新加密文件系统的研究与实现  

Research and implementation of new encrypting file system

作　　者：顾正义[1,2] 黄皓[1,2] 

机构地区：[1]南京大学软件新技术国家重点实验室,江苏南京210093 [2]南京大学计算机科学与技术系,江苏南京210093

出　　处：《计算机工程与设计》2009年第14期3272-3277,共6页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2007AA1Z409);江苏省科技支撑计划基金项目(BE2008124)

摘　　要：为了解决Windows系统中文件加密存储的难题,分析了Windows EFS系统的不足,深入研究了过滤驱动开发过程中对IRP的处理、文件状态跟踪、避免重入等关键技术,使用文件过滤驱动技术,设计并实现了一个新的加密文件系统。该系统对用户完全透明,可以根据用户的策略对指定文件、文件夹或者某一类型文件进行加密存储,支持NTFS、FAT等多种文件系统,加密算法可以更改。实验结果表明,该系统性能良好且在功能和应用上都扩充了Windows EFS。To solve the problem of file encryption storage in Windows system, the system＇ s lack of Windows EFS is analyzed. In-depth studied key technologies used on development of a file system filter driver, including data processing of I/O request packet in the filter driver, tracing file statues, avoid the system re-entry. Using the technology of file system filter driver, a new encrypting file system is designed and implemented. The system is completely transparent to the users. It encrypt specified files, folders or a certain type of files according to the policy placed flexibly by the users. It supports different kinds of file system such as NTFS and FAT. It can also select the encryption algorithm according to the policy. Experiments show that the system has good performance and extend the Windows EFS in both features and applications.

关 键 词：WINDOWS 加密文件系统 文件过滤驱动 实现 输入输出请求包 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]