KR20020024227A - Harddisk protect method - Google Patents

Abstract

PURPOSE: A method of protecting a hard disk through disk blocking is provided to manage the hard disk through the disk blocking, and to install a disk protection interrupt handler while performing a POST(Power-On Self Test) process of a computer, to have control over input/output processes of the hard disk and control a BIOS(Basic Input/Output System) interrupt handler, so as to protect the hard disk before booting an operating system. CONSTITUTION: A hard disk protection system performs a POST process to install a ROM program, and snatches an interrupt INT13 to have control over a disk protection interrupt handler(11). The hard disk protection system controls operations of a hard disk(3) as handling hard disk input/output processes through every INT 13. The hard disk protection system temporarily intercepts system DOS operations, and performs a protection operation for a ROM program driver by setting up a protection processing routine in a predetermined location of the hard disk(3). The hard disk protection system distinguishes a protection area from a non-protection area by concentrating data of the hard disk(3) on one position, and generates a backup file.

Description

Hard Disk Protection Method by Disk Blocking {HARDDISK PROTECT METHOD}

The present invention relates to a technique for protecting all data including an operating program recorded on a storage medium of a computer, and in particular, the data of the initial setting state recorded on the hard disk is always monitored and based on the blockage of the disk. The present invention relates to a data protection system of a computer hard disk and a method for setting an optimal computer operating environment through a post-power-on self test (POST) process.

The present invention can also designate the entire hard disk as a protected area by using the backup performed through disk blocking, and thus can utilize not only 90% or more of the hard disk capacity but also the data on the hard disk including an operating program. The present invention relates to a system and method for protecting hard disk data that protects and recovers the computer to its optimal state by restarting the system despite the hard disk format or file deletion while the computer is in use.

Recently, as a storage medium of a computer becomes larger, a user's computer stores a lot of operating systems, multimedia data, document data, games, and applications. When this data is not available due to user's negligence or computer virus, the user has to spend a lot of time to reinstall the program. In particular, the maintenance of computers in schools, government offices, training rooms, etc., had to be expensive.

For example, if you have a lab or a PC room or internet cafe with 50 computers, several computers are broken and cannot be used. For example, two would be missing operating system errors, four would die with a blue screen during Windows boot, and one would not be able to connect to the network, as long as the administrator was not dedicated and consistently maintainable.

If a beginner's computer encounters problems with booting down or failing to connect to the network, it is very difficult for the novice to find the cause and fix it directly. In addition, while experts solve problems over the phone, sometimes they can't be solved and the cost of maintaining a staff that can handle many customer requests can be daunting. By the way, even if you're fortunate to rebuild your operating system using a recovery CD-ROM provided by your computer manufacturer, many users will need to change settings and add the necessary programs to access ADSL (ASYMMETRIC DIGITAL SUBSCRIBER LINE). It is very difficult to install and change the network settings.

1 is a form of access of a hard disk when a protection program is not installed according to an operating system in a conventional hard disk. First, when a computer is turned on at the time of entering the system setup, the BIOS (BASIC INPUT / OUTPUT SYSTEM) is automatically Check the system status and check whether the recorded system information matches the actual information. If a problem occurs during this process, the system device will display abnormal symptoms if the memory and disk drive capacity, graphics card type and serial configuration are different.

A hard disk, which is an auxiliary memory device for storing and executing an operating system for operating a computer, stores data for a computer used by a user and data created by a user. The hard disk is recognized by the system device, i.e., after the hard disk is recognized by the BIOS, the hard disk is initialized.

With this partition, the hard disk sets up an area for formatting and writes a simple program for booting to the BOOT record. Thus, this partition allows the user to decide which operating system the hard disk will use, and the partitioned computer is now partitioned and formatted. In this format, the hard disk becomes a space for a user to write data, and a new operating system or a data required by the user is written in this space.

