CN106557378B - Data analysis and extraction method based on Hanbang embedded security equipment - Google Patents
Data analysis and extraction method based on Hanbang embedded security equipment Download PDFInfo
- Publication number
- CN106557378B CN106557378B CN201510641135.0A CN201510641135A CN106557378B CN 106557378 B CN106557378 B CN 106557378B CN 201510641135 A CN201510641135 A CN 201510641135A CN 106557378 B CN106557378 B CN 106557378B
- Authority
- CN
- China
- Prior art keywords
- file
- bytes
- video data
- video
- length
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0706—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation the processing taking place on a specific hardware platform or in a specific software environment
- G06F11/0736—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation the processing taking place on a specific hardware platform or in a specific software environment in functional embedded systems, i.e. in a data processing system designed as a combination of hardware and software dedicated to performing a certain function
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0793—Remedial or corrective actions
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Signal Processing For Digital Recording And Reproducing (AREA)
- Television Signal Processing For Recording (AREA)
- Closed-Circuit Television Systems (AREA)
Abstract
The invention discloses a data analysis and extraction method based on Hanbang embedded security equipment, belonging to the technical field of data recovery and comprising the following steps: 101, analyzing relevant parameters of fat32 partitions and acquiring normal video data; 102 marking unused free areas in the fat32 partition according to the parameters analyzed in 101; 103, analyzing the video data file and marking an area which is not completely covered in the normal video data; 104 recovers the lost deleted video data file according to 102 and 103. The invention has the following beneficial effects: based on the method, the invention can quickly extract the effective video data file in the disk data and recover the lost and deleted video data file.
Description
Technical Field
The invention belongs to the field of data recovery, and particularly relates to a data analysis and extraction method based on Hanbang embedded security equipment.
Background
Embedded systems (Embedded systems), which are control, monitoring, auxiliary equipment, machines or equipment used for plant operations, are "special purpose computer systems designed for specific applications that are fully Embedded within controlled devices. Unlike general-purpose computer systems such as personal computers, embedded systems typically perform predefined tasks with specific requirements. An embedded system is a system for controlling or monitoring a large-scale device such as a machine, an apparatus, a factory, or the like. Typically, an embedded system is an embedded processor control board with a control program stored in ROM. In fact, all devices with digital interfaces, such as watches, microwave ovens, video recorders, automobiles, etc., use embedded systems, some of which also contain operating systems, but most of which implement the entire control logic from a single program.
The embedded technology combines with the video coding technology and the network communication technology to realize an embedded video monitoring system, and the video monitoring has wide application in a plurality of fields such as daily life, enterprise management, security and protection edge inspection, for example: the video monitoring system brings convenience for production, and most basically, if under some comparatively abominable environments, the video frightening can replace manpower to carry out monitoring control, and other volumes are little, and job stabilization can guarantee safety. And the physiological defects of visual fatigue and the like of people can not be generated, and the production safety is ensured under normal conditions. 2, video monitoring brings convenience for life, for example in the aspect of traffic monitoring, the timely and accurate monitoring range is wide, traffic jams and traffic police can be informed at the first time in accidents, and problems are solved. And 3, video monitoring ensures public security, the system is installed in supermarkets, banks, plants, construction sites and the like, indoor conditions and customer behaviors are known, the rights and interests of bank cardholders are effectively guaranteed, the operation conditions of the plants are monitored, and the social security guarantee level is improved. 4, military situation survey and target tracking. Video surveillance brings various conveniences to various fields, and it is also important to monitor data of videos.
Especially, the monitoring data can completely record the current situation after artificial abnormal events occur in life, public security and military, and help people to know the current events; however, when the embedded system runs continuously for a very long time, the monitoring data is not recognized by the embedded system due to machine errors or the data is artificially damaged and not recognized by the system, and abnormal events cannot be reproduced, so the research on the predefined format of the embedded system is particularly important.
Hard disk video recorders, which use hard disks to store video data, have replaced analog video recorders. The hard disk video recorder has a PC-based DVR and an embedded DVR which is separated from the PC architecture. It is a set of computer system capable of independently storing and processing image, and has the functions of long-time video recording, sound recording, remote monitoring and control of image and voice. But deletion of video data and video overlay are easily caused for various reasons, resulting in loss of data.
