知搜-全球专利检索

  1. 登录
  2. 注册
发明公开
CN102207898A 电子数据恢复方法 有权 转让

电子数据恢复方法
摘要：
本发明属于计算机领域，尤其涉及一种电子数据恢复方法，可按如下步骤实现:（1）打开目标盘，并转到根目录区；（2）逐条扫描目录项，找到以E5开头的目录项；（3）偏移0BH为10H或20H；同时，偏移0BH为0FH，向下继续寻找到该位置数据为10H或20H的目录项；（4）偏移14～15H与偏移1A～1BH为文件存储的簇号，读取顺序为15H14H1BＨ1AH；（5）偏移1C～1ＦＨ为文件大小（Ｂ），从找到的起始位置开始向下转移1FH1EH1DH1CH个字节，并选择为块结束；（6）将所选部分复制到指定位置。本发明极大地提升了数据恢复的可能性，为全面客观的完成电子物证鉴定的任务提供了保证。
摘要（英）：

The invention belongs to the field of computers and in particular relates to an electronic data recovery method, which comprises the following steps of: (1) opening a target disk and transferring to a root directory area; (2) scanning directory entries one by one to find the directory entry which starts with E5; (3) if an offset 0BH is 10H or 20H and the offset 0BH is 0FH, continuing to downwardssearch the directory entry of which position data is 10H or 20H; (4) reading offsets 14 to 15H and offsets 1A to 1BH which serve as cluster numbers of file storage in a sequence of 15H14H1BH1AH; (5) setting offsets 1C to 1FH as file sizes (B), starting transferring 1FH1EH1DH1CH bytes downwards from a found initial position, and selecting as end of block; and (6) copying a selected part to an assigned position. The method greatly improves the probability of data recovery and provides guarantee for comprehensive and objective accomplishment of an electronic material evidence appraisal task.

公开/授权文献
0/0