基于RFID的移动存储设备安全管控方案  

A Security Management and Control Scheme for Portable Storage Devices based on RFID

作　　者：王秋晨[1,2,3] 王雷[1,2] 夏鲁宁[1,2] 

机构地区：[1]中国科学院信息工程研究所,北京100093 [2]信息安全国家重点实验室,北京100093 [3]中国科学院大学,北京100049

出　　处：《信息网络安全》2013年第10期65-68,共4页Netinfo Security

基　　金：国家高技术研究发展计划(863计划)[2012AA013104];中国科学院战略性先导专项[XDA06010702]

摘　　要：随着移动存储设备的广泛使用,其面临的安全风险也日益突显。目前,已有一些针对移动存储设备安全管控技术的研究,但是这些方案并不能有效地解决环境认证的问题。文章通过对加密存储、身份认证技术的深入分析和研究,结合企业内部数据安全需求的特点,提出了一种基于RFID的环境感知方法,以实现移动存储设备对使用环境的认证;同时根据该环境感知方法,设计并实现了一个安全的移动存储系统,该系统集加密存储、用户认证和环境认证功能于一体,能够对移动存储设备进行全方位的安全管控。With the portable storage devices widely used in the departments and units, the secttrity problems caused by them have been increasingly highlighted. In some scenarios, it is necessary to restrict the context when using the devices. By now some works on the security control towards portable storage have been published, yet effective context authentication schemes for portable storage devices have not been seen in literature. According to the data security requirements within the enterprise, this paper analyzed the technology of storage encryption and authentication mechanism, and presented a context-aware method based on Radio Frequency Identification （RFID） to solve the problem of context authentication. Based on the context-aware method, the paper designed and implemented a secure portable storage system. The system integrates storage encryption, user authentication and context authentication, and can achieve excellent security management and control for portable storage devices.

关 键 词：移动存储 安全管控 RFID 环境感知 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]