Auditable Data Wipe Traces on Storage Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods lack the ability to audit data wipes on computing devices, storage devices, and memory, making it difficult to verify if data has been successfully erased and to track data wipe operations.
Innovation Solution
An apparatus and method that includes a processor and memory to perform overwrite operations on a storage device, generate auditable traces of the data wipe, and write these traces to the storage device, allowing for verification and tracking of data wipe operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data wipe operations are performed on storage devices, then data security is improved, but the ability to verify and audit the wipe operations is lost
Solution Approach 1:
The patent applies preliminary action by creating auditable traces before the data wipe operation completes. The system generates metadata records documenting the wipe process parameters, scope, and results while the operation is in progress, ensuring verification capability is established before the original data is completely destroyed. This allows post-wipe auditing without requiring the original data to still exist.
Solution Approach 2:
The patent implements copying by creating a copy of the audit information in a separate metadata structure. Instead of attempting to preserve the original data for auditing purposes, the system generates a duplicate record of the wipe operation's essential characteristics (parameters, scope, results) that can be independently verified. This metadata copy serves as the audit trail while the original data undergoes complete destruction.
2Reliability
If multiple overwrite operations are performed to ensure complete data erasure, then data security is improved, but the time required for the wipe operation increases
Solution Approach 1:
The patent applies feedback by implementing verification mechanisms that check the results of each overwrite operation. The system performs validation to confirm data has been successfully erased before proceeding to additional overwrite passes. This feedback loop prevents unnecessary repeated operations when the wipe is already complete, reducing overall time while maintaining security. The metadata records track which operations were necessary and which could be skipped.
Solution Approach 2:
The patent implements partial action by performing only the necessary number of overwrite operations based on security requirements and verification results. Instead of always executing a fixed number of excessive overwrite passes, the system adapts the number of operations to the actual need, using verification to determine when sufficient erasure has been achieved. This reduces time consumption while maintaining the required level of data security.
3Measurement precision
If auditable traces are written to the storage device, then verification capability is improved, but the storage space required is increased
Solution Approach 1:
The patent applies local quality by storing auditable traces in a dedicated metadata area rather than distributing audit information throughout the entire storage device. The metadata is confined to specific reserved spaces or designated regions, leaving the majority of storage capacity available for user data. This localized approach provides comprehensive audit verification while minimizing the impact on overall storage space.
Solution Approach 2:
The patent implements parameter changes by optimizing the metadata structure to store only essential audit information at appropriate levels of detail. Instead of recording every single operation with maximum precision, the system adjusts the granularity and completeness of metadata records based on verification needs, storing sufficient information for audit purposes while minimizing storage consumption. This selective parameter optimization balances verification accuracy with space efficiency.
Data Source
AI summary
Methods, systems, apparatus, and program products that can write auditable traces of a data wipe to a storage device are disclosed herein. One method includes performing, by a processor, a set of overwrite operations of a data wipe on a storage device, generating a set of auditable traces for the data wipe, and writing the set of auditable traces to the storage device. Systems, apparatus, and computer program products that include hardware and/or software that can perform the methods for writing auditable traces of a data wipe to a storage device are also disclosed herein.