涉密数据流向的透明加密系统设计  

Design of Transparent Encryption System based on Flow Direction of Secret-related Data

作　　者：耿振民[1] 齐宁[2] 

机构地区：[1]上海华御信息技术有限公司,上海200433 [2]无锡华御信息技术有限公司,江苏无锡214081

出　　处：《信息安全与通信保密》2012年第9期113-115,共3页Information Security and Communications Privacy

摘　　要：目前大多数透明加密技术都是依靠监控系统的进程来完成,这样就必须对所使用的软件进行限制,并且根据使用软件的升级而更新,对不支持的软件和进程则无法实现数据加密。文中揭示了一种基于涉密数据流向的透明加解密系统及方法,使得在本地数据的透明加解密不再依赖于对系统使用程序的限制,而是通过对涉密数据流向进行监控,结合对磁盘写入数据进行对比实现。只要对磁盘重要的文件进行指定加密,就既实现了对机密数据的防泄密,又实现了对未涉密数据的有效甄别,防止了过度加密带来的数据交流上的麻烦。Nowadays the implementation of most transparent encryption technologies relies on the process of monitoring system, so it is necessary to limit the software in use and update the system with its upgrade.And the encryption on the data of unsupported software or progress could not be realized. This paper proposes a system and method of transparent encryption and decryption based on the flow of secret data, and thus the transparent encryption and decryption of local data no longer relies on the restrictions of system program, it is realized by monitoring the direction of secret data and comparing the write-in data of the disk. By encrypting the specific files on the disk, the information security of confidential data and the distinguishment of non-confidential data could be ensured, thus preventing the data exchange trouble brought about by excessive eneryption.

关 键 词：透明加密 数据流向 防泄密 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]