As shown in FIG. 1A, the hard disk 3 operated as described above is accessed through the BIOS interrupt handler 1: INT13 and the microcontroller 2 in the DOS operating system, and the other hard disk 10. As shown in FIG. 1B, in the Windows NT / 2000 operating system, the file system driver 5, the disk class driver 6, the disk port driver 7, the disk miniport driver 8, It is accessed via the microcontroller 9.

Therefore, in the DOS operating system, the hard disk I / O is controlled by using the bias interrupt handler (Int13). In Windows 95/98 / ME / NT / 2000, a dedicated driver can be used to control hard disk I / O.

As a representative technique using such a configuration, US Pat. No. 5,675,725 provides a backup copy of data stored in the storage device to protect the computer from incomplete storage or from the possibility of data being contaminated, lost, or infected by a computer virus. A computer backup system is disclosed.

The computer backup system includes a backup program application section for controlling the flow of data between the tape unit of the storage means and the disk drive and another part of the computer, recording the operation of blocking normal read and write operations from the disk drive, respectively. do.

For this purpose, the backup system calls a standard routine that writes data to disk whenever the backup program wants to access a file, that is, the interrupt handler routine that is the integral INT 21h (Interrupt 21 hex) of the operating system. The action performed depends on the parameter passed to the entry routine.

Therefore, the backup program application keeps a record of the changes that make up the data in the file being backed up, and both the original and update file portions or records are stored during the backup, and the original data is read while another application reads the updated data. . To identify whether the read operation is initiated by the backup program or by another application, the system uses the stack to determine the source of the read request. Optionally ask for user, process or task identification. Access to the file by the backup system is ensured by processing the system file table. It delays the start of the backup operation for a certain period, thereby ensuring that the file is in a 'good' state.

However, this computer backup system can be utilized only after the operating system (OS) is running. If the previously stored data is infected with the OS with a virus or otherwise damaged, interrupt INT13 is called and the disk is Interrupt INT 21h, which controls input / output (I / O) and allows a backup program to prepare for access to a damaged backup file, is not called, and thus a standard routine for writing data to a disk cannot be performed.

In light of this, the computer intercepts all interrupts INT13 during the power-on self test (POST) process, handles disk I / O and controls disk operation. It can be seen that it is very desirable.

In view of the above problems, the present invention is to provide a data protection system of a computer hard disk that reads the disk protection application by controlling the DOS interrupt handler during the POST process to protect the hard disk by itself. do.

Another object of the present invention is not only to maintain the state set by the administrator at all times, but also to change the system back to the original state even if the user changes, and from changing all the functions of the computer, that is, network or screen configuration, The present invention provides a data protection system and a method of protecting a computer hard disk through disk blocking so that a new program can be installed and removed, or a file can be deleted and a drive formatted.

1 is an access form of a hard disk when a protection program is not installed according to an operating system in a conventional hard disk,

2 is a diagram in which a protection system is installed for each operating system according to an embodiment of the present invention;

3 and 4 are views showing the state of the hard disk when the disk protection program is not installed or after it is installed;

5 and 6 are views showing the structure of a file to be backed up data of the hard disk,

7 is a diagram defining protected and unprotected areas of a hard disk;

8 is an operation flowchart of protecting data when data writing occurs;

9 is an operation flowchart of reading a hard disk when data reading occurs;

10 is a view showing a state of the hard disk and the state of the data is backed up after the protection program is operated;

11 is an operation flowchart of a program for arranging hard disk data;

12 is a system management diagram in which a protection program using a network is installed.

♠ Explanation of symbols for the main parts of the drawing ♠

3, 10: HDD DISK 11: Disk Protection Interrupt Handler

12: multi-driver 13: layer device drive

20: Backup file head 21: Block mapping table

22: backup block

In order to achieve this object, the present invention is composed of a ROM program, ROM card means for taking control of the DOS interrupt handler and bios interrupt handler and loading the DOS mode program before the operating system (OS) is booted to power the computer; Program driver means previously recorded in the hard disk to interrupt DOS operation of the system and to protect the hard disk; It consists of a data protection system of a computer hard disk composed of application program parts which display the current operation mode and the size of the backup area in the protection mode.

