CN114547710A - Remote data erasing method, apparatus and medium - Google Patents
Remote data erasing method, apparatus and medium Download PDFInfo
- Publication number
- CN114547710A CN114547710A CN202210436326.3A CN202210436326A CN114547710A CN 114547710 A CN114547710 A CN 114547710A CN 202210436326 A CN202210436326 A CN 202210436326A CN 114547710 A CN114547710 A CN 114547710A
- Authority
- CN
- China
- Prior art keywords
- data
- storage
- enterprise application
- remote data
- erasing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a remote data erasing method, equipment and a medium, wherein the method comprises the following steps: receiving storage data sent by enterprise applications in each terminal device, wherein the storage data at least comprises registration information, data files and file information; according to the registration information, the background server allocates a unique background data storage space for the enterprise application on each terminal device, and the background data storage space is used for storing storage data transmitted by the enterprise application transmitted through a virtual data channel; after a forbidden request of the enterprise application is received, a remote data erasing instruction is generated according to the forbidden request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to the registration information; and erasing the stored data corresponding to the registration information according to the remote data erasing instruction. The invention improves the data storage safety of the terminal equipment.
Description
Technical Field
The present invention relates to the field of communications technologies, and in particular, to a method, device, and medium for remote data erasure.
Background
With the popularization of mobile devices and the development of mobile internet, more and more services are migrating to the mobile devices, and more users choose to work with their mobile devices. However, the high mobility of the mobile device also brings many security problems, for example, in the case of personnel leaving the work, work moving, or the mobile device being lost, the data stored on the original mobile device cannot be erased, which may result in leakage of the data. In the existing scheme, data generated by the enterprise application on the mobile device is stored in a self-contained memory of the mobile device, such as a mobile phone, that is, when the enterprise application is installed on the mobile device, the mobile device provides a storage space for the enterprise application, and the storage space stores two things, namely an identifier of the enterprise application and data generated in the installation and operation processes of the enterprise application, which are easily leaked.
Disclosure of Invention
The invention mainly aims to provide a remote data erasing method, equipment and a medium, aiming at solving the problem of how to realize the storage safety of terminal equipment data.
In order to achieve the above object, the present invention provides a remote data erasing method, which includes the following steps:
receiving storage data sent by enterprise applications in each terminal device, wherein the storage data at least comprises registration information, data files and file information;
according to the registration information, the background server allocates a unique background data storage space for the enterprise application on each terminal device, and the background data storage space is used for storing storage data transmitted by the enterprise application transmitted through a virtual data channel;
after a forbidden request of the enterprise application is received, a remote data erasing instruction is generated according to the forbidden request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to the registration information;
and erasing the stored data corresponding to the registration information according to the remote data erasing instruction.
In an embodiment, the step of erasing the stored data corresponding to the registration information according to the remote data erasing instruction includes:
determining the storage position of the storage data in the background data storage space according to the storage identification code;
and if the registration information of the storage data in the storage position is matched with the target identification, erasing the storage data in the storage position.
In an embodiment, the step of determining the storage location of the storage data in the background data storage space according to the storage identification code further includes:
the background server comprises a distributed storage system, the distributed storage system comprises a plurality of storage devices, the plurality of storage devices jointly form the background data storage space, and the background data storage space is subjected to fragmentation screening according to a preset distributed storage rule to determine a target storage space;
acquiring a plurality of registration information corresponding to the enterprise application in a target storage space;
and comparing the storage identification code with each piece of registration information, and determining the specific actual position of the storage data corresponding to the remote data erasing instruction in the background data storage space according to the comparison result.
In an embodiment, after the step of erasing the stored data corresponding to the registration information according to the remote data erasing instruction, the method further includes:
after data erasure is carried out, receiving a feedback remote data erasure result; and/or
And sending information that the storage data generated by the enterprise application is erased to the terminal equipment so as to prohibit the terminal equipment from using the storage data of the enterprise application.
