The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 11, 2016

Filed:

Nov. 19, 2014
Applicant:

Electronics and Telecommunications Research Institute, Daejeon, KR;

Inventors:

Hyunuk Hwang, Daejeon, KR;

Kibom Kim, Daejeon, KR;

Seungyong Lee, Daejeon, KR;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G06F 11/14 (2006.01); G06F 11/20 (2006.01);
U.S. Cl.
CPC ...
G06F 11/1435 (2013.01); G06F 11/1451 (2013.01); G06F 11/1469 (2013.01); G06F 11/2058 (2013.01); G06F 11/2069 (2013.01); G06F 11/1417 (2013.01); G06F 2201/84 (2013.01);
Abstract

A method and apparatus for recovering a partition based on file system metadata, which calculate core information necessary for the recovery of a partition using only the MFT entry information of $MFT and recover a deleted partition when an MBR and a GPT that correspond to the partition configuration information of a disk and a BR and a BBR that store the configuration information of a volume are deleted or destroyed. The method includes determining an unallocated area in a disk or an evidence image, collecting MFT entries from the unallocated area, generating MFT partition candidate information by analyzing the MFT entries, and creating information enabling a layout of a partition to be reconfigured based on the MFT partition candidate information, and creating a tree structure using the created information and the MFT entries.


Find Patent Forward Citations

Loading…