具有认证的安全增强型文件加密系统设计  

Design of security-enhanced file encryption system with authentication

作　　者：王雄[1] 娄嘉鹏[1] 李冬冬[1] 

机构地区：[1]北京电子科技学院信息安全系,北京100070

出　　处：《计算机工程与设计》2010年第9期1939-1942,共4页Computer Engineering and Design

基　　金：教育部科学技术研究重点基金项目(209156)

摘　　要：为解决文件系统过滤驱动加密系统中的认证问题,增强保护的粒度控制,提高文件加密系统的安全性,在原有文件系统过滤驱动的加密系统基础上,提出了包含认证、eKey模块、分级保护与密钥管理等机制的增强型文件加密系统设计方案,建立了实体与身份两级认证机制,实现了多级文件密钥和密钥访问控制。采用WindowsNT内核驱动框架,基于文件系统过滤驱动技术,结合eKey功能模块加以实现。测试结果表明,该设计方案有效且可行,为文件保护提供了一种更加安全可靠的解决思路。To solve authentication in encryption systems based on file system filter driver, enhance protection control in detail and improve the system security, a enhanced file encryption system design proposal including authentication, eKey module, multi-level protection and key management is proposed based on existing file system filter driver encryption system. Two level authentication included entries and identities are designed. Multi-level file key and key access control are achieved. Solution is implemented based on Windows NT driver model and file system filter driver and eKey module is integrated. A practical application is implemented to prove the feasibility and validity of the proposal. Consequently, the study offers a enhanced security and reliable solution for file protection.

关 键 词：文件保护 过滤驱动 EKEY 认证 文件加密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]