In order to achieve the above object, the present invention further provides a remote data erasing method, applied to a terminal device, where the remote data erasing method includes:
the method comprises the steps that a virtual file system module is installed on the terminal equipment in advance, and the virtual file system module is implanted into enterprise application and used for providing a virtual data channel, wherein the virtual file system module is a middleware;
after receiving an operation instruction of an enterprise application, controlling the virtual file system module to generate a virtual data channel between the enterprise application and a background server;
acquiring storage data of the enterprise application, wherein the storage data at least comprises registration information, data files and file information;
and sending the storage data to the background server according to the virtual data channel so that the background server receives the storage data of the enterprise application sent by the terminal equipment, storing the storage data in the background data storage space according to the registration information, generating a remote data erasing instruction according to the disabling request after receiving the disabling request of the enterprise application, and erasing the storage data corresponding to the registration information according to the remote data erasing instruction.
In an embodiment, before the step of controlling the virtual file system module to generate the virtual data channel between the enterprise application and the backend server, the method further includes:
acquiring an installation program of the enterprise application, and determining an installation storage space of the installation program on the terminal equipment, wherein the installation storage space corresponds to an address identification code on the terminal equipment;
and installing the enterprise application to the terminal equipment according to the address identification code, wherein the address identification code is associated with the virtual data channel, and the virtual data channel is connected with the enterprise application and used for linking and transmitting the stored data.
In an embodiment, before the step of installing the enterprise application to the terminal device according to the installation storage space, the method further includes:
disabling an identification blocking function of the terminal device;
after the step of installing the enterprise application to the terminal device according to the installation storage space, the method further includes:
and restoring the identification blocking function of the terminal equipment.
In one embodiment, the enterprise application is loaded and run in the terminal device in a secure sandbox.
To achieve the above object, the present invention further provides a remote data erasing apparatus comprising a memory, a processor and a remote data erasing program stored in the memory and executable on the processor, the remote data erasing program, when executed by the processor, implementing the steps of the remote data erasing method as described above.
To achieve the above object, the present invention also provides a computer readable storage medium storing a remote data erasing program which, when executed by a processor, implements the steps of the remote data erasing method as described above.
The invention provides a remote data erasing method, equipment and a medium, which are used for receiving storage data sent by enterprise application in each terminal device, wherein the storage data at least comprises registration information, data files and file information; according to the registration information, the background server side allocates a unique background data storage space for the enterprise application on each terminal device, and the background data storage space is used for storing storage data transmitted by the enterprise application and transmitted through the virtual data channel; after a disabling request of enterprise application is received, a remote data erasing instruction is generated according to the disabling request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to registration information; and erasing the stored data corresponding to the registration information according to the remote data erasing instruction. The storage data stored in the background data storage space of the terminal equipment is remotely erased through the remote data erasing instruction, so that the condition of insufficient memory of the terminal equipment is avoided, and meanwhile, the data storage safety of the terminal equipment is improved.
Drawings
Fig. 1 is a schematic hardware configuration diagram of a remote data erasing apparatus according to an embodiment of the present invention;
FIG. 2 is a flowchart illustrating a remote data erasing method according to a first embodiment of the present invention;
FIG. 3 is a schematic diagram of a display interface of a background service terminal according to the remote data erasing method of the present invention;
FIG. 4 is a flowchart illustrating a remote data erasing method according to a second embodiment of the present invention;
fig. 5 is a schematic diagram of a terminal device, a background server and a background data storage space according to the remote data erasing method of the present invention.
The objects, features and advantages of the present invention will be further explained with reference to the accompanying drawings.
Detailed Description
It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
The main solution of the embodiment of the invention is as follows: receiving storage data sent by enterprise applications in each terminal device, wherein the storage data at least comprises registration information, data files and file information; according to the registration information, the background server side allocates a unique background data storage space for the enterprise application on each terminal device, and the background data storage space is used for storing storage data transmitted by the enterprise application and transmitted through the virtual data channel; after a disabling request of enterprise application is received, a remote data erasing instruction is generated according to the disabling request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to registration information; and erasing the stored data corresponding to the registration information according to the remote data erasing instruction.
