Automatic data erasing method and device based on resource scheduling, medium and equipment

Abstract

The invention discloses an automatic data erasing method and device based on resource scheduling, a medium and equipment, and the method comprises the steps: judging whether a storage resource needs to be subjected to data erasing review or not based on a data erasing rule, and confirming a to-be-offline storage resource; carrying out storage medium basic attribute testing on the to-be-offline storage resources passing the data erasing review, and starting data erasing operation; and performing basic information detection on the to-be-offline storage resource, generating a data erasing script, executing the data erasing script to perform a data erasing task, and releasing an instance or recovering equipment for the storage resource after the data erasing operation is completed. Whether the storage resources need to be subjected to data erasing review or not is judged on the basis of the data erasing rule, the storage resources to be offline are confirmed, meanwhile, the storage medium basic attribute test and basic information detection are matched, different data erasing modes are suitable for different types of storage resources, and the data erasing efficiency is improved. And the data erasing efficiency and stability are greatly improved.

Description

Technical Field

[0001] This invention relates to the field of Internet technology, and in particular to an automated data erasure method, apparatus, medium and device based on resource scheduling. Background Technology

[0002] The importance of data security is increasingly prominent. Data destruction is not only necessary to meet regulatory requirements, but also a crucial measure to protect customer interests, reduce risks, maintain corporate reputation, and ensure data security. With the acceleration of digitalization, the diversification of data storage scenarios has placed more stringent demands on data destruction efforts.

[0003] Data destruction is a series of processes and methods to ensure that data stored on digital devices is completely deleted and cannot be recovered. This type of technology is very important for protecting personal privacy and trade secrets, and is usually divided into media destruction, data erasure, and logical deletion.

[0004] Existing data erasure solutions mainly include manual erasure and automated tool erasure, but they still have significant shortcomings: 1. There is a lack of a standardized data destruction approval and verification process; 2. There is a lack of real-time monitoring and review mechanisms and audit traceability capabilities; 3. When facing large-capacity storage clusters, there is a lack of dynamic allocation strategies for the reasonable allocation of computing and storage resources.

[0005] Therefore, there is an urgent need for an automated data erasure method based on resource scheduling. Summary of the Invention

[0006] In view of the above problems, the present invention is proposed to provide an automated data erasure method, apparatus, medium and device based on resource scheduling that overcomes or at least partially solves the above problems.

[0007] Other features and advantages of the invention will become apparent from the following detailed description, or may be learned in part by practice of the invention.

[0008] According to a first aspect of the present invention, an automated data erasure method based on resource scheduling is provided, the automated data erasure method based on resource scheduling includes:

[0009] The system connects to the configuration management database to obtain the asset status of storage resources, determines whether the storage resources need to undergo data erasure review based on data erasure rules, and confirms the storage resources to be taken offline.

[0010] For the storage resources to be taken offline that have passed the data erasure review, perform basic storage medium attribute tests and initiate the data erasure operation;

[0011] The storage resources to be taken offline are subjected to basic information detection, a data erasure script is generated, the data erasure script is executed to perform the data erasure task, the storage resource instance is released or the device is reclaimed after the data erasure operation is completed, and the asset status corresponding to the storage resource is synchronously updated in the configuration management database.

[0012] In some embodiments of the present invention, the step of performing basic storage medium attribute tests on the storage resources to be taken offline that have passed the data erasure review, and initiating the data erasure operation, includes:

[0013] The storage resources to be taken offline that have passed the data erasure review are subjected to basic storage medium attribute tests to determine whether the storage resources to be taken offline are storage clusters or independent storage resources.

[0014] If it is determined that the storage resource to be taken offline is a storage cluster, then control the storage resource to stop service and release the instance, generate an overwrite instance allocation scheme, and create data erasure instances in batches according to the overwrite instance allocation scheme, and start data erasure operation on the data erasure instances;

[0015] If it is determined that the storage resource to be taken offline is an independent storage resource, a data erasure operation is initiated on the independent storage resource.