In addition, the present invention intercepts interrupt INT13 while performing a post process to install a ROM program, takes control of a disk protection interrupt handler, and controls operation of a hard disk while handling hard disk input / output through all INT13; Temporarily stops the DOS operation of the system and sets the ROM program driver at a predetermined position on the hard disk to perform a protection operation; It consists of a data protection method of a computer hard disk which consists of creating a backup file after dividing the protected and non-protected areas by concentrating the data on the hard disk in one place.

According to still another embodiment of the present invention, a program driver means for controlling input and output of a hard disk is provided in a file system for an input / output layer, a file system driver, a disk class driver, a disk port driver, and a disk miniport driver of WINDOWS NT / 2000. Set between the driver and the disk class driver.

According to another embodiment of the present invention, a program driver means for controlling input and output of a hard disk is set between the file system driver and the disk class driver in the device drive VSD_9 serving as the input / output layer of WINDOWS 95/98 / ME.

According to the present invention, in generating a backup file on a hard disk, a protected area is divided into pieces before the data of the hard disk is sorted, and thus the data divided into pieces is sorted into a single piece of data as a protected area; Create a backup file for backing up the disk data after setting the disk protection; View several sectors as one block and create a corresponding block mapping table in the backup file; If a read / write operation occurs on the hard disk, it checks whether it belongs to an unprotected area list with a sector number. If it is an unprotected area, it transfers control to the operating system. It is characterized by reading and writing to the block backup area.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

2 shows a type in which a protection program is installed for each operating system, and a system and method for protecting data of a hard disk through disk block according to the present invention will be described.

First, in FIG. 2A, when power is supplied to the computer, a POST (Power On Self Test) process is performed, and during this POST process, the ROM card checks the data of the hard disks (3, 10: HDD DISK) to be a computer BIOS interrupter. Hook INT13 to start the operation, take control of the hard disk I / O, and set the disk protection interrupt handler 11. The interrupt handler 11 temporarily stops the DOS operation of the system and sets the ROM program driver to a protection routine at a predetermined position on the hard disk to perform the protection operation. The ROM program driver concentrates the data on the hard disk in one place, divides the protected and non-protected areas, and executes a disk data protection routine that creates backup files by blocking them.

In the case of Windows 95/98 / ME / NT / 2000 of FIG. 2B, a dedicated driver may be provided to control hard disk input and output. For example, the input / output layer of Windows NT / 2000 shown in FIG. 1B includes a file system driver 5, a disk class driver 6, a disk port driver 7, and a disk miniport driver 8. According to the present invention, the multi-driver 12, that is, the ROM driver, is inserted between the file system driver 5 and the disk class driver 6 to control hard disk input and output.

In the case of Windows 95/98 / ME shown in Fig. 2C, the ROM driver is inserted into the VSD-9 of the hierarchical device drive 13 in accordance with the present invention to control hard disk input and output. Therefore, a protection routine is inserted into the VSD-9. The hierarchical device drive 13 includes Reserved for IFS Manager, Installable File System, FSD extension --- VSD-8, VSD-9, Miscellaneous port driver ----- Socket driver, Reserved for IOS registry, and the like.

Fig. 3 shows the state of the hard disk after the disk protection program is installed. The hard disk is divided into an aluminum plate platter in the order of cylinder (head), track, and sector, and the hard disk can be used through the system BIOS. By reading data from cylinder 0, track 0, and sector 1, sector values are sequentially increased.

That is, when the hard disks 3 and 10 are unfolded and illustrated, the sector number 14 is divided into 0-99 (horizontal, vertical 0-9, 0-99), for example, on the surface of the disk before the data is organized. Is divided into several pieces: 0-13, 28-32, 35-38, and 50-64 sectors.