The storage data stored in the background data storage space of the terminal equipment is remotely erased through the remote data erasing instruction, so that the condition of insufficient memory of the terminal equipment is avoided, and meanwhile, the data storage safety of the terminal equipment is improved.
As one implementation, the remote data erasing device may be as shown in fig. 1.
The embodiment of the invention relates to a remote data erasing device, which comprises: a processor 101, e.g. a CPU, a memory 102, a communication bus 103. Wherein a communication bus 103 is used for enabling the connection communication between these components.
The memory 102 may be a high speed RAM memory or may be a stable memory such as a disk memory. As shown in fig. 1, a memory 102, which is a type of computer-readable storage medium, may include therein a remote data erasure program; and the processor 101 may be configured to invoke a remote data erase procedure stored in the memory 102 and perform the following operations:
receiving storage data sent by enterprise applications in each terminal device, wherein the storage data at least comprises registration information, data files and file information;
according to the registration information, the background server allocates a unique background data storage space for the enterprise application on each terminal device, and the background data storage space is used for storing storage data transmitted by the enterprise application transmitted through a virtual data channel;
after a forbidden request of the enterprise application is received, a remote data erasing instruction is generated according to the forbidden request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to the registration information;
and erasing the stored data corresponding to the registration information according to the remote data erasing instruction.
In one embodiment, the processor 101 may be configured to invoke a remote data erase procedure stored in the memory 102 and perform the following operations:
determining the storage position of the storage data in the background data storage space according to the storage identification code;
and if the registration information of the storage data in the storage position is matched with the target identification, erasing the storage data in the storage position.
In one embodiment, the processor 101 may be configured to invoke a remote data erase procedure stored in the memory 102 and perform the following operations:
the background server comprises a distributed storage system, the distributed storage system comprises a plurality of storage devices, the plurality of storage devices jointly form the background data storage space, and the background data storage space is subjected to fragmentation screening according to a preset distributed storage rule to determine a target storage space;
acquiring a plurality of registration information corresponding to the enterprise application in a target storage space;
and comparing the storage identification code with each piece of registration information, and determining the specific actual position of the storage data corresponding to the remote data erasing instruction in the background data storage space according to the comparison result.
In one embodiment, the processor 101 may be configured to invoke a remote data erase procedure stored in the memory 102 and perform the following operations:
after data erasure is carried out, receiving a feedback remote data erasure result; and/or
And sending information that the storage data generated by the enterprise application is erased to the terminal equipment so as to prohibit the terminal equipment from using the storage data of the enterprise application.
In one embodiment, the processor 101 may be configured to invoke a remote data erase procedure stored in the memory 102 and perform the following operations:
the method comprises the steps that a virtual file system module is installed on the terminal equipment in advance, and the virtual file system module is implanted into enterprise application and used for providing a virtual data channel, wherein the virtual file system module is a middleware;
after receiving an operation instruction of an enterprise application, controlling the virtual file system module to generate a virtual data channel between the enterprise application and a background server;
acquiring storage data of the enterprise application, wherein the storage data at least comprises registration information, data files and file information;
and sending the storage data to the background server according to the virtual data channel so that the background server receives the storage data of the enterprise application sent by the terminal equipment, storing the storage data in the background data storage space according to the registration information, generating a remote data erasing instruction according to the disabling request after receiving the disabling request of the enterprise application, and erasing the storage data corresponding to the registration information according to the remote data erasing instruction.
In one embodiment, the processor 101 may be configured to invoke a remote data erase procedure stored in the memory 102 and perform the following operations:
acquiring an installation program of the enterprise application, and determining an installation storage space of the installation program on the terminal equipment, wherein the installation storage space corresponds to an address identification code on the terminal equipment;
and installing the enterprise application to the terminal equipment according to the address identification code, wherein the address identification code is associated with the virtual data channel, and the virtual data channel is connected with the enterprise application and used for linking and transmitting the stored data.