[0016] In some embodiments of the present invention, controlling the storage resource to stop service and release the instance, and generating an overwrite instance allocation scheme includes:

[0017] Determine the initial number of instances and calculate the matching degree of each instance specification;

[0018] The matching degree of each instance specification is sorted, the instance specification with the highest matching degree is selected, the corresponding specification instance to be allocated from the host machine is determined, and the overwrite instance allocation scheme is generated.

[0019] In some embodiments of the present invention, determining the corresponding specification instance allocated from the host machine includes: when the host machine is overloaded in allocating the corresponding specification instance, adding a new host machine; if the total number of host machines reaches the maximum, reducing the number of instances or selecting the instance specification with the highest matching degree, until the host machine meets the requirement of allocating the corresponding specification instance.

[0020] In some embodiments of the present invention, basic information detection of the storage resources to be taken offline includes:

[0021] Perform hard disk status detection and throughput performance testing on the storage resources to be taken offline;

[0022] When performing hard disk status detection, check the mount status of the storage resources to be taken offline and whether the directory has been cleared;

[0023] When performing throughput performance tests, the data overwrite speed of different block sizes on the storage resources to be taken offline is tested in batches, and the optimal block size is confirmed.

[0024] In some embodiments of the present invention, the method further includes: during the execution of the data erasure script to perform the data erasure task, monitoring the execution status of the data erasure task in real time, and generating a data erasure script log.

[0025] In some embodiments of the present invention, the method further includes: when the data erasure task performed by the data erasure script is interrupted, obtaining the data erasure script log and restarting the data erasure task according to the interruption progress.

[0026] According to a second aspect of the present invention, an automated data erasure device based on resource scheduling is provided, the automated data erasure device based on resource scheduling comprising:

[0027] The erase review module is used to connect to the configuration management database to obtain the asset status of storage resources, determine whether the storage resources need to be reviewed for data erasure based on the data erasure rules, and confirm the storage resources to be taken offline.

[0028] The attribute detection module is used to perform basic storage medium attribute tests on the storage resources to be taken offline that have passed the data erasure review, and to initiate the data erasure operation.

[0029] The data erasure module is used to perform basic information detection on the storage resources to be taken offline, generate a data erasure script, execute the data erasure script to perform data erasure tasks, release the instance or reclaim the device of the storage resource after the data erasure operation is completed, and simultaneously update the asset status corresponding to the storage resource in the configuration management database.

[0030] According to a third aspect of the present invention, a computer-readable storage medium is provided, wherein computer program instructions are stored therein, the computer program instructions being loaded and executed by a processor to perform the operations performed by the method described in any of the preceding claims.

[0031] According to a fourth aspect of the present invention, an electronic device is provided, including a processor and a memory, the memory storing computer program instructions executable by the processor, wherein when the processor executes the computer program instructions, it implements the instructions of any of the methods described above.

[0032] The technical solutions provided in the embodiments of the present invention have at least the following technical effects or advantages:

[0033] This invention provides an automated data erasure method, apparatus, medium, and device based on resource scheduling. The automated data erasure method based on resource scheduling in this invention determines whether the storage resource needs to be reviewed for data erasure based on data erasure rules and confirms the storage resource to be taken offline. At the same time, it is combined with basic attribute testing and basic information detection of the storage medium. Different data erasure methods are applied to different types of storage resources, which greatly improves the efficiency and stability of data erasure.

[0034] The above description is merely an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of the present invention more apparent and understandable, specific embodiments of the present invention are described below. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 A flowchart illustrating an automated data erasure method based on resource scheduling provided in an embodiment of the present invention;

[0037] Figure 2 A schematic diagram illustrating the asset status of independent storage resources;

[0038] Figure 3 This is a schematic diagram illustrating the asset status of the storage cluster.

