System for secure erasing of files

Abstract

The subject application is directed to a system and method for the secure and correct deletion of data files from a data storage that bypasses the file system of an operating system. A secure erase service receives a request from a system interceptor, which has intercepted a system call from an application. The interceptor component communicates with the secure erase service via an interprocess communication module. The erase service receives the erase request from the communication module and communicates the erase request to a secure erase library. Using the file information within the secure erase request, the secure erase library queries the file system of the data storage device to determine the location of data blocks containing the data for deletion. Upon locating the data blocks, the secure erase library then instructs the device driver, via a virtual file system, to overwrite the data blocks a predetermined number of times.

1 . A system for secure erasing of data files while bypassing the file system of an operating system comprising: 
 means adapted to receive a secure erase signal representative of a desired erasure of a selected electronic file stored in a non-volatile memory;    means adapted to communicate data to an associated data storage, the data storage including,    means adapted to store data in a selected plurality of data storage segments,    means adapted to receive data for storage in the data storage segments,    file system means, the file system means including means for storing tracking data representative of at least one data storage segment which is used to store data associated with each of a plurality of data records,    means adapted to receive a tracking data query representative of tracking data associated with the selected electronic file, and    means adapted to output tracking data associated with the selected electronic file in accordance with the received tracking data query;    means adapted to communicate a tracking data query to the data storage in accordance with a received, secure erase signal;    means adapted to receive tracking data representative of each data segment from the file system means; and    secure erase initiation means adapted for initiating a high-priority data write operation of selected overwrite data to each data storage segment associated with the selected electronic file.    
   
   
       2 . The system for secure erasing of data files while bypassing the file system of  claim 1  wherein the associated data storage is comprised of a non-volatile memory.  
   
   
       3 . The system for secure erasing of data files while bypassing the file system of  claim 2  wherein the associated data storage is further comprised of a magnetic data storage medium.  
   
   
       4 . The system for secure erasing of data files while bypassing the file system of  claim 3  wherein the associated data storage is further comprised of a hard disk.  
   
   
       5 . The system for secure erasing of data files while bypassing the file system of  claim 4 , further comprising: 
 means adapted to receive the secure erase signal as an intercept of a system erase call to an associated operating system;    means for obtaining program control from an associated, calling process upon receipt of the secure erase signal; and    means for releasing program control after completion of the high-priority data write operation initiated by the secure erase initiation means.    
   
   
       6 . The system for secure erasing of data files while bypassing the file system of  claim 5  wherein the associated operating system is Linux, and wherein the tracking data is contained in a Linux virtual file system.  
   
   
       7 . A method for securing erasing of data files while bypassing the file system, comprising the steps of: 
 receiving a secure erase signal representative of a desired erasure of a selected electronic file stored in a non-volatile memory;    communicating data to an associated data storage, 
 storing in the associated data storage data in a selected plurality of data storage segments,  
 receiving data for storage in the data storage segments,  
 storing, via a file system, tracking data representative of at least one data storage segment which is used to store data associated with the selected electronic file, and  
 outputting tracking data associated with the selected electronic file in accordance with a received tracking data query;  
   communicating a tracking data query to the data storage in accordance with the received secure erase signal;    receiving tracking data representative of each data segment from the file system; and    initiating a high-priority data write operation of selected overwrite data to each data storage segment associated with the selected electronic file.    
   
   
       8 . The method for secure erasing of data files while bypassing the file system of  claim 7  wherein the associated data storage is comprised of a non-volatile memory.  
   
   
       9 . The method for secure erasing of data files while bypassing the file system of  claim 8  wherein the associated data storage is further comprised of a magnetic data storage medium.  
   
   
       10 . The method for secure erasing of data files while bypassing the file system of  claim 9  wherein the associated data storage is further comprised of a hard disk.  
   
   
       11 . The method for secure erasing of data files while bypassing the file system of  claim 10 , further comprising the steps of: 
 receiving the secure erase signal as an intercept of a system erase call to an associated operating system;    obtaining program control from an associated calling process upon receipt of the secure erase signal; and    releasing program control after completion of the high-priority data write operation.    
   
