CN1108565C

CN1108565C - Method for solidifying hard-disc document of computer

Info

Publication number: CN1108565C
Application number: CN95110940A
Authority: CN
Inventors: 罗建平; 魏海明; 陈评
Original assignee: Individual
Current assignee: Individual
Priority date: 1995-02-17
Filing date: 1995-02-17
Publication date: 2003-05-14
Anticipated expiration: 2015-02-17
Also published as: CN1142080A

Abstract

The present invention relates to a method for solidifying hard disk files of computers, which is used for preventing damage caused by computer viruses or anthropic factors to computer files. The present invention is characterized in that file names of files to be solidified are moved to the front end of a directory area through the secondary classification of the hard disk files; a chain table composed of solidified file allocation cluster numbers is moved to the front of an FAT table; data which is dispersed in corresponding clusters of the files to be solidified is moved to the front end of a data area; I/O requests of a host computer to a hard disk are monitored, and formatting operation to the hard disk and disk writing operation to occupied areas by silidified files are cancelled. In this way, the solidified files can be prevented from being damaged by viruses, and the remaining space of the hard disk can still execute normal file operation.

Description

Method for solidifying hard-disc document of computer

The present invention relates to the curing of hard disc of computer file, in order to the destruction that prevents that computer virus and human factor from causing computer documents.

Hard disk is the most frequently used data storage medium of computer system.At present to the threat of hard disc data security maximum destruction from computer virus (hereinafter to be referred as virus).For resisting the erosion of virus to computer system, people have developed multiple anti-virus product, can be divided into following two classes by its antiviral mechanism:

1, looks into that virus/system kills the virus

This series products is general all based on such thought: the set of a known viruse of definition, extract virus characteristic in the set, formulate the criterion of viral code thus, computer system is detected according to this standard, the virus that prompting may occur, and under possible situation, remove virus.But the Cohen principle is pointed out: the legitimacy that can not prove one section program code by limited step.This means to find and a kind ofly can detect all viral standards.In addition, can not be recovered by the file major part of virus damage, therefore looking into the virus/system of killing the virus can not guarantee that fixed disk file is not destroyed.

2, hard disk cure system

This series products generally is by cancellation all writing disk manipulations to the hard disk subregion, and this partition data is solidified.Its partitioned file of can guaranteeing to be cured is not destroyed.This series products weak point is that the subregion that is cured can not carry out writing disk manipulation again, causes the compatible relatively poor of system and DOS, and the software systems that need to create temporary file are difficult to normally move at this subregion.Bring very big inconvenience to the user.

The purpose of this invention is to provide a kind of method that is cured at file on the hard disk.This method can guarantee that the file that is cured is not destroyed, and non-consolidation zone can have been guaranteed the compatibility with DOS by the free read/write of user simultaneously.

The present invention carries out secondary classification to hard disc data and handles on the basis of hard disc data classification storage, this hard disc data storage area is divided into six classes such as harddisk main bootsector, subregion boot section, FAT table, FAT backup, directory area and data field, data are carried out depositing with document form of hard disk, the chained list that each file number is formed by filename, file allocation bunch, three parts such as data that are dispersed in each bunch are formed, and they lay respectively at directory area, FAT table, the data field of hard disk.The present invention carries out secondary classification to hard disk and handles, filename to be solidified is moved to the front end of directory area, to treat that curing document distributes bunch chained list of number formation to move to the front end of FAT table, to treat that data that curing document is dispersed in corresponding each bunch move to the front end of data field, on this basis of classification, monitor host is to the I/O request of hard disk, and cancellation is to the format manipulation of hard disk, cancellation is to the writing disk manipulation in the shared zone of curing document, and concrete steps are:

Press earlier follow procedure to the hard disc data secondary classification:

1, the Master boot sector with hard disk is defined as S set o;

2, the boot sector with subregion C is defined as set C1;

3, the file that will solidify moves to the front end of FAT table for pairing bunch number in FAT table, adds several FFF9 subsequently and makes it just in time occupy an integer sector, these sectors is appended to gathers C1;

4, residue sector definition in the FAT table is set C2;

5, the file that will solidify moves to the front end of FAT backup sheet for pairing bunch number in the FAT backup sheet, add subsequently if a FFF9 making it just in time occupy an integer sector, with these sector definition for gathering C3;

6, residue sector definition in the FAT backup sheet is set C4;

7, pairing filename moves to the front end of directory area to the file that will solidify in the directory area, adds several hidden files subsequently and makes it just in time occupy an integer sector, and these sector definition are set C5;

8, the residue sector definition with root directory area is set C6;

9, the file that will solidify pairing sector in the data field moves to the front end of file data, and these sector definition are set C7;

10, the residue sector definition with the data field is set C8;

11, to subregion D, E, F, etc. the secondary classification of Logical Disk, as long as repeat the 2-10 step, set name is respectively D1-D8, E1-E8, F1-F8:

12, calculate the logic sector number that each set stops the sector, put into array IDT successively;

On the basis of above-mentioned secondary classification, monitor host is cancelled the format manipulation of hard disk to the I/O request of hard disk, and writing disk manipulation is carried out following steps:

1, calculates the logic sector number that appointment writes;

2, judge set under this sector according to array IDT;

3, if this sector belongs to S set o, the cancellation write operation returns;

4, if this sector belong to set Cn (or Dn, En, Fn) and n be odd number, the cancellation write operation returns;

5, if this sector belong to set Cn (or Dn, En, Fn) and n be even number, carry out normal write operation.