In one embodiment, the processor 101 may be configured to invoke a remote data erase procedure stored in the memory 102 and perform the following operations:
disabling an identification blocking function of the terminal device;
after the step of installing the enterprise application to the terminal device according to the installation storage space, the method further includes:
and restoring the identification blocking function of the terminal equipment.
Based on the hardware architecture of the remote data erasing device, the embodiment of the remote data erasing method is provided.
Referring to fig. 2, fig. 2 is a first embodiment of a remote data erasing method of the present invention, which includes the following steps:
step S10, receiving storage data sent by enterprise application in each terminal device, wherein the storage data at least comprises registration information, data files and file information;
specifically, the terminal device is provided with an enterprise application, and the enterprise application may be conference management software, file management software, instant messaging software, or the like. The background server receives stored data of the enterprise application sent by each terminal device, wherein the stored data at least comprises registration information, data files, file information and the like, the registration information at least comprises a user name, real-name authentication information, a device number of the terminal device and the like when a user registers the enterprise application, the data files are files generated in the operation process of the enterprise application, and the file information comprises the file name, the establishment time, the file size and the like of the data files.
The background server comprises a person and a computer, which is equivalent to a total station, and can operate the computer manually or set an AI (intelligent input/output) intelligent control computer when no person exists, and the computer can be at least one or a computer group. The management interface of the background server is shown in fig. 3, and the background server can display information of a user name, a system name, a device number, and other terminal devices.
Step S20, according to the registration information, the background server allocates a unique background data storage space for the enterprise application on each terminal device, where the background data storage space is used to store storage data sent by the enterprise application transmitted through a virtual data channel;
specifically, the registration information may include a user name, a device number, and the like, and since each mobile phone installs an enterprise application, it needs to register before logging in the enterprise application for office work, so that there is registration information, and after the registration is completed, the user name and the device number are recognized in the background, and the enterprise applications installed on each mobile phone are the same, but the device number and/or the user name and the like are different. For example, if someone uses the user name, the user name cannot be used by others, or the user name can be used but the device numbers are different, and the device numbers are always different, that is, the enterprise application at each mobile phone end has a unique device number.
The background server comprises a distributed storage system, the distributed storage system comprises a plurality of storage devices, the plurality of storage devices jointly form a background data storage space, wherein the storage devices are devices for storing things and can be data storage servers, namely the servers are specially used for providing data storage services. The background data storage space is used for storing the storage data transmitted by the enterprise application and transmitted through the virtual data channel. And the background server allocates a unique background data storage space for the enterprise application on each terminal device, and stores the storage data and the background data storage space.
Step S30, after a disabling request of the enterprise application is received, a remote data erasing instruction is generated according to the disabling request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to the registration information;
specifically, the disabling request of the enterprise at least includes registration information of the enterprise application, and after the disabling request of the enterprise application is received, a remote data erasing instruction is generated according to the disabling request, and the remote data erasing instruction at least carries a storage identification code and a target identifier of the enterprise application, where the storage identification code is a storage location of the registration information at a background server, and the target identifier is a key name in the registration information, such as a user name.
And step S40, erasing the storage data corresponding to the registration information according to the remote data erasing instruction.
Specifically, the stored data corresponding to the registration information is erased according to the remote data erasing instruction, and optionally, the data file and the file information corresponding to the registration information are erased.
Optionally, determining a storage location of the storage data in the background data storage space according to the storage identification code; and if the registration information of the storage data in the storage position is matched with the target identification, erasing the storage data in the storage position. Optionally, slicing and screening in the background data storage space according to a preset distributed storage rule to determine a target storage space; acquiring a plurality of registration information corresponding to enterprise applications in a target storage space; and comparing the storage identification code with each registration message, and determining the specific actual position of the storage data corresponding to the remote data erasing instruction in the background data storage space according to the comparison result. The storage device belongs to a distributed storage system, partition and fragmentation can be performed before storage in order to better store data, a distributed storage rule can be a section of code, and fragmentation screening can be realized to search the storage device by executing the section of code.