[0039] Figure 4 This is a reference illustration of the review interface;

[0040] Figure 5 A schematic diagram of the interface for performing a data erasure task;

[0041] Figure 6 This is a schematic diagram of the principle structure of an automated data erasure device based on resource scheduling, provided in an embodiment of the present invention. Detailed Implementation

[0042] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings.

[0043] The accompanying drawings illustrate various structural schematics according to embodiments of the present disclosure. These drawings are not to scale, and some details have been enlarged for clarity, and some details may have been omitted. The shapes of the various regions and layers shown in the drawings, as well as their relative sizes and positional relationships, are merely exemplary and may deviate from reality due to manufacturing tolerances or technical limitations. Furthermore, those skilled in the art can design regions / layers with different shapes, sizes, and relative positions as needed.

[0044] In the context of this disclosure, when a layer / component is referred to as being "above" another layer / component, that layer / component may be directly above the other layer / component, or there may be an intermediate layer / component between them. Additionally, if a layer / component is "above" another layer / component in one orientation, then when the orientation is reversed, that layer / component may be "below" the other layer / component. In the context of this disclosure, similar or identical components may be denoted by the same or similar reference numerals.

[0045] To better understand the above technical solutions, the following will describe the above technical solutions in detail with reference to specific implementation methods. It should be understood that the embodiments of this disclosure and the specific features in the embodiments are detailed descriptions of the technical solutions of the present invention, rather than limitations on the technical solutions of the present invention. In the absence of conflict, the embodiments of the present invention and the technical features in the embodiments can be combined with each other.

[0046] Figure 1 This is a flowchart illustrating an automated data erasure method based on resource scheduling provided in an embodiment of the present invention, as shown below. Figure 1 As shown, this automated data erasure method based on resource scheduling includes the following steps:

[0047] S1. Connect to the configuration management database to obtain the asset status of storage resources, determine whether the storage resources need to be reviewed for data erasure based on the data erasure rules, and confirm the storage resources to be taken offline.

[0048] In this embodiment of the invention, the storage resources include two types: storage clusters and independent storage resources (hosts). The data erasure methods are also different for different types of storage resources.

[0049] This invention can obtain the asset status of storage resources by interfacing with the Configuration Management Database (CMDB). (See attached document.) Figure 2-3 As shown, Figure 2 This is a schematic diagram illustrating the asset status of independent storage resources. Figure 3 This is a reference diagram of the asset status of a storage cluster. The asset status of the storage resources can be, for example, pending review, pending erasure, in the process of erasure, pending verification, passed, or no erasure required.

[0050] This invention provides an embodiment of the invention that determines whether the storage resource needs to undergo data erasure review based on data erasure rules. The data erasure rules can be predefined and built into the system. The data erasure rules can be defined according to actual application needs, such as based on parameters such as the service life of the storage resource, storage capacity, and number of erasures or maintenance. This invention does not impose any restrictions on this.

[0051] After determining that the storage resource requires data erasure review based on data erasure rules, security maintenance personnel or business maintenance teams will conduct a data erasure review of the storage resource to determine whether further data erasure operations are necessary. (See [link to relevant documentation]). Figure 4 The diagram shown is a reference illustration of the review interface. If the review is passed, the asset status of the storage resource will change from pending review to pending erasure, and it will enter the data erasure task flow. If the review is not passed, it can be assumed that the current storage resource does not need to be erased, and the instance can be released and / or the device can be recycled directly.

[0052] S2. Perform basic storage medium attribute tests on the storage resources to be taken offline that have passed the data erasure review, and initiate the data erasure operation;

[0053] In this embodiment of the invention, the storage medium basic attribute test is used to detect the type of the storage resource to be taken offline and determine whether the storage resource to be taken offline is a storage cluster or an independent storage resource. Since different types of storage resources are subject to different data erasure operations, this embodiment of the invention first determines the type of the storage resource to be taken offline through the storage medium basic attribute test, and then performs the corresponding data erasure operations for the storage cluster and the independent storage resource respectively.