At present, residual video and deleted video files cannot be extracted, and when DVR hard disk data is extracted, the information of video stream headers generated by different manufacturers and different hard disk models causes incompatibility problem in extracting the hard disk data. The invention analyzes the data generated by the firmware algorithm in Hanbang monitoring so as to finish the algorithm to realize data extraction.
Disclosure of Invention
Aiming at the defects of the prior art, the invention provides a data analysis and extraction method based on Hanbang embedded security equipment, which can effectively solve the problem that the prior art cannot recover the lost files of the unused area of the monitoring machine.
In order to solve the above problems, the technical scheme adopted by the invention is as follows: a data analysis and extraction method based on Hanbang embedded security equipment comprises the following steps:
101, analyzing relevant parameters of fat32 partitions and acquiring normal video data;
102 marking unused free areas in the fat32 partition according to the parameters analyzed in 101;
103, analyzing the video data file and marking an area which is not completely covered in the normal video data;
104 recovers the lost deleted video data file according to 102 and 103.
Preferably, the specific method of 101 is as follows:
1011 analyzing the MBR table and acquiring relevant parameters of fat32 partitions;
1012 searching for a management file with the suffix of idx under the root directory partitioned by fat32, namely an index file; the 1013index file records the number of video data files and file recording information; offset by 0x20 bytes at the start of the index file, and recorded at 4 bytes in length is the number of video data files; the file recording method comprises the steps that 512 bytes are offset from the beginning of an index file, each area with the length of 8192 bytes is file recording information, each file recording information is sequentially numbered, the number corresponds to the number of video data files one by one, wherein each file recording information is offset by 0x00 bytes, the length of each file recording information is 4 bytes, video starting time is recorded, each file recording information is offset by 0x04 bytes, the length of each file recording information is 4 bytes, video ending time is recorded, each file recording information is offset by 0x10 bytes, and video file channels are recorded with the length of 1 byte.
Preferably, the specific method of 102 is as follows: and determining whether the file is deleted according to the size of the residual space, and if the residual space is larger than 128MB, judging that the deleted data exists.
Preferably, the specific method of 102 is as follows: and further determining a free area according to the analyzed index file information, and if the discontinuous file recording information serial number exists, deleting data exists, namely the free area is the free area.
Preferably, the specific method of 103 is as follows:
1031 the video data file start offset is 0x00 bytes, and what is recorded at 4 bytes in length is the video start time; the video data file start offset is 0x04 bytes, and the video end time is recorded at 4 bytes in length;
1032 video data file start offset by 16 x 512 bytes, length 4 bytes is a unit, which means that each header starts from the video data file offset by 63 x 512 bytes, where the header starts to record the HB word.
Preferably, the specific method of 104 is as follows:
and searching file headers in the free areas after all the free areas are found, and packaging the data from the current file header to the next file header to recover the lost and deleted data.
The invention has the following beneficial effects: analyzing fat32 partition related parameters, and acquiring normal video data; marking unused idle areas in the fat32 partition according to the analyzed parameters; analyzing the video data file, and marking an area which is not completely covered in the normal video data; and finally, recovering the lost and deleted video data file. Based on the method, the invention can quickly extract the effective video data file in the disk data and recover the lost and deleted video data file.
Drawings
FIG. 1 is a flow chart of Hanbang monitoring of a disk;
FIG. 2 is a schematic view of a stored video data file;
FIG. 3 is a schematic diagram of an index file;
FIG. 4 is a diagram illustrating the number of recorded video data files;
FIG. 5 is a schematic view of a parameter analysis of a video data file;
fig. 6 is a schematic diagram of a header parsing of a data area.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is described in further detail below with reference to the accompanying drawings and examples.
Aiming at the problems, the invention provides a data analysis and extraction method based on Hanbang embedded security equipment, which can not only efficiently extract normal video data, but also effectively recover abnormal data.
A data analysis and extraction method based on Hanbang embedded security equipment comprises the following steps:
101, analyzing relevant parameters of fat32 partitions and acquiring normal video data;
102 marking unused free areas in the fat32 partition according to the parameters analyzed in 101;
103, analyzing the video data file and marking an area which is not completely covered in the normal video data;
104 recovers the lost deleted video data file according to 102 and 103.
