基于文件系统容灾备份数据的透明加密机制设计  

Transparent Encryption Mechanism Design Based on the Disaster Recovery Data of the File System

作　　者：朱惠民[1] 赵俊阁[1] 

机构地区：[1]海军工程大学信息安全系,武汉430033

出　　处：《科学技术与工程》2013年第35期10691-10696,共6页Science Technology and Engineering

基　　金：2011年全军军事学研究生课题(2011JY002-436)资助

摘　　要：针对容灾系统的备份数据安全保护问题进行分析,设计一个基于文件系统的容灾备份数据的透明加密机制。采用基于文件系统过滤驱动程序的方法进行加密模块的添加;并进行了程序上的设计和模拟实现。其主要思想是将容灾系统的生产环境和容灾环境进行区分,系统的透明加密机制只在生产中心的存储设备中进行保存。一旦容灾中心的备份数据丢失,没有相同的数据加密环境,文件不能被正确恢复,极大地提高了容灾系统的数据安全性。An analysis for backup data security protection of the disaster recovery system been has done. A transparent eneryption mechanism based on the file system for disaster recovery data is designed. And eneryption module is added which be based on the file system filter driver. The main idea is to distinguish the disaster recovery system production environment and the disaster recovery environment. Transparent encryption mechanism has been saved in the storage device of the production centers. If the backup data of disaster recovery center was lost, the file can＇ t be properly restored without the same data eneryption environment. The data security of disaster recovery system is greatly improved.

关 键 词：文件系统过滤驱动程序 容灾备份数据 透明加密机制 加密标识 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]