US Patent No. 9,164,845

PARTITION RECOVERY METHOD AND APPARATUS


Patent No. 9,164,845
Issue Date October 20, 2015
Title Partition Recovery Method And Apparatus
Inventorship Hyun Uk Hwang, Daejeon (KR)
Ki Bom Kim, Chungbuk (KR)
Tae Joo Chang, Daejeon (KR)
Cheol Won Lee, Daejeon (KR)
Assignee ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE, Daejeon (KR)

Claim of US Patent No. 9,164,845

1. A partition recovery method, comprising:
classifying an unallocated area from a disk or an evidence image,
wherein classifying the unallocated area comprises listing Linear Block Addressing (LBA)-based offset pairs that comprise
an offset of a start sector and an offset of an end sector in which the LBA-based offset pairs represent consecutive sectors
of the unallocated area;

analyzing only an initial sector of a search target cylinder of the unallocated area to determine whether the initial sector
of the search target cylinder of the unallocated area is a boot record; and

parsing a filesystem of a deleted partition to recover a deleted directory or a deleted file by using the initial sector,
when the initial sector is the boot record wherein analyzing of the initial sector is performed when a difference between
a Cylinder Head Sector (CHS)-based cylinder number corresponding to the offset of the end sector and a sequentially-increased
cylinder number is equal to or greater than a minimum size in which a partition is created.