Therefore, when the hard disks 3 and 10 are illustrated, the data distribution is not concentrated in one place but divided into pieces. The disk surface before the data is organized, the number of sectors is 100 as described above, but about 2,000,000 sectors exist in the 1 gigabyte hard disks 3 and 10, for example.

When the disk protection ROM program of the present invention is installed, the data of the hard disks 3 and 10 are arranged as shown in FIG. 4 and concentrated in one place. In other words, the disk surface after arranging data organizes the data divided into pieces to form one data (for example, 0 to 35 sectors). Therefore, by centralizing the data in one place, clearly distinguishing where it should be protected and where it should not be protected, a backup file (for example 37-50 sectors) is created and protected on the hard disks (3, 10). The backup file of 37 to 50 sectors has a continuous data form unlike general data. Therefore, a backup file for backing up the data of the hard disks 3 and 10 is generated in block units as described above on the disk surface after the protection is set.

FIG. 5 shows a structure of a file to be backed up with data of a hard disk. A backup file head 20 and a block mapping table 21 containing information of a backup file are included in a backup file having 37 to 50 sectors shown in FIG. And a backup block 22 for backing up data in the protected area. The backup block 22 is composed of a block head 23, a backup block 24, and the like, which receive information of the backed up block as enlarged in the figure.

On the disk surface after setting the protection shown in Fig. 6, a block in which the hard disk is blocked may not be smaller than one sector, and may vary depending on the size of the disk. Here, two sectors (e.g., sector number 14 is 0 and 1, respectively, 2 and 3, and --- 98 and 99, respectively) are one block (e.g., block number 15 is 0-49). As shown, 50 block mapping tables 21 are created. For example, 127 may be viewed as one block. The size of one block mapping table 21 is 4 bytes, where the block number 15 in the backup file 25 is stored.

Therefore, when the hard disk is blocked, a block mapping table 21 is created in the backup file 25. An entry is made in the block mapping table 21 as many as the number of blocks. As set-1 enters this entry.

Therefore, if a read / write operation on the hard disk occurs in the protection board, it checks whether it belongs to the unprotected area list with the sector number, and if it is a non-protected area, it transfers control to the operating system. After mapping to the block mapping table according to the program's protection routine, data is read / written to the block backup area.

FIG. 7A defines the protected area 19 and the unprotected area 18 of the hard disk. When a lot of work, ie file storage, file deletion, and file addition are performed on the hard disk, the data is divided into pieces, that is, protected as shown. The sector numbers 14 of the area 19 are scattered from 0-13, 28-32, 35-38, 50-64. Then, on the disk surface before the data is organized, the start sector 16 and the end sector 17 of the unprotected area 18 list are 14 and 27, 33 and 34, 39 and 49, and 65 and 99.

As shown in Fig. 7B, even when the hard disk is arranged, the data of the hard disk is scattered into pieces unless the disk is cleaned. In this case, the protection area 19 has sector numbers 14 of 0-36 and the non-protection area 18 of 37-99. Therefore, when the data is scattered, the non-protected area 18 list searches for a space without data, stores the start point and the end point, and excludes the protected area 19 from the list.

On the other hand, ROM (READ ONLY MEMORY) program is a program that runs before the operating system is booted. It is responsible for installing a protection program on a computer system, setting the area to be protected, setting the area to be unprotected, user account, and hard disk protection in the DOS operating system. do. If the hard disk data is bad or the continuous empty space where the program is installed cannot be found on the hard disk, the defragmentation program creates the continuous space, and after installing the disk protection program, the Windows driver can operate. Create configuration information and login information to write to the hard disk, and perform disk protection.

Next, the write algorithm and the read algorithm of the ROM program in the disk protection mode will be described with reference to Figs.