After the data files and the file information corresponding to the enterprise application are erased according to the remote data erasing instruction, receiving a feedback remote data erasing result after data erasing is performed; and/or sending information that the storage data generated by the enterprise application is erased to the terminal device so as to prohibit the terminal device from using the storage data of the enterprise application.
In the technical scheme of the embodiment, storage data sent by enterprise applications in each terminal device is received, wherein the storage data at least comprises registration information, data files and file information; according to the registration information, the background server allocates a unique background data storage space for the enterprise application on each terminal device, and stores the storage data and the background data storage space, wherein the background data storage space is used for storing the storage data transmitted by the enterprise application and transmitted through the virtual data channel; after a disabling request of enterprise application is received, a remote data erasing instruction is generated according to the disabling request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to registration information; and erasing the stored data corresponding to the registration information according to the remote data erasing instruction. The storage data stored in the background data storage space of the terminal equipment is remotely erased through the remote data erasing instruction, so that the condition of insufficient memory of the terminal equipment is avoided, and meanwhile, the data storage safety of the terminal equipment is improved.
Referring to fig. 4, fig. 4 is a diagram illustrating a remote data erasing method according to a second embodiment of the present invention, the remote data erasing method including:
step S50, a virtual file system module is pre-installed on the terminal device, and the virtual file system module is implanted into the enterprise application for providing a virtual data channel, wherein the virtual file system module is a middleware;
step S60, after receiving an operation instruction of an enterprise application, controlling the virtual file system module to generate a virtual data channel between the enterprise application and a background server;
step S70, obtaining the storage data of the enterprise application, wherein the storage data at least comprises registration information, data files and file information;
step S80, sending the storage data to the background server according to the virtual data channel, so that the background server receives the storage data of the enterprise application sent by the terminal device, stores the storage data in the background data storage space according to the registration information, generates a remote data erasing instruction according to the disabling request after receiving the disabling request of the enterprise application, and erases the storage data corresponding to the registration information according to the remote data erasing instruction.
Specifically, the terminal device is provided with an enterprise application and a virtual file system module, wherein the enterprise application may be conference management software, file management software, instant messaging software or the like, and the enterprise application is loaded and run in the terminal device in a secure sandbox manner.
The method comprises the steps that a virtual file system module is installed on a terminal device in advance and is implanted into enterprise application to provide a virtual data channel, wherein the virtual file system module is a middleware, the middleware is a type of software between an application system and system software, basic services or functions provided by the system software are used for connecting all parts of the application system or different applications on a network, and the purposes of resource sharing and function sharing can be achieved. The virtual file system module is used for generating a virtual data channel between the enterprise application of the terminal equipment and the background server, and the virtual data channel is used for the terminal equipment to send the stored data to the background server.
The method comprises the steps that terminal equipment obtains storage data of enterprise application, wherein the storage data at least comprises registration information, data files, file information and the like, the registration information at least comprises a user name, real-name authentication information and an equipment number of the terminal equipment when a user registers the enterprise application, the data files are files generated in the operation process of the enterprise application, and the file information comprises information such as file names, establishment time and file sizes of the data files. The terminal equipment sends the storage data to the background server according to the virtual data channel, and the background server receives the storage data of the enterprise application sent by the terminal equipment and stores the storage data in the background data storage space according to the registration information. For example, as shown in fig. 5, the terminal devices may be a mobile phone 1, a mobile phone 2, a mobile phone 3, and a mobile phone 4, the background data storage space includes a plurality of storage devices, and each storage device corresponds to storage data of an enterprise application of the terminal device. The background server needs to arrange a background data storage space for each enterprise application, so called distributed storage, which can be understood as but not limited to storage in a background data storage server, the background data storage server has a large memory space, and a storage space is arranged for each enterprise application on each mobile phone, namely distributed storage. The registration information can be used as the name of the storage address, the background server divides the memory of the background data storage server, and then names the address by using the registration information, so that the data generated by the enterprise application of the mobile phone is stored in the memory, and the data files generated by the enterprise application of each person are stored separately and orderly. After the background server receives the forbidding request of the enterprise application, the background server generates a remote data erasing instruction according to the forbidding request, and erases the stored data corresponding to the registration information according to the remote data erasing instruction.
