A Disk Protection System Based on Write Filter Technology

Abstract

The present invention provides a disk protection system based on write filtering technology, which includes an application layer, a support library, a driver layer, and an overlay layer sequentially connected from top to bottom, and the driver layer is respectively connected to the protected disk by communication. Partition and configuration information library, the application layer is the interface for the user to operate and manage the protection system, the support library is the encapsulation of the application layer, and the driver layer is used to map the write filter data to the disk To the overlay layer and for the selection and maintenance of the overlay layer, the overlay layer is used to store write filtering data, the driver layer uses the driver device of Windows Disk Filtering, and a device is created in the driver layer " Iped Device". The invention can realize the disk partition protection function on the Windows XP and Windows 7 operating systems, and at the same time solve the problem of being limited by the size of the physical memory.

Description

【Technical field】 [0001] The invention relates to a system data protection and disk data protection technology of a Windows operating system. 【Background technique】 [0002] In the current network environment, there are many viruses and Trojan horses, and if you are not careful, the system will be paralyzed, or important data will be leaked. And in some applications, users hope that after installing the system and application software, the system can always be in a stable system environment, long-term use without generating a lot of junk files over time, causing the system to become slow , and even allow viruses and Trojan horses to take advantage of them, causing system paralysis or leakage of important secrets, and the resulting losses are immeasurable. Microsoft's EWF memory protection function can prevent users from modifying the protected partition and prevent data from being tampered with. After restarting the system, all modifications in the protected partition will ...

AI Technical Summary

Problems solved by technology

[0003] 1. EWF (a protection system used to protect volumes from writing) memory protection will take up a lot of physical memory, and long-term complex use will cause memory exhaustion and crash;

[0004] 2. Because EWF caches all the modifications to the protected partition in the physical memory, limited by the size of the physical memory, it cannot store larger files, such as video files, drawing files, etc.;

[0005] 3. There are only versions on Windows XP Embedded and Windows Embedded Standard 7 operating systems, and no versions running on Windows XP and Windows 7 operating systems are provided

Images