Further, the specific method of 101 is as follows:
1011 analyzing the MBR table and acquiring relevant parameters of fat32 partitions;
1012 searching for a management file with the suffix of idx under the root directory partitioned by fat32, namely an index file;
the 1013index file records the number of video data files and file recording information; offset by 0x20 bytes at the start of the index file, and recorded at 4 bytes in length is the number of video data files; the file recording method comprises the steps that 512 bytes are offset from the beginning of an index file, each area with the length of 8192 bytes is file recording information, each file recording information is sequentially numbered, the number corresponds to the number of video data files one by one, wherein each file recording information is offset by 0x00 bytes, the length of each file recording information is 4 bytes, video starting time is recorded, each file recording information is offset by 0x04 bytes, the length of each file recording information is 4 bytes, video ending time is recorded, each file recording information is offset by 0x10 bytes, and video file channels are recorded with the length of 1 byte.
Since the han bang monitor pre-establishes a 128MB video file from 0 to N in the data storage area at initialization, this part of the area will completely use up the storage medium, as shown in fig. 1.
Therefore, further, the specific method of 102 is as follows: and determining whether the file is deleted according to the size of the residual space, and if the residual space is larger than 128MB, judging that the deleted data exists.
Since hanpo monitoring establishes an index file in advance in a data storage area during initialization to manage 1012 video files, the index records video start-stop time, video file channel and file number information in detail, as shown in fig. 2.
Therefore, further, the specific method of 102 is as follows: and further determining a free area according to the analyzed index file information, and if the discontinuous file recording information serial number exists, deleting data exists, namely the free area is the free area.
Further, the specific method of 103 is as follows:
1031 the video data file start offset is 0x00 bytes, and what is recorded at 4 bytes in length is the video start time; the video data file start offset is 0x04 bytes, and the video end time is recorded at 4 bytes in length;
1032 video data file start offset by 16 x 512 bytes, length 4 bytes is a unit, which means that each header starts from the video data file offset by 63 x 512 bytes, where the header starts to record the HB word.
Further, the specific method of 104 is as follows:
and searching file headers in the free areas after all the free areas are found, and packaging the data from the current file header to the next file header to recover the lost and deleted data.
It will be appreciated by those of ordinary skill in the art that the examples described herein are intended to assist the reader in understanding the manner in which the invention is practiced, and it is to be understood that the scope of the invention is not limited to such specifically recited statements and examples. Those skilled in the art can make various other specific changes and combinations based on the teachings of the present invention without departing from the spirit of the invention, and these changes and combinations are within the scope of the invention.
Claims (3)
1. A data analysis and extraction method based on Hanbang embedded security equipment is characterized by comprising the following steps:
101, analyzing relevant parameters of fat32 partitions and acquiring normal video data; the specific method of 101 is as follows:
1011 analyzing the MBR table and acquiring relevant parameters of fat32 partitions;
1012 searching for a management file with the suffix of idx under the root directory partitioned by fat32, namely an index file;
the 1013index file records the number of video data files and file recording information; offset by 0x20 bytes at the start of the index file, and recorded at 4 bytes in length is the number of video data files; the method comprises the steps that 512 bytes are deviated from 514 bytes at the beginning of an index file, each area with the length of 8192 bytes is file recording information, each file recording information is sequentially numbered, the number corresponds to the number of video data files one by one, wherein each file recording information is deviated by 0x00 bytes, the video starting time is recorded at the length of 4 bytes, each file recording information is deviated by 0x04 bytes, the video ending time is recorded at the length of 4 bytes, each file recording information is deviated by 0x10 bytes, and the video file channel is recorded at the length of 1 byte;
102 marking unused free areas in the fat32 partition according to the parameters analyzed in 101; the specific method of 102 is as follows: determining whether a deleted file exists according to the size of the residual space, and judging that deleted data exists if the residual space is larger than 128 MB;
further determining an idle area according to the analyzed index file information, and if a discontinuous file recording information number exists, deleting data exists, namely the idle area;
103, analyzing the video data file and marking an area which is not completely covered in the normal video data;
104 recovers the lost deleted video data file according to 102 and 103.
2. The Hanbang embedded security device-based data analysis and extraction method according to claim 1, wherein the specific method of 103 is as follows:
1031 the video data file start offset is 0x00 bytes, and what is recorded at 4 bytes in length is the video start time; the video data file start offset is 0x04 bytes, and the video end time is recorded at 4 bytes in length;
1032 video data file start offset by 16 x 512 bytes, length 4 bytes is a unit, which means that each header starts from the video data file offset by 63 x 512 bytes, where the header starts to record the HB word.
