storage capacity means that the initial data stream cannot cover all the data in the storage device, and thus cannot achieve the destruction of all data.

[0108] Then, in order to comprehensively destroy the data in the storage device, when the capacity of the initial data stream is less than the storage capacity, while keeping the data stream pattern unchanged, expand the capacity of the initial data stream so that the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

[0109] In the embodiments of the present application, when the initial data stream cannot fully cover the storage capacity of the storage device, the capacity of the initial data stream is expanded so that the expanded data stream matches the storage capacity of the storage device, supporting full coverage of all stored data on the storage device, and further supporting the controller to destroy the data on the storage device in various processing manners such as batch processing and one-time overwriting.

[0110] In an exemplary embodiment, as Figure 6 shown, the method includes:

[0111] S601, in response to a data destruction instruction of the storage device, obtain the hardware port identifier of the storage device by executing a preset resident program.

[0112] S602, determine the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

[0113] S603, obtain the storage capacity of the storage device through the hardware control port of the storage device.

[0114] S604, obtain a data stream that matches the storage capacity.

[0115] Wherein, the capacity of the data stream is equal to the storage capacity.

[0116] S605, send the data stream and the number of overwriting times to the controller of the storage device to instruct the controller to circularly overwrite the data stream to the storage space of the storage device according to the number of overwriting times.

[0117] S606, send a preset standard data stream to the controller to instruct the controller to overwrite the standard data stream to the storage space of the storage device in the case of the last circular overwriting.

[0118] S607, monitor the overwriting progress of the controller on the storage space of the storage device.

[0119] S608, if the overwriting progress is overwriting completion, execute a secure erase instruction; the secure erase instruction is used to instruct the controller to format the data in the storage space.

[0120] S609, send a status modification instruction to the controller, and the status modification instruction is used to instruct the controller to set the read / write status of the storage device to the read-only status in the case of the last circular overwriting.

[0121] In the embodiments of the present application, in response to a data destruction instruction of a storage device, the storage capacity of the storage device is obtained through the hardware control port of the storage device, and then a data stream matching the storage capacity is obtained, and the data in the storage device is destroyed based on the data stream. In this method, obtaining the storage capacity through the hardware control port of the storage device is equivalent to a data reading method at the hardware level. In this way, the intuitively obtained storage capacity is more real and accurate compared to the storage capacity obtained at the software level. On this basis, the data stream determined according to the storage capacity can better match the storage device. Further, the effect of destroying the data stored on the storage device based on the data stream is more obvious and effective.

[0122] It should be understood that although the steps in the flowcharts involved in the above-described embodiments are shown in sequence according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless there is a clear indication in this article, the execution of these steps has no strict order limit, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-described embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be executed alternately or alternately with at least a part of other steps or steps in other steps.

[0123] Based on the same inventive concept, the embodiments of the present application also provide a data destruction device for implementing the above-mentioned data destruction method. The implementation solutions provided by this device to solve problems are similar to the implementation solutions described in the above method. Therefore, the specific limitations in one or more of the following data destruction device embodiments can refer to the limitations on the data destruction method in the above text, and will not be repeated here.

[0124] In an exemplary embodiment, as Figure 7 shown, a data destruction device is provided, including: a response module 701, an acquisition module 702, and a destruction module 703, where:

[0125] The response module 701 is configured to, in response to a data destruction instruction of a storage device, obtain the storage capacity of the storage device through the hardware control port of the storage device;

[0126] The acquisition module 702 is configured to obtain a data stream matching the storage capacity;

[0127] The destruction module 703 is configured to destroy the data in the storage device based on the data stream.

[0128] In an exemplary embodiment, the destruction module 703 is further configured to send a data stream and the number of overwrite times to the controller of the storage device, so as to instruct the controller to cyclically overwrite the data stream to the storage space of the storage device according to the number of overwrite times.

[0129] In an exemplary embodiment, the data destruction device further includes a monitoring module and a processing module, wherein:

[0130] The monitoring module is configured to monitor the overwrite progress of the controller on the storage space of the storage device;

[0131] The processing module is configured to execute a secure erase instruction if the overwrite progress is overwrite completed; the secure erase instruction is used to instruct the controller to perform a formatting process on the data in the storage space.

[0132] In an exemplary embodiment, the data destruction device further includes a first sending module, which is configured to send a preset standard data stream to the controller, so as to instruct the controller to overwrite the standard data stream to the storage space of the storage device in the case of the last cyclic overwrite.

