非交互式全盘加密系统设计与实现  

Non-Interactive Full Disk Encryption System Design and Implementation

作　　者：黄沾 杨景贺 HUANG Zhan;YANG Jing-he(China Electronics Technology Cyber Security Co.,Ltd.,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技网络信息安全有限公司

出　　处：《通信技术》2020年第2期517-520,共4页Communications Technology

基　　金：国家重点研发计划资助（No.2018YFB0904900,No.2018YFB0904904）~~

摘　　要：基于现有全盘加密系统特点的研究,针对现有系统都需要用户交互的问题,设计并实现了一个全新的非交互式全盘加密系统。该系统能够应用到7×24 h运行、无人值守的设备中,完全兼容现有设备。同时,该系统采用随机密钥,密钥与硬件绑定,极大地提高了设备安全性,避免了知识产权被泄露。在此基础上,该系统易于部署,现有应用可以不做任何更改。同时,为了提升安全性,系统进行了全方面的操作系统安全加固,为设备存储安全提供了一种有效的解决方案。Based on the research of the characteristics of the existing full-disk encryption system,a new non-interactive full-disk encryption system is designed and implemented to solve the problem that the existing systems require user interaction.This system can be applied to 7×24 h unattended equipment and is fully compatible with existing equipment.At the same time,the system uses a random key,and the key is bound to the hardware,which greatly improves the security of the device and prevents the intellectual property rights from being leaked.On this basis,the system is easy to deploy and existing applications can be left unchanged.At the same time,in order to improve security,the system has been strengthened in all aspects of operating system security,providing an effective solution for device storage security.

关 键 词：非交互式 全盘加密 随机密钥 硬件绑定 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论]