[0054] This embodiment of the invention performs basic storage medium attribute testing on the storage resources to be taken offline that have passed the data erasure review, and initiates the data erasure operation, including: performing basic storage medium attribute testing on the storage resources to be taken offline that have passed the data erasure review to determine whether the storage resources to be taken offline are storage clusters or independent storage resources; if the storage resources to be taken offline are determined to be storage clusters, then the storage resources are controlled to stop service and the instances are released, an overwrite instance allocation scheme is generated, and data erasure instances are created in batches according to the overwrite instance allocation scheme, and the data erasure operation is initiated on the data erasure instances; if the storage resources to be taken offline are determined to be independent storage resources, the data erasure operation is initiated on the independent storage resources.

[0055] When a large-capacity storage cluster is taken offline, this embodiment of the invention employs a scheme of batch creating virtual machines, allocating storage resources, and simultaneously overwriting the data. However, it is necessary to consider both erasure efficiency and computational resource costs, involving many influencing factors such as cluster throughput performance, single-disk throughput performance, host machine computational resource bandwidth, bandwidth of different specifications of computational resources, and the upper limit of the number of virtual machines. In order to achieve optimal utilization of host machine resources while ensuring the maximum throughput of the cluster, and to minimize time and computational resource costs, this embodiment of the invention needs to calculate the matching degree of each instance specification to generate an overwrite instance allocation scheme.

[0056] In this embodiment of the invention, controlling the storage resources to stop service and release instances, and generating an overwrite instance allocation scheme includes: determining the initial number of instances, calculating the matching degree of each instance specification; sorting the matching degrees of each instance specification, selecting the instance specification with the highest matching degree, determining the corresponding specification instance allocated from the host machine, and generating an overwrite instance allocation scheme.

[0057] In this embodiment of the invention, the instance specifications include, but are not limited to, the core (C), memory (M), and bandwidth (B) of the storage resources; for example, in one embodiment of the invention there are 5 instance specifications: instance specification ① 2C2G-1.5Gbps, instance specification ② 4C8G-2Gbps, instance specification ③ 8C16G-3Gbps, instance specification ④ 8C32G-4Gbps, and instance specification ⑤ 16C32G-6Gbps.

[0058] The parameter values ​​of the storage cluster are shown in Table 1 below for reference:

[0059] Table 1 Parameter values ​​for the storage cluster

[0060]

[0061]

[0062] In this embodiment of the invention, the initial number of instances is determined to be min(3000 / 300,20) = 10. The matching degree of the aforementioned 5 instance specifications is calculated as min(b / t,t / b) = min(1500 / 300,300 / 1500) = 1 / 5; 3 / 20; 1 / 10; 3 / 40; 1 / 20. The matching degree of each instance specification is sorted, and the instance specification with the highest matching degree of 1 / 5 is selected as instance specification ①2C2G-1.5Gbps. Instances of the corresponding specification are allocated from the host machine. Since the selected instance specification occupies less resources, 10 2C2G instances can be directly allocated on the same host machine. Since the total demand of the host machine is not exceeded, the generated overwrite instance allocation scheme is to allocate 10 2C2G instances on the same host machine, and each instance is allocated 10T of space.

[0063] In other embodiments of the present invention, it is also necessary to determine whether the total host machine requirement exceeds the limit. In this embodiment of the present invention, determining the corresponding specification instance allocated from the host machine includes: when the host machine is overloaded with the allocation of the corresponding specification instance, adding a new host machine; if the total number of host machines reaches the maximum, reducing the number of instances or selecting the instance specification with the highest matching degree, until the host machine meets the requirement of allocating the corresponding specification instance.

[0064] S3. Perform basic information detection on the storage resources to be taken offline, generate a data erasure script, execute the data erasure script to perform data erasure tasks, release the instance or reclaim the device of the storage resources after the data erasure operation is completed, and simultaneously update the asset status corresponding to the storage resources in the configuration management database.