8 is an operation flowchart of a data writing routine in the protected mode. First, when the ROM drive sets the hard disk as a write routine in step 5-1, the I / O of the hard disk is controlled through the interrupt handler. In step 5-2, the write positions of the hard disks 3 and 10 shown in Fig. 2 are already checked by the operating system. That is, in step 5-3, if the write sector in the hard disks 3 and 10 is smaller than the partition sector to check the partition area, the process moves to step 5-4 to determine that this partition area does not exist. Recognizes as a write error and returns to a write protection error (step 5-23). If the write sector is larger than the partition sector, it is determined that the partition area exists and the protected area is checked. In step 5-5, it is determined whether the write sector is smaller than the drive sector. If the write sector is smaller than the drive sector, in step 5-7, the data of the hard disks 3 and 10 is filled in the buffer B by the size S in the sector number N of the write destination and the write operation of the data is completed. Enable the operating system to

If the write sector is larger than the drive sector in step 5-5, the process moves to step 5-6 to determine whether the protection area 19 (see Fig. 7) is applied. If it is not a protected area, the process moves to step 5-7, and if it is a protected area, the protected area is checked in step 5-8. That is, the mapping data is checked in the mapping table cache C.

Then, in step 5-9, it is checked whether the current mode is a protection mode that should protect the hard disks 3 and 10, and whether the mapping table of the corresponding block is in the cache C. If not, the other mapping table is read from the backup file in step 5-10 and the procedure goes to step 5-8. If the mapping table is in the cache C, in step 5-11, the block mapping table 21 (refer to FIGS. 5 and 6) to which the sector number belongs is found in the mapping table cache C. Read to see if it is -1. In step 5-12, if the entry value is -1 in the block mapping table 21, the process moves to step 5-14 to check whether the sector number N belongs to the unprotected area list (see Fig. 7), If it does not belong, the block file of the backup file allocated to the mapping table goes through steps 5-15 and 5-16, and the block number is placed in the entry E, and the block is stored in the backup file 25 (Figs. 5 and 6). Block is backed up to the backup file 25, and if it belongs to the unprotected area list, no backup is performed.

In addition, if the entry value is not -1 in the block mapping table 21 in step 5-12, the block is backed up, and thus, the block is backed up and the process proceeds to step 5-13 to check whether the next block exists. If there are more allocation blocks, then jump to step 5-8. If all blocks have been backed up, in step 5-17, if there is a changed table among the mapping tables in the cache, data is written to the backup file 25.

Therefore, in step 5-18, the write sector number may not be the same as the start of the block, so the size Sw from the write sector number in the block to the end of the block is obtained. Thereafter, only the sectors corresponding to the write write data to the backed up block 22 in the backup file 25. In step (5-19), the sector number (B) in which the block of sector number (N) is mapped to the backup file is written. Obtain In step 5-20, if there are remaining sectors to be written, the sector number B is written by the block size Sw. In step 5-21, it is checked whether further write operations are possible in step 5-22 by subtracting the sector size Sw in which writing is performed in the entire sector S. In step 5-22, the size of the spare sector is determined, and the same operation is performed again. Otherwise, the operation is terminated.

9 is a flowchart of the operation of the read routine in the protected mode. First, when the ROM drive sets the hard disk as a read routine in step 6-1, the I / O of the hard disk is controlled through the interrupt handler. In step 6-2, the modification positions of the hard disks 3 and 10 shown in Fig. 2 already set by the operating system are examined. That is, it examines where the read occurs on the hard disks 3 and 10 and compares the read sectors with the partition areas in step 6-3. In the hard disks 3 and 10, the read sectors are compared to the partition sectors. If it is large, it is determined as a partition area, and since the backup operation is not performed in the write operation, the process jumps to step 6-12 and at the sector number N of the read position on the hard disks 3 and 10 shown in FIG. The operating system reads the data of the hard disks 3 and 10 by the size S, fills the data into the buffer B, and then enables the operating system to read the data.

If the read sector is smaller than the partition sector in step 6-3, the read sector is smaller than the drive sector in step 6-4, and the read sector is larger than the drive sector in step 6-4, If it is determined in step 6-5 that the read sector is not the protected area, the process jumps to step 6-12, where the hard disk (S) equals the size S by the sector number N of the hard disks 3 and 10. Read the data of 3, 10) to fill the buffer (B) and enable the operating system to read the data.

On the other hand, if it is determined in step 6-5 that the read sector is the protected area 19 (see Fig. 7), the protected area is checked in step 6-6. That is, the mapping data is checked in the mapping table cache C. In step 6-7, it is determined whether the current mode is a protection mode to protect the hard disks 3 and 10, and it is checked whether the mapping table of the corresponding block is in the cache C. If not, the other mapping table is read from the backup file in step 6-8 and the procedure goes to step 6-6. If the mapping table is in the cache C, in step 6-9, the mapping table cache C finds the block mapping table 21 (see FIGS. 5 and 6) to which the sector number belongs, and returns the entry E value. Read and determine in step 6-10 if the entry value is -1.

If the entry value is -1 in the block mapping table 21 in step 6-10, it is checked whether there is a next block to be read in step 6-11, and if there is no sector number to be read from the hard disks 3 and 10, Read the data and enable the operating system that fills the buffer (B). If there is no next read block, jump to step 6-5.

Conversely, if the entry value is not -1 in the block mapping table 21 in step 6-10, the process proceeds to step 6-13 to determine the size Sr from the diary sector number to the end of the block in the mapped block. Obtain In steps 6-14, only the sectors corresponding to the read read the data of the backed up block 22 in the backup file 25. In the block of the sector number N, the sector number Nr mapped to the backup file is read. Obtain In step 6-15, if a read sector remains in the sector number Nr, data is read by the block size Sr and filled in the buffer B. In step 6-15, the sector size Sr that has been read in all sectors S is subtracted, and in step 6-17 it is checked whether further diary operation is possible. In step 6-17, the size of the spare sector is determined and the process jumps to step 6-13 to carry out the same operation again, otherwise the operation ends.

FIG. 10 shows a state of the hard disk after the protection program is operated and a state in which data is backed up. The backup file 25 shown in FIG. 5 is based on the hard disks 3 and 10 shown in FIGS. ) Will be described with reference to the disk surface and block mapping table 21 of FIGS. 6 and 7. If a read / write occurs in an area of the unprotected area 18 list, it is read or written to the area without backup.

When the hard disks 3 and 10 are blocked as shown in Fig. 6, the block numbers are numbered starting with 0 as a base value. The blocks 22 in the backup file 25 are also numbered starting with 0 as the base value. In the block mapping table 21, -1 indicates that it is not used. If writing to block 1 occurs on the hard disks 3 and 10, the block is backed up to block 0 in the backup file 25, and block 1 in the backup file 25 is located in entry 1 of the block mapping table 21. The number 0 will be entered.

If another block is also written to block 5, the block is backed up to block 1 in the backup file 25, and block number 1 in the backup file 25 is entered into entry 5 of the block mapping table 21. If a read occurs in block 1 of the hard disks 3 and 10, the block mapping table 21 indicates that the backup file is backed up to the backup file 0. Therefore, the block 0 is read in the backup file 25 to fill the data in the buffer. .

On the other hand, since the hard disk access to the unprotected area 18 is not backed up, the operation on the block mapping table 21 is not performed.

11 is a flowchart illustrating a program for arranging hard disk data, and FAT (File Allocation Table) refers to a disk format, a method of organizing storage space on a hard disk. It's a format. When setting up a hard disk, partitioning is done first, and DOS uses a partition of FAT16 and divides and manages the hard disk in clusters, where 16 is a slice unit of the cluster, which can be divided into a total of 65536 pieces. Do. WINDOW 95 OSR2 uses a FAT32 partition, and WINDOW NT has a file system (partition) called NTFS (NT FILE SYSTEM).

The defragmentation operation of FAT16 and FAT32 first extracts respective partition information from partitions of the hard disks 3 and 10. Allocate a cache buffer in extended memory to minimize hard disk I / O. By obtaining a BOOT sector from the partition information, FAT1, FAT2, clusters per sector, the number of sectors, etc. required for defragmentation can be obtained.