The method that adopts the present invention to propose to solidifying hard-disc document, owing to only cancel any write operation in the shared zone of file that is cured, the remaining space of hard disk still can free read/write, thereby can guarantee that the file that is cured is not destroyed, make virus and people can't rewrite the file that is cured for maloperation, the remaining space that does not influence again at hard disk simultaneously carries out normal file operation, has guaranteed and the abundant compatibility of DOS system that all kinds of softwares all can normally operation on the hard disk after the curing.Adopt method of the present invention, also can when recovering hard disk normal boot record, the hard disk leader record be solidified, reach thorough removing and guarantee no longer to infect the purpose of boot-type virus.

Below in conjunction with the description of drawings embodiments of the invention.

Fig. 1 is a present embodiment hard disc data classification and storage structural drawing,

Fig. 2 is the hard disc data storage node composition after secondary classification is handled;

Fig. 3 is the process flow diagram that monitors the I/O request.

As shown in Figure 1, if WA is arranged in the hard disk, WB, WC, WD, RA, RB, RC be totally seven files, and FRA1, FRA2, FRA3, FRAE represent file RA in FAT table and FAT backup sheet pairing bunch number, FWA1, FWA2, FWA3, FWA4, FWAE represent file WA in FAT table and FAT backup sheet pairing bunch number, and the rest may be inferred by analogy.DRA1, DRA2, DRA3, DRAE represent that file RA leaves the data in corresponding bunch of file data district in, and DWA1, DWA2, DWA3, DWA4, DWAE represent that file WA leaves the data in corresponding bunch of file data district in, and the rest may be inferred by analogy.

Present embodiment is intended file RA, RB, RC are solidified, at first the data on the hard disk are carried out secondary classification, sorted data ordering as shown in Figure 2, FFF9 makes set C1, C3 just in time occupy an integer sector and the data of filling, and HA, HB, HC, HD make to gather that C5 just in time occupies an integer sector and the filename of filling.Calculate the logic sector number of C1, C2, C3, C4, C5, C6, each set termination sector of C7, C8 respectively, put into array IDT successively.

Hard disc data is being carried out secondary classification, setting up on the basis of array IDT, by the I/O request of monitor host hard disk, cancellation is to the format manipulation of hard disk, cancellation is to the writing disk manipulation in the shared zone of curing document, and the file of guaranteeing to be cured is not rewritten, and its flow process as shown in Figure 3.IDT[1 among the figure] for gathering the termination sector number of C1, IDT[2] be the termination sector number of set C2 ..., IDT[8] and for gathering the termination sector number of C8.

When CPU has the I/O request to hard disk, at first judge whether to be format manipulation, if hard disk resets, return.If not, whether further disconnected is writing disk manipulation, if not, carries out the normal normal hard disk I/O operation of carrying out, and returns.If writing disk manipulation, whether be curing document shared zone, if hard disk resets, return if calculating the sector of writing.If not, carry out the normal normal hard disk I/O operation of carrying out, return.

Claims

1. method for solidifying hard-disc document of computer is characterized in that on the basis of hard disc data classification and storage, presses earlier follow procedure to the hard disc data secondary classification:

1). the Master boot sector of hard disk is defined as set (S0);

2). the boot sector of subregion (C) is defined as set (C1);

3). the file that will solidify moves to the front end of FAT table for pairing bunch number in FAT table, add several FFF9 subsequently, makes it just in time occupy an integer sector, and these sectors are appended to set (C1);

4). residue sector definition in the FAT table is set (C2);

5). the file that will solidify moves to the front end of FAT backup sheet for pairing bunch number in the FAT backup sheet, add subsequently if thousand FFF9 making it just in time occupy an integer sector, with these sector definition for gathering (C3);

6). residue sector definition in the FAT backup sheet is set (C4);

7). pairing filename moves to the front end of directory area to the file that will solidify in the directory area, adds several hidden files subsequently and makes it just in time occupy an integer sector, and these sector definition are set (C5);

8). with the residue sector definition of directory area is (C6);

9). the file that will solidify pairing sector in the data field moves to the front end of file data, and these sector definition are set (C7);

10). the residue sector definition of data field is set (C8);

11). to subregion (D), (E), the secondary classification of Logical Disk such as (F) is as long as repeat

2)-10) step, set name is respectively (D1)-(D8), (E1)-(E8), (F1)-(F8);

12). calculate the logic sector number that each set stops the sector, put into array (IDT) successively;

On above-mentioned secondary classification basis, monitor host is cancelled the format manipulation of hard disk to the I/O request of hard disk, and write operation is carried out following steps:

(1). calculate and specify the logic sector number that writes;

(2). judge the set that this sector is affiliated according to array (IDT);

(3). if this sector belongs to set (S0), the cancellation write operation returns;

(4). if this sector belongs to set (Cn) or (Dn), (En), (Fn) and n be odd number, cancel write operation, return;

(5). if this sector belongs to set (Cn) or (Dn), (En), (Fn) and n be even number, carry out normal write operation.