[0133] In an exemplary embodiment, the data destruction device further includes a second sending module, which is configured to send a status modification instruction to the controller, and the status modification instruction is used to instruct the controller to set the read-write status of the storage device to a read-only status in the case of the last cyclic overwrite.

[0134] In an exemplary embodiment, the data destruction device further includes an execution module and a determination module, wherein:

[0135] The execution module is configured to obtain the hardware port identifier of the storage device by executing a preset resident program;

[0136] The determination module is configured to determine the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

[0137] In an exemplary embodiment, the acquisition module 702 includes a data stream acquisition unit and a data stream processing unit, wherein:

[0138] The data stream acquisition unit is configured to acquire an initial data stream;

[0139] The data stream processing unit is configured to perform an expansion process on the initial data stream if the capacity of the initial data stream is less than the storage capacity; the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

[0140] Each module in the above data destruction device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above modules can be embedded in the processor of the computer device in hardware form or be independent of the processor, or can be stored in the memory of the computer device in software form, so that the processor can call and execute the operations corresponding to each of the above modules.

[0141] In an exemplary embodiment, a computer device is provided, including a memory and a processor. A computer program is stored in the memory. When the processor executes the computer program, the following steps are implemented:

[0142] In response to a data destruction instruction of the storage device, obtain the storage capacity of the storage device through the hardware control port of the storage device;

[0143] Obtain a data stream matching the storage capacity;

[0144] Destroy the data in the storage device based on the data stream.

[0145] In an exemplary embodiment, when the processor executes the computer program, the following steps are further implemented:

[0146] Send the data stream and the number of overwrite times to the controller of the storage device to instruct the controller to circularly overwrite the data stream to the storage space of the storage device according to the number of overwrite times.

[0147] In an exemplary embodiment, when the processor executes the computer program, the following steps are further implemented:

[0148] Monitor the overwrite progress of the controller on the storage space of the storage device;

[0149] If the overwrite progress is overwrite completed, execute a secure erase instruction; the secure erase instruction is used to instruct the controller to perform a formatting process on the data in the storage space.

[0150] In an exemplary embodiment, when the processor executes the computer program, the following steps are further implemented:

[0151] Send a preset standard data stream to the controller to instruct the controller to overwrite the standard data stream to the storage space of the storage device in the case of the last circular overwrite.

[0152] In an exemplary embodiment, when the processor executes the computer program, the following steps are further implemented:

[0153] Send a status modification instruction to the controller. The status modification instruction is used to instruct the controller to set the read / write status of the storage device to the read-only status in the case of the last circular overwrite.

[0154] In an exemplary embodiment, when the processor executes the computer program, the following steps are further implemented:

[0155] By executing a preset resident program, obtain the hardware port identifier of the storage device;

[0156] Determine the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

[0157] In an exemplary embodiment, when the processor executes the computer program, the following steps are further implemented:

[0158] Obtain the initial data stream;

[0159] If the capacity of the initial data stream is less than the storage capacity, perform expansion processing on the initial data stream; the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

[0160] In an exemplary embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the following steps are implemented:

[0161] In response to the data destruction instruction of the storage device, obtain the storage capacity of the storage device through the hardware control port of the storage device;

[0162] Obtain the data stream matching the storage capacity;

[0163] Destroy the data in the storage device based on the data stream.

[0164] In an exemplary embodiment, when the computer program is executed by the processor, the following steps are further implemented:

[0165] Send the data stream and the overwrite count to the controller of the storage device to instruct the controller to circularly overwrite the data stream to the storage space of the storage device according to the overwrite count.

[0166] In an exemplary embodiment, when the computer program is executed by the processor, the following steps are further implemented:

[0167] Monitor the overwrite progress of the controller on the storage space of the storage device;

[0168] If the overwrite progress is overwrite completed, execute the secure erase instruction; the secure erase instruction is used to instruct the controller to format the data in the storage space.

[0169] In an exemplary embodiment, when the computer program is executed by the processor, the following steps are further implemented:

[0170] Send a preset standard data stream to the controller to instruct the controller to overwrite the standard data stream into the storage space of the storage device when the circular overwrite reaches the last time.

[0171] In an exemplary embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0172] Send a status modification instruction to the controller, where the status modification instruction is used to instruct the controller to set the read / write status of the storage device to the read-only status when the circular overwrite reaches the last time.

[0173] In an exemplary embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0174] Obtain the hardware port identifier of the storage device by executing a preset resident program;

[0175] Determine the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

[0176] In an exemplary embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0177] Obtain an initial data stream;

[0178] If the capacity of the initial data stream is less than the storage capacity, perform an expansion process on the initial data stream; the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

[0179] In an exemplary embodiment, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0180] In response to the data destruction instruction of the storage device, obtain the storage capacity of the storage device through the hardware control port of the storage device;

[0181] Obtain a data stream that matches the storage capacity;

[0182] Destroy the data in the storage device based on the data stream.