3. The Hanbang embedded security device-based data analysis and extraction method according to claim 2, wherein the specific method of 104 is as follows:
and searching file headers in the free areas after all the free areas are found, and extracting data from the current file header to the next file header to recover the lost and deleted data.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510641135.0A CN106557378B (en) | 2015-09-30 | 2015-09-30 | Data analysis and extraction method based on Hanbang embedded security equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510641135.0A CN106557378B (en) | 2015-09-30 | 2015-09-30 | Data analysis and extraction method based on Hanbang embedded security equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106557378A CN106557378A (en) | 2017-04-05 |
| CN106557378B true CN106557378B (en) | 2020-09-15 |
Family
ID=58417859
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510641135.0A Active CN106557378B (en) | 2015-09-30 | 2015-09-30 | Data analysis and extraction method based on Hanbang embedded security equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106557378B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108595293B (en) * | 2018-04-26 | 2021-12-24 | 四川巧夺天工信息安全智能设备有限公司 | Recovery method of non-embedded monitoring video |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101819602A (en) * | 2010-05-07 | 2010-09-01 | 北京飞天诚信科技有限公司 | Method for implementing data file engine |
| US20110154100A1 (en) * | 2009-12-18 | 2011-06-23 | Electronics And Telecommunications Research Institute | Apparatus and method of performing error recovering process in asymmetric clustering file system |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104301681B (en) * | 2014-10-22 | 2018-02-23 | 厦门市美亚柏科信息股份有限公司 | The restoration methods and device of a kind of monitor video |
| CN104681050A (en) * | 2015-02-28 | 2015-06-03 | 武汉烽火众智数字技术有限责任公司 | Method and device for extracting video data from magnetic disk |
-
2015
- 2015-09-30 CN CN201510641135.0A patent/CN106557378B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110154100A1 (en) * | 2009-12-18 | 2011-06-23 | Electronics And Telecommunications Research Institute | Apparatus and method of performing error recovering process in asymmetric clustering file system |
| CN101819602A (en) * | 2010-05-07 | 2010-09-01 | 北京飞天诚信科技有限公司 | Method for implementing data file engine |
Non-Patent Citations (1)
| Title |
|---|
| 灾难数据恢复***的研究与设计;许超明;《中国优秀硕士学位论文全文数据库 信息科技辑》;20100715(第07期);第91-97页，图4-8—图4-12 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106557378A (en) | 2017-04-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106843746B (en) | Data analysis and extraction method based on embedded security equipment | |
| CN101860731B (en) | Video information processing method, system and server | |
| CN103248853A (en) | Method, equipment and system for achieving video retrieval | |
| CN103226965B (en) | Based on the audio/video data access method of time bitmap | |
| WO2015180291A1 (en) | Method and system for monitoring server cluster | |
| CN102280125B (en) | Method for restoring lost data in abnormal shutdown and hard-disk recorder | |
| CN102314916B (en) | Video processing method and system | |
| CN104284162A (en) | Video retrieval method and system | |
| US9740776B2 (en) | Method for extracting residual videos and deleted videos in a DVR hard disk | |
| US20140280387A1 (en) | System and method for expanding storage space of network device | |
| CN101909189B (en) | File recovery method, system and DVR (Digital Video Recorder) | |
| CN104270605B (en) | A kind of processing method and processing device of video monitoring data | |
| CN103164528B (en) | A kind of index establishing method of audio, video data | |
| CN103037203A (en) | Method and device for index recovery based on block storage | |
| CN114416431B (en) | Agent-free continuous data protection method, system and storage medium based on KVM | |
| CN108377363A (en) | A kind of monitor video acquisition methods based on event triggering | |
| US20200265146A1 (en) | Embedded data protection and forensics for physically unsecure remote terminal unit (rtu) | |
| CN113589767A (en) | Robot process automation RPA processing method and related device | |
| US9740571B1 (en) | Intelligent continuous data protection snapshot based backups | |
| CN106557378B (en) | Data analysis and extraction method based on Hanbang embedded security equipment | |
| CN104104895A (en) | Method for carrying out video playback on video data and hard-disk video recorder | |
| CN108647284B (en) | Method and device for recording user behavior, medium and computing equipment | |
| CN104123217A (en) | Capture method and system of execution instruction of service server | |
| CN101360228A (en) | Image compression method and video monitoring system for video monitoring system | |
| KR100950011B1 (en) | System for managementing video data and method thereof |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |