System and method for secure erase in copy-on-write file systems

摘要

Disclosed herein are systems, methods, and non-transitory computer-readable storage media for a delayed secure deletion of files from a copy-on-write file system. A system configured to practice the method receives a change to a file, writes a copy of the file in a first block of a storage device, the copy including the change, determines whether the change meets a predetermined condition, adds an entry into a delayed secure deletion list when the change triggers the predetermined condition, the entry storing an address associated with the first block, and deletes the first block when another change to the file is received, wherein the another change triggers another predetermined event.

主权项

1. A storage system including a file system and a processor, the file system comprising:
a plurality of blocks storing a set of files including a plurality of copies of a file, wherein the plurality of copies include different versions of the file; a delayed secure deletion list configured to store a plurality of entries, wherein each entry is associated with one of the plurality of copies of the file; and a mapping table configured to determine whether a particular copy of the file is the current version of the file; wherein the processor iterates through the plurality of entries to locate and delete one or more blocks storing the set of files based on the deletion list and the mapping table when a new version of a file not in the set of files is stored, wherein the new version of the file meets a predetermined condition.