Before the step of controlling the virtual file system module to generate the virtual data channel between the enterprise application and the background server, the method further includes: acquiring an installation program of an enterprise application, and determining an installation storage space of the installation program on terminal equipment, wherein the installation storage space is a physical storage space on a mobile phone terminal, and the installation storage space corresponds to an address identification code on the terminal equipment; and installing the enterprise application to the terminal equipment according to the address identification code, wherein the address identification code is associated with the virtual data channel, and the virtual data channel is connected with the enterprise application and used for linking and transmitting the stored data.
Before installing the enterprise application to the terminal device according to the installation storage space, the method further comprises the following steps: disabling an identification blocking function of the terminal device; after the step of installing the enterprise application to the terminal device according to the installation storage space, the method further comprises the following steps: the identification blocking function of the terminal device is restored. Wherein the identification blocking function may be a terminal device own or a third party software function, such as software of a security guard.
In the technical scheme of the embodiment, a virtual file system module is installed in a terminal device in advance, and the virtual file system module is implanted into an enterprise application for providing a virtual data channel, wherein the virtual file system module is a middleware; after receiving an operation instruction of the enterprise application, controlling a virtual file system module to generate a virtual data channel between the enterprise application and a background server; acquiring storage data of enterprise application, wherein the storage data at least comprises registration information, data files and file information; the method comprises the steps that storage data are sent to a background server according to a virtual data channel, so that the background server receives the storage data of the enterprise application sent by terminal equipment, the storage data are stored in a background data storage space according to registration information, after a forbidden request of the enterprise application is received, a remote data erasing instruction is generated according to the forbidden request, and the storage data corresponding to the registration information are erased according to the remote data erasing instruction. The storage data of the enterprise application of the terminal equipment are sent to the background server side through the virtual data channel, so that the background server side can remotely store the storage data, and the safety of the storage data of the enterprise application on the terminal equipment is improved.
The present invention also provides a remote data erasing device comprising a memory, a processor and a remote data erasing program stored in the memory and executable on the processor, the remote data erasing program, when executed by the processor, implementing the steps of the remote data erasing method as described in the above embodiments.
The present invention also provides a computer readable storage medium storing a remote data erasing program which, when executed by a processor, implements the steps of the remote data erasing method as described in the above embodiments.
The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, system, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, system, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, system, article, or apparatus that comprises the element.
Through the above description of the embodiments, those skilled in the art will clearly understand that the system of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a computer-readable storage medium (such as ROM/RAM, magnetic disk, optical disk) as described above, and includes instructions for enabling a terminal device (such as a mobile phone, a computer, a parking management device, an air conditioner, or a network device) to execute the system according to the embodiments of the present invention.
The above description is only a preferred embodiment of the present invention, and not intended to limit the scope of the present invention, and all modifications of equivalent structures and equivalent processes, which are made by using the contents of the present specification and the accompanying drawings, or directly or indirectly applied to other related technical fields, are included in the scope of the present invention.
Claims (10)
1. A remote data erasing method is applied to a background server side, and comprises the following steps:
receiving storage data sent by enterprise applications in each terminal device, wherein the storage data at least comprises registration information, data files and file information;
according to the registration information, the background server allocates a unique background data storage space for the enterprise application on each terminal device, and the background data storage space is used for storing storage data transmitted by the enterprise application transmitted through a virtual data channel;
after a forbidden request of the enterprise application is received, a remote data erasing instruction is generated according to the forbidden request, and the remote data erasing instruction at least carries a storage identification code and a target identification corresponding to the registration information;
and erasing the stored data corresponding to the registration information according to the remote data erasing instruction.
