一种基于文件过滤驱动的Windows文件安全保护方案  

Solution of Windows files security protection based on file system filter driver

作　　者：胡宏银[1] 姚峰[1] 何成万[1] 

机构地区：[1]武汉工程大学计算机科学与工程学院,武汉430073

出　　处：《计算机应用》2009年第1期168-171,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60873024);湖北省教育厅重点研究项目(D20081505)

摘　　要：针对提高文件安全级别需要较高安全成本问题,提出了一种低成本高安全的Windows文件保护方法。该方法采用Windows NT驱动框架,基于文件系统过滤驱动技术实现对文件进行透明加解密。文件内容用快速的对称算法加密,并且一文件一密钥。文件密钥用安全性更高的非对称算法加密,加密密钥保存于专用密钥文件中,用户私钥存放在密钥U盘里。在此基础上,提出了一种文件安全共享的方法。分析和应用表明,该方案在增加较少硬件成本基础上,可有效保护存储设备遗失或被盗、管理员密码被破解、文件共享时的文件安全。In order to solve the problem that enhancing files security needs high cost, a solution to Windows files security protection with low cost was proposed. It was based on Windows NT driver and file system filter driver to encrypt and decrypt the files. File content was encrypted with fast symmetrical encryption algorithm, and every file had one encryption key. File encryption key was encrypted with safer asymmetrical encryption algorithm, and encrypted encryption key was saved in the encryption key file. Through storing the private key in the U disk, the system security was enhanced. Additionally, a method of encrypted file share was introduced into this paper. Analysis and application results show that when the memory is lost, administrator password is cracked and files are shared, and the solution can enhance file security with low cost.

关 键 词：文件系统过滤驱动 对称加密算法 非对称加密算法 密钥文件 加密文件共享 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]