[0183] In an exemplary embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0184] Send a data stream and the number of overwrite times to the controller of the storage device to instruct the controller to circularly overwrite the data stream into the storage space of the storage device according to the number of overwrite times.

[0185] In an exemplary embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0186] The monitoring controller monitors the overwriting progress of the storage space of the storage device;

[0187] If the overwriting progress is overwritten, execute a secure erase instruction; the secure erase instruction is used to instruct the controller to format the data in the storage space.

[0188] In an exemplary embodiment, when the computer program is executed by the processor, the following steps are further implemented:

[0189] Send a preset standard data stream to the controller to instruct the controller to overwrite the standard data stream to the storage space of the storage device in the case of the last loop overwrite.

[0190] In an exemplary embodiment, when the computer program is executed by the processor, the following steps are further implemented:

[0191] Send a status modification instruction to the controller, and the status modification instruction is used to instruct the controller to set the read / write status of the storage device to the read-only status in the case of the last loop overwrite.

[0192] In an exemplary embodiment, when the computer program is executed by the processor, the following steps are further implemented:

[0193] Obtain the hardware port identifier of the storage device by executing a preset resident program;

[0194] Determine the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

[0195] In an exemplary embodiment, when the computer program is executed by the processor, the following steps are further implemented:

[0196] Obtain the initial data stream;

[0197] If the capacity of the initial data stream is less than the storage capacity, perform an expansion process on the initial data stream; the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

[0198] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use, and processing of relevant data need to comply with relevant regulations.

[0199] Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above methods. Among them, any reference to a memory, database, or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memories. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The databases involved in the embodiments provided in the present application can include at least one of relational databases and non-relational databases. Non-relational databases can include distributed databases based on blockchain, etc., without limitation. The processors involved in the embodiments provided in the present application can be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, data processing logics based on quantum computing, etc., without limitation.

[0200] The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity of description, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as the scope recorded in this specification.

[0201] The above-described embodiments only represent several implementation manners of the present application. The description is relatively specific and detailed, but it should not be construed as a limitation on the patent scope of the present application. It should be noted that for those of ordinary skill in the art, without departing from the concept of the present application, several modifications and improvements can still be made, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A data destruction method, characterized in that, The method includes: In response to a data destruction instruction of a storage device, obtaining the storage capacity of the storage device through the hardware control port of the storage device; Obtaining a data stream that matches the storage capacity; Destroying the data in the storage device based on the data stream.

2. The method according to claim 1, characterized in that, The destroying the data in the storage device based on the data stream includes: Sending the data stream and the number of overwrite times to the controller of the storage device to instruct the controller to circularly overwrite the data stream to the storage space of the storage device according to the number of overwrite times.

3. The method according to claim 2, characterized in that, The method further includes: Monitoring the overwrite progress of the controller on the storage space of the storage device; If the overwrite progress is overwrite completion, executing a secure erase instruction; the secure erase instruction is used to instruct the controller to perform a formatting process on the data in the storage space.

4. The method according to claim 2 or 3, characterized in that, The method further includes: Sending a preset standard data stream to the controller to instruct the controller to overwrite the standard data stream to the storage space of the storage device in the case of the last circular overwrite.

5. The method according to claim 2 or 3, characterized in that, The method further includes: Sending a status modification instruction to the controller, the status modification instruction is used to instruct the controller to set the read / write status of the storage device to a read-only status in the case of the last circular overwrite.

6. The method according to any one of claims 1 - 3, characterized in that, The method further includes: Obtaining the hardware port identifier of the storage device by executing a preset resident program; Determining the port corresponding to the hardware port identifier among the multiple ports of the storage device as the hardware control port of the storage device.

7. The method according to any one of claims 1 - 3, characterized in that, According to obtaining a data stream that matches the device capacity, it includes: Obtaining an initial data stream; If the capacity of the initial data stream is less than the storage capacity, performing an expansion process on the initial data stream; the capacity of the expanded initial data stream is greater than or equal to the storage capacity.

8. A data destruction device, characterized in that, The device includes: A response module, configured to obtain the storage capacity of the storage device through the hardware control port of the storage device in response to a data destruction instruction of the storage device; An obtaining module, configured to obtain a data stream that matches the storage capacity; A destruction module, configured to destroy the data in the storage device based on the data stream.

9. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that, When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images