2. The remote data erasing method according to claim 1, wherein the erasing the stored data corresponding to the registration information according to the remote data erasing command includes:
determining the storage position of the storage data in the background data storage space according to the storage identification code;
and if the registration information of the storage data in the storage position is matched with the target identification, erasing the storage data in the storage position.
3. The remote data scrubbing method of claim 2, wherein said step of determining a storage location of said stored data in said background data storage space based on said storage identification code further comprises:
the background server comprises a distributed storage system, the distributed storage system comprises a plurality of storage devices, the plurality of storage devices jointly form the background data storage space, and the background data storage space is subjected to fragmentation screening according to a preset distributed storage rule to determine a target storage space;
acquiring a plurality of registration information corresponding to the enterprise application in a target storage space;
and comparing the storage identification code with each piece of registration information, and determining the specific actual position of the storage data corresponding to the remote data erasing instruction in the background data storage space according to the comparison result.
4. The remote data erasing method according to claim 1, wherein after the step of erasing the stored data corresponding to the registration information according to the remote data erasing command, further comprising:
after data erasure is carried out, receiving a feedback remote data erasure result; and/or
And sending information that the storage data generated by the enterprise application is erased to the terminal equipment so as to prohibit the terminal equipment from using the storage data of the enterprise application.
5. A remote data erasing method is applied to terminal equipment and comprises the following steps:
the method comprises the steps that a virtual file system module is installed on the terminal equipment in advance, and the virtual file system module is implanted into enterprise application and used for providing a virtual data channel, wherein the virtual file system module is a middleware;
after receiving an operation instruction of an enterprise application, controlling the virtual file system module to generate a virtual data channel between the enterprise application and a background server;
acquiring storage data of the enterprise application, wherein the storage data at least comprises registration information, data files and file information;
and sending the storage data to the background server according to the virtual data channel so that the background server receives the storage data of the enterprise application sent by the terminal equipment, storing the storage data in the background data storage space according to the registration information, generating a remote data erasing instruction according to the disabling request after receiving the disabling request of the enterprise application, and erasing the storage data corresponding to the registration information according to the remote data erasing instruction.
6. The remote data scrubbing method according to claim 5, wherein said step of controlling said virtual file system module to generate a virtual data channel between said enterprise application and a backend server is preceded by the steps of:
acquiring an installation program of the enterprise application, and determining an installation storage space of the installation program on the terminal equipment, wherein the installation storage space corresponds to an address identification code on the terminal equipment;
and installing the enterprise application to the terminal equipment according to the address identification code, wherein the address identification code is associated with the virtual data channel, and the virtual data channel is connected with the enterprise application and used for linking and transmitting the stored data.
7. The remote data scrubbing method according to claim 6, wherein said step of installing said enterprise application to said terminal device in accordance with said installation storage space is preceded by the step of:
disabling an identification blocking function of the terminal device;
after the step of installing the enterprise application to the terminal device according to the installation storage space, the method further includes:
and restoring the identification blocking function of the terminal equipment.
8. A remote data scrubbing method as claimed in claim 5, wherein said enterprise application is loaded and run in said terminal device in a secure sandbox.
9. A remote data wiping device, characterized in that the remote data wiping device comprises a memory, a processor and a remote data wiping program stored in the memory and executable on the processor, which remote data wiping program, when executed by the processor, carries out the steps of the remote data wiping method as claimed in any one of the claims 1 to 8.
