Secure Data Scrubbing Utility for File Structure Recovery Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data deletion utilities are not exhaustive enough to ensure secure deletion of data, as simple shredding patterns can be reversed and data reconstructed, leaving storage facilities vulnerable to security breaches.
Innovation Solution
A software utility with a graphical user interface (GUI) that allows users to overwrite data structures multiple times, remove references, rename files, and finally delete them, ensuring utmost security through a four-step processing logic accessible via GUI, command line, or scheduler.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If simple shredding patterns are used for data deletion, then the deletion process is fast and simple, but the data can be reversed and reconstructed, compromising security
Solution Approach 1:
The deletion process is segmented into multiple distinct phases: overwriting phase (with multiple passes using different patterns), reference removal phase (cleaning OS environment, recent lists, shortcuts, registry), and final deletion phase. Each phase addresses specific security concerns independently, making the overall process more reliable without overwhelming complexity.
Solution Approach 2:
Before the final deletion occurs, the system performs preliminary actions including overwriting data multiple times with different patterns (Gutmann pattern, random data, zeros), and removing all references from the operating system environment. These preliminary actions ensure that even if deletion fails, the data cannot be recovered, thus improving security reliability.
2Reliability
If multiple overwriting passes are performed, then data security is improved, but the time required for deletion increases
Solution Approach 1:
The overwriting process uses periodic action by implementing multiple passes with different patterns (first pass with Gutmann pattern, second pass with random data, third pass with zeros). Each pass is a discrete periodic action that systematically eliminates recovery possibilities while maintaining manageable time requirements through automation.
Solution Approach 2:
The system changes parameters during the overwriting process by varying the pattern type in each pass (structured pattern → random pattern → zero pattern). This parameter variation ensures comprehensive security coverage while allowing users to select different numbers of passes based on their security needs and time constraints.
3Reliability
If all references to the file are removed from the operating system environment, then security is improved, but the complexity of the deletion utility increases
Solution Approach 1:
The deletion utility is designed with multi-functionality, handling not only the core deletion task but also automatically managing reference removal from OS environment, recent lists, shortcuts, and registry. This universal approach consolidates multiple security functions into a single utility, improving security without requiring users to manually perform separate reference-cleaning operations.
Solution Approach 2:
The utility performs self-service by automatically identifying and removing all references to the target file from the operating system environment, including recent lists, document shortcuts, and registry entries. This automation eliminates the need for users to manually track and remove references, making the process secure yet simple to use.
Data Source
AI summary
A software method and utility for performing a user-controlled data shredding operation for overwriting an entire file structure inclusive of all black-shaded blocks of data associated with a particular file of interest, then removing all references to the data structure in the operating environment, then renaming the data structure, and finally deleting the data structure. This ensures utmost security of the scrubbed data, plus it gives a user a number of scrubbing options including a one-click scrubbing feature and scheduled scrubbing operations.