First, in the case of FAT16, a buffer for distinguishing whether a cluster of a file allocation table is a file or a directory cluster is allocated to the extended memory. Starting from the ROOT directory, the directory and file record information are stored in the extended memory by searching the directories in the partition using the B-Tree method. Decide whether to defragment with FAT information, and extract free space and spatial cluster information to move from FAT.

If the cluster to be moved is a file, the cluster data is moved and the file record information is updated. If the cluster to be moved is a directory, all subdirectory information is updated, and file record information is updated. If there are no more clusters to move, synchronize the FAT1 and FAT2 and finish the defragmentation.

The NTFS defragmentation operation extracts MFT (MASTER FILE TABLE) location information and cluster information necessary for NTFS defragmentation from the BOOT sector as described above with FAT16 and FAT23. Analyze the bitmap of the MFT to see if it should be defragmented. Analyze empty runlists in MFT data. Analyze the runlist used in the MFT data. If you are checking if there is an LCN (LOGICAL CLUSTER NUMBER) to move in the used runlist, move the cluster data and update the runlist of the moved file. If there is no LCN to move, synchronize the MFT file record, update the MFT BOOT information, and exit.

FIG. 12A is a system management diagram in which a protection program using a network is installed. The server 30 shown in FIG. 12A is provided with a mast program for monitoring and controlling each host. The server 30 includes a computer 31 in which the protection program of the present invention is installed via a network, and client computers 32 and 33, each of which is provided with a host program that responds to client information and control in the server 30, respectively. Connected.

Therefore, the server 30 can know the information (power on / off state (pig check), protection program mode, version, operating system) of the computers 31-33 on the LAN, power management and protection program Simultaneous remote control of mode switching and keyboard / mouse lock is possible. In addition, the computer on the WAN can be controlled identically to the computer on the LAN through an IP address.

The mast program 37 shown in FIG. 12B reads the client's information via the network 34 and controls the modes of keyboard and mouse, power and protection program 36. The host program 35 provides the client program information to the master program 37 and controls the control command. The protection program driver 36 executes a mode change command of the host program 35.

Therefore, the host program 35 informs the server 30 of the current information of its operating system and protection program. When using dynamic IP, the client obtains its MAC address and sends it to the server. Upon receiving the mode change signal from the server 30, the protection program driver 36 transmits the signal from the server 30. The protection program driver 36 receives this signal to perform the desired operation of the server 30.

As described above, according to the present invention, the disk protection interrupt handler is installed during the POST process of the computer, thereby controlling the input and output of the hard disk and controlling the BIOS interrupt handler, thereby achieving protection of the hard disk before booting the operating system.

In addition, the present invention manages the hard disk through disk block, so that the disk protection interrupt handler is installed during the POST process of the computer to control the input and output of the hard disk and control the BIOS interrupt handler to achieve the protection of the hard disk before booting the operating system . It is possible to designate the entire hard disk as a protected area, utilize more than 90% of the hard disk, and to protect the hard disk data quickly and completely, even if the contents of the hard disk are in any state, It is possible to provide a method for controlling the same.

In addition, although the technical idea of the method for protecting a hard disk through the disk block of the present invention has been described based on the exemplary drawings, the present invention has been described by way of example and is not intended to limit the present invention. It is apparent that the present invention can be variously modified and imitated by those skilled in the art without departing from the scope of the technical idea of the present invention.