10. A computer-readable storage medium, characterized in that the computer-readable storage medium stores a remote data erasing procedure, which when executed by a processor implements the steps of the remote data erasing method according to any one of claims 1-8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210436326.3A CN114547710A (en) | 2022-04-25 | 2022-04-25 | Remote data erasing method, apparatus and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210436326.3A CN114547710A (en) | 2022-04-25 | 2022-04-25 | Remote data erasing method, apparatus and medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN114547710A true CN114547710A (en) | 2022-05-27 |
Family
ID=81667648
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210436326.3A Pending CN114547710A (en) | 2022-04-25 | 2022-04-25 | Remote data erasing method, apparatus and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114547710A (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103873666A (en) * | 2012-12-17 | 2014-06-18 | 中国电信股份有限公司 | Mobile terminal, data wiping method and data wiping device for mobile terminal and enterprise application installation method |
| US20150012982A1 (en) * | 2012-02-14 | 2015-01-08 | Fujitsu Technology Solutions Intellectual Property Gmbh | Cluster storage system, process for secure erasure of data, and computer program product |
| CN105827669A (en) * | 2015-01-04 | 2016-08-03 | 中国移动通信集团江苏有限公司 | Virtual storage method, virtual storage equipment and virtual storage system for terminals |
| CN107330324A (en) * | 2017-05-18 | 2017-11-07 | 深信服科技股份有限公司 | The method for deleting and erasing apparatus of a kind of application data |
-
2022
- 2022-04-25 CN CN202210436326.3A patent/CN114547710A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20150012982A1 (en) * | 2012-02-14 | 2015-01-08 | Fujitsu Technology Solutions Intellectual Property Gmbh | Cluster storage system, process for secure erasure of data, and computer program product |
| CN103873666A (en) * | 2012-12-17 | 2014-06-18 | 中国电信股份有限公司 | Mobile terminal, data wiping method and data wiping device for mobile terminal and enterprise application installation method |
| CN105827669A (en) * | 2015-01-04 | 2016-08-03 | 中国移动通信集团江苏有限公司 | Virtual storage method, virtual storage equipment and virtual storage system for terminals |
| CN107330324A (en) * | 2017-05-18 | 2017-11-07 | 深信服科技股份有限公司 | The method for deleting and erasing apparatus of a kind of application data |
Non-Patent Citations (2)
| Title |
|---|
| 山金孝 等: "《OPENSHIFT云原生架构：原理与实践》", 31 December 2020 * |
| 程国建: "《迁移到云端 在云计算的新世界开发应用》", 31 December 2015 * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP1805932B1 (en) | System and method for providing a multi-credential authentication protocol | |
| US8752133B2 (en) | Security control system and method for personal communication terminals | |
| CN107204873B (en) | Method for switching target domain name resolution server and related equipment | |
| CN110263575B (en) | Method for realizing data fusion and data privacy protection based on Hash algorithm and session control | |
| CN113067859B (en) | Communication method and device based on cloud mobile phone | |
| CN103747010A (en) | Method, system and device for controlling PC (personal computer) by mobile terminal | |
| CN108966159B (en) | Short message withdrawing method, system, computer equipment and storage medium | |
| CN114268607B (en) | Fixed IP address allocation method, system, user plane function network element and storage medium | |
| EP2557826A1 (en) | Service management system and method | |
| AU2014256198A1 (en) | Terminal, network side device, terminal application control method, and system | |
| CN112788518A (en) | Location service processing method and related equipment | |
| CN103763370A (en) | Method, system and device for changing screen locking password of working area of mobile terminal | |
| CN112131535B (en) | Integrated small program authorization method for multi-deployment environment | |
| CN1661982A (en) | Method and system for automatically configuring access control | |
| CN112579997A (en) | User permission configuration method and device, computer equipment and storage medium | |
| CN111045725A (en) | Control method, device and storage medium of code management system | |
| CN114547710A (en) | Remote data erasing method, apparatus and medium | |
| CN109308406B (en) | User terminal and trusted application management system | |
| CN107423785B (en) | Work task confirmation method, system, device and storage medium based on two-dimension code | |
| CN110798836A (en) | Switching method and device for eSIM (embedded subscriber identity Module) card terminal equipment | |
| CN107679871B (en) | List management method, device, system and computer readable storage medium | |
| WO2023274582A1 (en) | Flexible remote sim provisioning | |
| US9363290B2 (en) | Access control information generating system | |
| CN111263356A (en) | Short message processing method and system for terminal equipment, electronic equipment and storage medium | |
| CN112153580B (en) | Method, equipment and system for setting MCPTT group |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20220527 |
|
| RJ01 | Rejection of invention patent application after publication |