Digital data sanitization

Patent metadata

Field	Value
Publication number	US-9830089-B1
Application number	US-201414314014-A
Country	US
Kind code	B1
Filing date	Jun 24, 2014
Priority date	Jun 25, 2013
Publication date	Nov 28, 2017
Grant date	Nov 28, 2017

Abstract

Digital data sanitization is disclosed. An indication that a data sanitization process should be performed is received. The data sanitization process is performed. Performing the data sanitization process includes determining an amount of free space on a storage device. Performing the data sanitization process further includes performing a set of one or more write operations, where performing the write operations decreases the amount of free space on the storage of the device.

First claim

What is claimed is:

1. A system, comprising:
a processor configured to:
receive an indication that a data sanitization process should be performed; and
perform the data sanitization process, wherein performing the data sanitization process includes:
determining an amount of space on a first storage to be sanitized, wherein the space includes at least one recently deleted file;
creating a first file, wherein a size of the first file is proportional to an aggressiveness setting of the data sanitation process;
writing the first file to the first storage one or more times, until an amount of available space on the first storage decreases to a threshold amount, to sanitize the space on the first storage;
providing an error to the processor indicating there is insufficient space to perform an additional write operation when the amount of available space on the first storage decreases to the threshold amount; and
deleting the one or more first files from the first storage to make the space available for storage; and

a non-transitory memory coupled to the processor and configured to provide the processor with instructions.

2. The system of claim 1 wherein the first file is a temporary file of a size that is less than the amount of space to be sanitized.

3. The system of claim 2 , wherein the processor is configured to create one or more copies of the temporary file when writing the first file to the space on the first storage to be sanitized.

4. The system of claim 2 wherein the processor is configured to select a size of the first temporary file based at least in part on the amount of space to be sanitized.

5. The system of claim 2 wherein creating the temporary file includes generating random characters and saving them into the temporary file.

6. The system of claim 1 wherein the indication is received from an application.

7. The system of claim 6 wherein the indication is received when the application is started.

8. The system of claim 1 wherein the processor is further configured to receive the aggressiveness setting associated with performing the data sanitization process.

9. The system of claim 8 wherein the processor is further configured to perform the data sanitization process more frequently based at least in part on the received aggressiveness setting.

10. The system of claim 8 wherein the aggressiveness setting is automatically adjusted in response to a change in a system condition.

11. The system of claim 1 wherein the first storage comprises a solid state media.

12. The system of claim 1 wherein the indication is received in response to an elapsing of a predetermined amount of time.

13. The system of claim 1 wherein the indication is received in response to an occurrence of a change in a system condition.

14. The method of claim 1 , wherein creating the first file further comprises: generating the first file by creating a temporary file of a size that is less than the amount of space to be sanitized.

15. The method of claim 14 , further comprising: creating one or more copies of the temporary file when writing the first file to the space on the first storage to be sanitized.

16. A method, comprising:
receiving an indication that a data sanitization process should be performed; and
performing the data sanitization process, wherein performing the data sanitization process includes:
determining an amount of space on a first storage to be sanitized, wherein the space includes at least one recently deleted file;
creating a first file, wherein a size of the first file is proportional to an aggressiveness setting of the data sanitation process;
writing the first file to the first storage one or more times, until an amount of available space on the first storage decreases to a threshold amount, to sanitize the space on the first storage;
providing an error to the processor indicating there is insufficient space to perform an additional write operation when the amount of available space decreases to the threshold amount; and
deleting the one or more first files from the first storage to make the space available for storage.

17. A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
receiving an indication that a data sanitization process should be performed; and
performing the data sanitization process, wherein performing the data sanitization process includes:
determining an amount of space on a first storage to be sanitized, wherein the space includes at least one recently deleted file;
creating a first file, wherein a size of the first file is proportional to an aggressiveness setting of the data sanitation process;
writing the first file to the first storage one or more times, until an amount of available space on the first storage decreases to a threshold amount, to sanitize the space on the first storage;
providing an error to the processor indicating there is insufficient space to perform an additional write operation when the amount of available space decreases to the threshold amount; and
deleting the one or more first files from the first storage to make the space available for storage.

Assignees

• Wickr Inc

Inventors

• Statica Robert
• Howell Christopher A
• Coppa Kara Lynn
• Leavy Thomas Michael

Classifications

• G06F3/0623 Primary

  in relation to content · CPC title

• G06F3/0644

  Management of space entities, e.g. partitions, extents, pools · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F2212/7205

  Cleaning, compaction, garbage collection, erase control · CPC title

• G06F3/067

  Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS] · CPC title