Claims (12)

In the data protection system of a computer hard disk through disk blocking, ROM card means composed of a ROM program, which controls the DOS interrupt handler and the BIOS interrupt handler and loads a DOS mode program before the computer is powered on and the operating system is booted; Program driver means previously recorded in the hard disk to interrupt DOS operation of the system and to protect the hard disk; Data protection system of a computer hard disk consisting of application program parts which display the current operation mode and the size of the backup area in the protection mode. The method of claim 1, For the WINDOWS NT / 2000 I / O layer, for the file system driver, disk class driver, disk port driver, and disk miniport driver, a program driver means for controlling the hard disk I / O is installed between the file system driver and the disk class driver. Data protection system of a computer hard disk. The method of claim 1, The data protection system of a computer hard disk installed in the device I / O layer of WINDOWS 95/98 / ME by means of a program driver means for securing the hard disk I / O to the device drive VSD_9. In the data protection method of a computer hard disk through disk blocking, Intercepting interrupt INT13 to secure a disk protection interrupt handler while performing a post process to install a ROM program; Controlling operation of the hard disk while handling all the hard disk inputs and outputs through the INT13; Temporarily stopping the DOS operation of the system and setting the ROM program driver at a predetermined position on the hard disk to perform a protection operation; A data protection method of a computer hard disk comprising the steps of concentrating data on a hard disk in one place to separate a protected area from a non-protected area and then generating a backup file. The method of claim 4, wherein To create a backup file on your hard disk, Before the data on the hard disk is organized, the protected area is divided into several pieces, and the data divided into several pieces is organized into a single piece of data as a protected area; Create a backup file for backing up the disk data after setting the disk protection; View several sectors as one block and create a corresponding block mapping table in the backup file; If a read / write operation occurs on the hard disk, check whether the hard disk belongs to an unprotected area list, and if not, transfer control to the operating system; Otherwise, the data protection method of a computer hard disk that maps to a block mapping table in disk protection mode and then reads and writes data to the block backup area. The method of claim 4, wherein In Windows 95/98 / ME / NT / 2000 in place of the DOS operating system, a dedicated driver to control the hard disk input and output, characterized in that the computer hard disk data protection method through the disk block. The method of claim 4, wherein And said dedicated driver is a VSD-9 into which a multi-driver or a protection routine is inserted. The method of claim 4, wherein The backup file includes a backup file head for storing information of the backup file, a block mapping table, and a backup block for backing up data in a protected area. Way. The method of claim 8, The backup block comprises a block head for receiving the information of the backed up block and the backup block, characterized in that the data protection method of the hard disk of the computer through the disk block. The method of claim 4, wherein The size of one block mapping table is 4 bytes, where the block number in the backup file is stored. The method of claim 4, wherein Receiving a buffer containing a sector number, a size, and data of a writing destination when writing to the hard disk from each operating system, and checking where the writing occurs on the hard disk to check whether the partition is a partition area or a protected area; If the partition area is a protected area, check whether the current mode is a protected mode that should protect the hard disk. Otherwise, write data to the original sector number. If the current mode is a protected mode, block mapping to which the sector number belongs in the mapping table cache. Find the table and read its entry to see if it is -1; If the entry value is -1 in the block mapping table, if the sector number does not belong to the unprotected area list, the block is not backed up in the backup file. No backup; If the entry value is not -1 in the block mapping table, the block is backed up, and thus the block is not backed up, and the next block is checked. If all the blocks are backed up, data is written to the backup file; It calculates the size from the write sector number in the block to the end of the block, and writes only the sectors corresponding to the write to the backed up block in the backup file.If there are remaining sectors to write, the same operation is performed again. Data protection method of the hard disk of a computer through the disk block. The method of claim 4, wherein When the hard disk reads from each operating system, it receives a buffer containing the sector number, size, and data of the read destination, and checks where the read occurs on the hard disk. The hard disk is read from the sector number to be read, filled with the buffer, and the operation ends; If the mode is protected mode and protected area, the block mapping table cache finds the block mapping table to which the sector number belongs, reads the entry value, and checks whether -1; If the entry value is -1 in the block mapping table, it is checked whether there is a next block to be read, if not, data of the sector number to be read from the hard disk is read and filled in the buffer, and then terminated; If the entry value is not -1 in the block mapping table, the data is read from the backed up block in the backup file, and the buffer is read. If the next block is checked, the operation is terminated. To protect your hard disk data.