移动存储设备多密级安全交互方案  

Multilevel security scheme of removable storage device

作　　者：郁滨[1] 尹文浩[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2011年第12期3969-3972,共4页Computer Engineering and Design

摘　　要：针对移动存储设备在不同密级主机间交叉使用时可能造成信息泄漏的安全问题,提出了一种基于文件系统过滤驱动的移动存储设备多密级交互方案。该方案基于移动存储设备的特殊硬件结构,通过文件系统过滤驱动在Windows文件操作中加入访问控制机制,实现了主机对移动存储设备的分级受控访问。实验结果表明,该方案实现了文件操作的细粒度控制及文件的加密存储,有效地保证了移动存储设备多密级交互时的安全。To solve the problem of information leakage while removable storage devices being used among PCs with different secure,a scheme of multilevel security of removable storage device based on file system filter driver is proposed.On the basis of special hardware structure of removable storage device,access control mechanism is added to file operations through the file system filter deriver,and made the access of PC to removable storage device under control.Experimental results demonstrate that this scheme realize the fine grain control of file operations and encryption of document storage,protecting the security while removable storage device using among PCs with different security level effectively.

关 键 词：移动存储设备 多密级 文件系统过滤驱动 存储加密 密钥管理 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]