Method and apparatus for sanitization of fixed storage devices

• US 6,212,600 B1
• Filed: 01/21/1998
• Issued: 04/03/2001
• Est. Priority Date: 01/21/1998
• Status: Expired due to Fees

• Current Assignee: GigaMedia Access Corp. (Pinion Software Inc.)
• Original Assignee: Infraworks Corporation
• Inventors: Nelson, Jay R., Marshall, David Earl, Friedman, George, Starek, Robert Phillip
• Primary Examiner(s): Yoo, Do
• Assistant Examiner(s): Portka, Gary J.
• Application Number:
  US09/010,262
• Time in Patent Office: 1,168 Days
• Field of Search: 380/3, 380/4, 360/60, 360/48, 711/111, 711/112, 713/2, 713/200, 713/202, 713/193, 705/57
• US Class Current: 711/112
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0652 Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket
• CPC Class Codes: G06F 3/0674 Disk device

Abstract

A method and apparatus are disclosed for sanitization of a fixed storage device interfaced to a computer system. The computer system is booted from a removable storage device that holds a bootable disk operating system and program code that is executed within the disk operating system. The fixed storage device is detected. The writeable space of the fixed storage device is then overwritten with a plurality of overwrite layers. Further, a report can be printed listing information about the sanitization process contemporaneously upon the completion of sanitization. In one embodiment, sanitizing is accomplished using a plurality of patterns, each layer having an associated pattern, to ensure that data can not be recovered even by destructive analysis.

Claims

1. A method for sanitization of a fixed storage device, the fixed storage device interfaced to a computer system, comprising:

booting the computer system from a removable storage device, the removable storage device holding a bootable disk operating system and program code that is executed within the bootable disk operating system;

taking control of the computer system by the bootable disk operating system,

detecting the fixed storage device interfaced to the computer system; and

overwriting writeable space of the fixed storage device with a plurality of overwrite layers;

wherein overwriting is accomplished using a plurality of patterns, each layer having an associated pattern, to ensure that data can not be recovered even by destructive analysis; and

wherein sanitizing comprises;

addressing a last set of allocations on the fixed storage device;

writing a current overwrite pattern to the addressed set of allocations;

checking whether a write error occurred and, if so, adding the error to a list;

reading data from the addressed set of allocations and comparing the data with expected data;

if any of the data read is not accurate, adding bad sectors to a list of bad sectors;

checking whether there are more allocations to be overwritten and, if so, addressing the next set of allocations and repeating writing, checking, reading and adding at the next set of allocations; and

if there are no more allocations for a current overwrite layer, checking whether there are more overwrite layers to be performed and, if so, repeating writing, checking, reading, adding and checking.

2. The method of claim 1, further comprising printing a report listing information about the sanitization process contemporaneously upon the completion of sanitization.

3. The method of claim 2, wherein the information includes who performed the sanitization, what device was sanitized, when the device was sanitized, and a list of any errors or bad sectors.

4. The method of claim 1, wherein the fixed storage device is a hard disk drive that is correctly interfaced to the computer system by being setup in system BIOS.

5. The method of claim 1, wherein the removable storage device is a floppy disk in the A:

drive of the computer system.

6. The method of claim 4, wherein detecting is accomplished through system BIOS.

7. The method of claim 1, wherein detecting comprises:

querying system BIOS for the number of the fixed storage device;

querying the fixed storage device identified by the system BIOS;

calculating a physical size of the fixed storage device; and

mapping the fixed storage device into logical allocations.

8. The method of claim 1, further comprising setting parameters for sanitizing the detected fixed storage device.

9. The method of claim 8, wherein the parameters comprise how many overwrite layers and which overwrite patterns to use in each layer.

10. The method of claim 8, wherein setting parameters is skipped once the parameters have been set.

11. The method of claim 8, wherein setting parameters is allowed only after secure access.

12. A method for sanitization of a fixed storage device, the fixed storage device interfaced to a computer system, comprising:

booting the computer system from a removable storage device, the removable storage device holding a bootable disk operating system and program code that is executed within the bootable disk operating system;

taking control of the computer system by the bootable disk operating system,

detecting the fixed storage device interfaced to the computer system; and

overwriting writeable space of the fixed storage device with a plurality of overwrite layers;

wherein sanitizing comprises;

addressing a last set of allocations on the fixed storage device;

writing a current overwrite pattern to the addressed set of allocations;

checking whether a write error occurred and, if so, adding the error to a list;

reading data from the addressed set of allocations and comparing the data with expected data;

if any of the data read is not accurate, adding bad sectors to a list of bad sectors;

checking whether there are more allocations to be overwritten and, if so, addressing the next set of allocations and repeating writing, checking, reading and adding at the next set of allocations; and

if there are no more allocations for a current overwrite layer, checking whether there are more overwrite layers to be performed and, if so, repeating writing, checking, reading, adding and checking.

13. The method of claim 12, wherein overwriting is accomplished using a plurality of patterns, each layer having an associated pattern, to ensure that data can not be recovered even by destructive analysis.

14. The method of claim 12, further comprising printing a report listing information about the sanitization process contemporaneously upon the completion of sanitization.

15. The method of claim 14, wherein the information includes who performed the sanitization, what device was sanitized, when the device was sanitized, and a list of any errors or bad sectors.

16. The method of claim 12, wherein the fixed storage device is a hard disk driver that is correctly interfaced to the computer system by being setup in system BIOS.

17. The method of claim 12, wherein the removable storage device is a floppy disk in the A:

drive of the computer system.

18. The method of claim 16, wherein detecting is accomplished through system BIOS.

19. The method of claim 12, wherein detecting comprises:

querying system BIOS for the number of the fixed storage device;

querying the fixed storage device identified by the system BIOS;

calculating a physical size of the fixed storage device; and

mapping the fixed storage device into logical allocations.

20. The method of claim 12, further comprising setting parameters for sanitizing the detected fixed storage device.

21. The method of claim 20, wherein the parameters comprise how many overwrite layers and which overwrite patterns to use in each layer.

22. The method of claim 20, wherein setting parameters is skipped once the parameters have been set.

23. The method of claim 20, wherein setting parameters is allowed only after secure access.