Digital data sanitization

• US 9,830,089 B1
• Filed: 06/24/2014
• Issued: 11/28/2017
• Est. Priority Date: 06/25/2013
• Status: Active Grant

• Current Assignee: Wickr Inc. (Amazon.com, Inc.)
• Original Assignee: Wickr Inc. (Amazon.com, Inc.)
• Inventors: Statica, Robert, Howell, Christopher A., Coppa, Kara Lynn, Leavy, Thomas Michael
• Primary Examiner(s): Boccio, Vincent F
• Application Number:
  US14/314,014
• Time in Patent Office: 1,253 Days
• Field of Search: 707692, 707694
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2212/7205 Cleaning, compaction, garbage collection, erase control
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0644 Management of space entities, e.g. partitions, extents, pools
• CPC Class Codes: G06F 3/0652 Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket
• CPC Class Codes: G06F 3/0655 Vertical data movement, i.e. input-output transfer; data movement between one or more hosts and one or more storage devices
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G06F 3/0673 Single storage device

Abstract

Digital data sanitization is disclosed. An indication that a data sanitization process should be performed is received. The data sanitization process is performed. Performing the data sanitization process includes determining an amount of free space on a storage device. Performing the data sanitization process further includes performing a set of one or more write operations, where performing the write operations decreases the amount of free space on the storage of the device.

Claims

1. A system, comprising:

a processor configured to;

receive an indication that a data sanitization process should be performed; and

perform the data sanitization process, wherein performing the data sanitization process includes;

determining an amount of space on a first storage to be sanitized, wherein the space includes at least one recently deleted file;

creating a first file, wherein a size of the first file is proportional to an aggressiveness setting of the data sanitation process;

writing the first file to the first storage one or more times, until an amount of available space on the first storage decreases to a threshold amount, to sanitize the space on the first storage;

providing an error to the processor indicating there is insufficient space to perform an additional write operation when the amount of available space on the first storage decreases to the threshold amount; and

deleting the one or more first files from the first storage to make the space available for storage; and

a non-transitory memory coupled to the processor and configured to provide the processor with instructions.

2. The system of claim 1 wherein the first file is a temporary file of a size that is less than the amount of space to be sanitized.

3. The system of claim 2, wherein the processor is configured to create one or more copies of the temporary file when writing the first file to the space on the first storage to be sanitized.

4. The system of claim 2 wherein the processor is configured to select a size of the first temporary file based at least in part on the amount of space to be sanitized.

5. The system of claim 2 wherein creating the temporary file includes generating random characters and saving them into the temporary file.

6. The system of claim 1 wherein the indication is received from an application.

7. The system of claim 6 wherein the indication is received when the application is started.

8. The system of claim 1 wherein the processor is further configured to receive the aggressiveness setting associated with performing the data sanitization process.

9. The system of claim 8 wherein the processor is further configured to perform the data sanitization process more frequently based at least in part on the received aggressiveness setting.

10. The system of claim 8 wherein the aggressiveness setting is automatically adjusted in response to a change in a system condition.

11. The system of claim 1 wherein the first storage comprises a solid state media.

12. The system of claim 1 wherein the indication is received in response to an elapsing of a predetermined amount of time.

13. The system of claim 1 wherein the indication is received in response to an occurrence of a change in a system condition.

14. The method of claim 1, wherein creating the first file further comprises:

generating the first file by creating a temporary file of a size that is less than the amount of space to be sanitized.

15. The method of claim 14, further comprising:

creating one or more copies of the temporary file when writing the first file to the space on the first storage to be sanitized.

16. A method, comprising:

receiving an indication that a data sanitization process should be performed; and

performing the data sanitization process, wherein performing the data sanitization process includes;

determining an amount of space on a first storage to be sanitized, wherein the space includes at least one recently deleted file;

creating a first file, wherein a size of the first file is proportional to an aggressiveness setting of the data sanitation process;

writing the first file to the first storage one or more times, until an amount of available space on the first storage decreases to a threshold amount, to sanitize the space on the first storage;

providing an error to the processor indicating there is insufficient space to perform an additional write operation when the amount of available space decreases to the threshold amount; and

deleting the one or more first files from the first storage to make the space available for storage.

17. A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:

receiving an indication that a data sanitization process should be performed; and

performing the data sanitization process, wherein performing the data sanitization process includes;

determining an amount of space on a first storage to be sanitized, wherein the space includes at least one recently deleted file;

creating a first file, wherein a size of the first file is proportional to an aggressiveness setting of the data sanitation process;

writing the first file to the first storage one or more times, until an amount of available space on the first storage decreases to a threshold amount, to sanitize the space on the first storage;

providing an error to the processor indicating there is insufficient space to perform an additional write operation when the amount of available space decreases to the threshold amount; and

deleting the one or more first files from the first storage to make the space available for storage.