[0065] After the data erasure review, the data erasure task flow begins. Operations personnel confirm the basic information of the storage resources to be taken offline and the disks to be erased before initiating automated execution and monitoring. (See [link]). Figure 5 The diagram shown is a reference illustration of the interface for performing a data erasure task. In this embodiment of the invention, the basic information detection of the storage resource to be decommissioned includes: performing hard disk status detection and throughput performance testing on the storage resource to be decommissioned; when performing hard disk status detection, detecting the mounting status of the storage resource to be decommissioned and whether the directory has been cleared; when performing throughput performance testing, batch detecting the data overwrite speed of different block sizes on the storage resource to be decommissioned, and confirming the optimal block size.

[0066] The embodiments of the present invention further include: during the execution of the data erasure script to perform the data erasure task, monitoring the execution status of the data erasure task in real time, and generating a data erasure script log.

[0067] In order to improve the stability and controllability of the data erasure task and ensure that the task can continue to be executed even in case of emergencies, the present invention will monitor the execution status of the data erasure task in real time and store the process status of executing the data erasure script in the form of a log, namely the data erasure script log. The data erasure script log records the content including but not limited to the erasure speed and overall progress of the data erasure task.

[0068] Accordingly, embodiments of the present invention further include: when the data erasure task performed by the data erasure script is interrupted, obtaining the data erasure script log and restarting the data erasure task according to the interruption progress; thereby, in the event of an emergency, the interruption progress can be obtained based on the data erasure script log, and the data erasure task can be restarted according to the interruption progress, which greatly improves the stability and efficiency of the data erasure task.

[0069] After completing the data erasure task, this embodiment of the invention will perform a second review on the storage resources to be taken offline. This second review can be conducted manually or using a large model trained on historical data. If the second review passes, the asset status of the storage resources to be taken offline will change to "passed". Then, this invention will further perform resource offline operations on storage resources with an asset status of "passed" and no need for erasure, releasing instances and / or recycling devices. If the second review fails or the asset status of the storage resources to be taken offline is not "passed" and no need for erasure, the resource offline operation will be prohibited to avoid affecting the normal function of the storage resources and causing economic losses, thus ensuring the overall security and stability of the system.

[0070] To ensure controllability of all processes in the data erasure task, this embodiment of the invention further includes, in execution step S1, generating a list of storage resource devices corresponding to the storage resources to be taken offline after confirming the storage resources to be taken offline; in execution step S3, this embodiment of the invention generates a data erasure script log corresponding to the data erasure task; after releasing the instance or recycling the device of the storage resource after the data erasure operation is completed, material archiving is performed to generate a standard recycling process record, which can be used as a reference for subsequent recycling operations or for datasets used for large model training, etc.; and after the storage resource is taken offline, the asset status corresponding to the storage resource is synchronously updated in the configuration management database.

[0071] The automated data erasure method based on resource scheduling described in this invention has the following advantages compared to existing technologies:

[0072] 1. Based on the data erasure rules, determine whether the storage resources need to be reviewed for data erasure and confirm the storage resources to be taken offline. At the same time, cooperate with the basic attribute test of the storage medium and the basic information detection. Apply different data erasure methods to different types of storage resources. In the process of executing the data erasure task, there is a verification node, which can cooperate with manual review and secondary verification, greatly improving the efficiency and stability of data erasure.

[0073] 2. Monitor the execution status of the data erasure task in real time, and store the process status of the data erasure task performed by the data erasure script in the form of logs. When the data erasure task performed by the data erasure script is interrupted, obtain the data erasure script logs and restart the data erasure task. This provides the ability to resume erasure from breakpoints (log marking + offset recording) and a multi-dimensional monitoring and alarm system (progress, speed, IO anomaly detection), further improving the stability and efficiency of the data erasure task.