   
       12 . The method for secure erasing of data files while bypassing the file system on an operating system of  claim 11  wherein the associated operating system is Linux, and wherein the tracking data is contained in a Linux virtual file system.  
   
   
       13 . A computer-readable medium of instructions with computer-readable instructions stored thereon for securing erasing of data files while bypassing the file system comprising: 
 instructions for receiving a secure erase signal representative of a desired erasure of a selected electronic file stored in a non-volatile memory;    instructions for communicating data to an associated data storage, 
 instructions for storing in the associated data storage data in a selected plurality of data storage segments,  
 instructions for receiving data for storage in the data storage segments,  
 instructions for storing, via a file system, tracking data representative of at least one data storage segment which is used to store data associated with the selected electronic file, and  
 instructions for outputting tracking data associated with the selected electronic file in accordance with a received tracking data query;  
   instructions for communicating a tracking data query to the data storage in accordance with the received secure erase signal;    instructions for receiving tracking data representative of each data segment from the file system; and    instructions for initiating a high-priority data write operation of selected overwrite data to each data storage segment associated with the selected electronic file.    
   
   
       14 . The computer-readable medium of instructions with computer-readable instructions stored thereon for secure erasing of data files while bypassing the file system of  claim 13  wherein the associated data storage is comprised of a non-volatile memory.  
   
   
       15 . The computer-readable medium of instructions with computer-readable instructions stored thereon for secure erasing of data files while bypassing the file system of  claim 14  wherein the associated data storage is further comprised of a magnetic data storage medium.  
   
   
       16 . The computer-readable medium of instructions with computer-readable instructions stored thereon for secure erasing of data files while bypassing the file system of  claim 15  wherein the associated data storage is further comprised of a hard disk.  
   
   
       17 . The computer-readable medium of instructions with computer-readable instructions stored thereon for secure erasing of data files while bypassing the file system of  claim 16 , further comprising: 
 instructions for receiving the secure erase signal as an intercept of a system erase call to an associated operating system;    instructions for obtaining program control from an associated calling process upon receipt of the secure erase signal; and    instructions for releasing program control after completion of the high-priority data write operation.    
   
   
       18 . The computer-readable medium of instructions with computer-readable instructions stored thereon for secure erasing of data files while bypassing the file system of  claim 17  wherein the associated operating system is Linux, and wherein the tracking data is contained in a Linux virtual file system.  
   
   
       19 . A computer-implemented method for securing erasing of data files while bypassing the file system, comprising the steps of: 
 receiving a secure erase signal representative of a desired erasure of a selected electronic file stored in a non-volatile memory;    communicating data to an associated data storage, 
 storing in the associated data storage data in a selected plurality of data storage segments,  
 receiving data for storage in the data storage segments,  
 storing, via a file system, tracking data representative of at least one data storage segment which is used to store data associated with the selected electronic file, and  
 outputting tracking data associated with the selected electronic file in accordance with a received tracking data query;  
   communicating a tracking data query to the data storage in accordance with the received secure erase signal;    receiving tracking data representative of each data segment from the file system; and    initiating a high-priority data write operation of selected overwrite data to each data storage segment associated with the selected electronic file.    
   
   
       20 . The computer-implemented method for secure erasing of data files while bypassing the file system of  claim 19  wherein the associated data storage is comprised of a non-volatile memory.  
   
   
       21 . The computer-implemented method for secure erasing of data files while bypassing the file system of  claim 20  wherein the associated data storage is further comprised of a magnetic data storage medium.  
   
   
       22 . The computer-implemented method for secure erasing of data files while bypassing the file system of  claim 21  wherein the associated data storage is further comprised of a hard disk.  
   
   
       23 . The computer-implemented method for secure erasing of data files while bypassing the file system of  claim 22 , further comprising the steps of: 
 receiving the secure erase signal as an intercept of a system erase call to an associated operating system;    obtaining program control from an associated calling process upon receipt of the secure erase signal; and    releasing program control after completion of the high-priority data write operation.    
   
   
       24 . The computer-implemented method for secure erasing of data files while bypassing the file system of  claim 23  wherein the associated operating system is Linux, and wherein the tracking data is contained in a Linux virtual file system.