[0074] 3. When the offline scenario is a storage cluster with large storage capacity going offline, this embodiment of the invention generates an overwrite instance allocation scheme by calculating the matching degree of each instance specification, which greatly improves the erasure efficiency of the large-capacity storage cluster and achieves the optimal utilization of host resources while ensuring erasure throughput.

[0075] Based on the above embodiments, as a supplement to the above... Figure 1 The present invention provides an embodiment of an automated data erasure device based on resource scheduling, which implements the method shown. Figure 1 Corresponding to the method embodiments shown, this device can be specifically applied to various electronic devices, see reference. Figure 6 As shown, the automated data erasure device based on resource scheduling includes:

[0076] The erasure review module 100 is used to connect to the configuration management database to obtain the asset status of storage resources, determine whether the storage resources need to be reviewed for data erasure based on the data erasure rules, and confirm the storage resources to be taken offline.

[0077] The attribute detection module 200 is used to perform basic attribute testing on the storage media of the storage resources to be taken offline that have passed the data erasure review, and to initiate the data erasure operation.

[0078] The data erasure module 300 is used to perform basic information detection on the storage resources to be taken offline, generate a data erasure script, execute the data erasure script to perform data erasure tasks, release the instance or reclaim the device of the storage resources after the data erasure operation is completed, and simultaneously update the asset status corresponding to the storage resources in the configuration management database.

[0079] The automated data erasure device based on resource scheduling described in this embodiment can execute the automated data erasure method based on resource scheduling provided in the above embodiments. The automated data erasure device based on resource scheduling has the corresponding functional steps and beneficial effects of the automated data erasure method based on resource scheduling described in the above embodiments. For details, please refer to the embodiments of the automated data erasure method based on resource scheduling described above. The embodiments of this invention will not be repeated here.

[0080] This invention also provides an electronic device, which may include a processor and a memory, wherein the processor and memory can be connected via a bus or other means. The processor may be a Central Processing Unit (CPU). The processor may also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or combinations thereof. The memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs, non-transitory computer-executable programs, and modules, such as the program instructions / modules corresponding to the resource-scheduling-based automated data erasure method in this invention embodiment. The processor executes various functional applications and data processing by running the non-transitory software programs, instructions, and modules stored in the memory, thereby implementing the resource-scheduling-based automated data erasure method in the above method embodiments.

[0081] The memory may include a program storage area and a data storage area. The program storage area may store the operating system and at least one application program required for a function; the data storage area may store data created by the processor, etc. Furthermore, the memory may include high-speed random access memory and non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. One or more modules are stored in the memory and, when executed by the processor, perform the resource scheduling-based automated data erasure method as described in the above method embodiments. Specific details of the above electronic device can be understood by referring to the corresponding descriptions and effects in the above method embodiments, and will not be repeated here. Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it may include the processes of the embodiments of the above methods. The storage medium may be a read-only memory (ROM), a random access memory (RAM), a flash memory, a hard disk drive (HDD), or a solid-state drive (SSD), etc.; the storage medium may also include a combination of the above types of memory.

[0082] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0083] Similarly, it should be understood that, in order to streamline this disclosure and aid in understanding one or more of the various inventive aspects, in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof. However, this method of disclosure should not be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as reflected in the claims, inventive aspects lie in fewer than all features of a single foregoing disclosed embodiment. Therefore, the claims following the detailed description are hereby expressly incorporated into that detailed description, wherein each claim itself is a separate embodiment of the invention.

[0084] It should be noted that the above embodiments are illustrative of the invention and not restrictive of the invention, and that those skilled in the art can devise alternative embodiments without departing from the scope of the appended claims.

Claims

1. An automated data erasure method based on resource scheduling, characterized in that, The automated data erasure method based on resource scheduling includes: The system connects to the configuration management database to obtain the asset status of storage resources, determines whether the storage resources need to undergo data erasure review based on data erasure rules, and confirms the storage resources to be taken offline. For the storage resources to be taken offline that have passed the data erasure review, perform basic storage medium attribute tests and initiate the data erasure operation; The storage resources to be taken offline are subjected to basic information detection, a data erasure script is generated, the data erasure script is executed to perform the data erasure task, the storage resource instance is released or the device is reclaimed after the data erasure operation is completed, and the asset status corresponding to the storage resource is synchronously updated in the configuration management database.

2. The automated data erasure method based on resource scheduling according to claim 1, characterized in that, The process of performing basic storage medium attribute tests on the storage resources that have passed the data erasure review and initiating the data erasure operation includes: The storage resources to be taken offline that have passed the data erasure review are subjected to basic storage medium attribute tests to determine whether the storage resources to be taken offline are storage clusters or independent storage resources. If it is determined that the storage resource to be taken offline is a storage cluster, then control the storage resource to stop service and release the instance, generate an overwrite instance allocation scheme, and create data erasure instances in batches according to the overwrite instance allocation scheme, and start data erasure operation on the data erasure instances; If it is determined that the storage resource to be taken offline is an independent storage resource, a data erasure operation is initiated on the independent storage resource.

3. The automated data erasure method based on resource scheduling according to claim 2, characterized in that, The step of controlling the storage resource to stop service and release the instance, and generating an overwrite instance allocation scheme includes: Determine the initial number of instances and calculate the matching degree of each instance specification; The matching degree of each instance specification is sorted, the instance specification with the highest matching degree is selected, the corresponding specification instance to be allocated from the host machine is determined, and the overwrite instance allocation scheme is generated.

4. The automated data erasure method based on resource scheduling according to claim 3, characterized in that, The process of determining the corresponding specification instance allocated from the host machine includes: when the host machine is overloaded with the corresponding specification instance allocation, adding a new host machine; if the total number of host machines reaches the maximum, reducing the number of instances or selecting the instance specification with the highest matching degree, until the host machine meets the requirement of allocating the corresponding specification instance.

5. The automated data erasure method based on resource scheduling according to claim 1, characterized in that, The basic information detection of the storage resources to be taken offline includes: Perform hard disk status detection and throughput performance testing on the storage resources to be taken offline; When performing hard disk status detection, check the mount status of the storage resources to be taken offline and whether the directory has been cleared; When performing throughput performance tests, the data overwrite speed of different block sizes on the storage resources to be taken offline is tested in batches, and the optimal block size is confirmed.

6. The automated data erasure method based on resource scheduling according to claim 1, characterized in that, The method further includes: during the execution of the data erasure script to perform the data erasure task, monitoring the execution status of the data erasure task in real time, and generating a data erasure script log.

7. The automated data erasure method based on resource scheduling according to claim 6, characterized in that, The method further includes: when the data erasure task performed by the data erasure script is interrupted, obtaining the data erasure script log and restarting the data erasure task according to the interruption progress.

8. An automated data erasure device based on resource scheduling, applied to the method described in any one of claims 1-7, characterized in that, The automated data erasure device based on resource scheduling includes: The erase review module is used to connect to the configuration management database to obtain the asset status of storage resources, determine whether the storage resources need to be reviewed for data erasure based on the data erasure rules, and confirm the storage resources to be taken offline. The attribute detection module is used to perform basic storage medium attribute tests on the storage resources to be taken offline that have passed the data erasure review, and to initiate the data erasure operation. The data erasure module is used to perform basic information detection on the storage resources to be taken offline, generate a data erasure script, execute the data erasure script to perform data erasure tasks, release the instance or reclaim the device of the storage resource after the data erasure operation is completed, and simultaneously update the asset status corresponding to the storage resource in the configuration management database.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer program instructions that are loaded and executed by a processor to perform the operations described in any one of claims 1-7.

10. An electronic device comprising a processor and a memory, characterized in that, The memory stores computer program instructions that can be executed by the processor, and when the processor executes the computer program instructions, it implements the instructions of the method as described in any one of claims 1-7.

Images