Research And Implementation Of Mobile Medium Security Control

As the development of information technology, there is more and more internal sensitive information in computers of enterprise and government organization. Because of the wide usage of mobile medium, such as USB Mass Storage Device, Portable Hard Drive etc, it becomes the exigent demand that how to protect the sensitive information from leaking out through internal personnel, especially by mobile medium.On the basis of study trusted computing theory and Access Control Model, this paper presents a scheme which implement trusted terminal by trusted kernel to correspond with the actual needs of enterprise and government. Meanwhile, we use a simplified Role-based Mandatory Access Control Model, design and implement a Mobile Medium Security Control System.Mobile Medium Security Control System has two components, USB KEY Identity Authentication Module and File System Filter Driver. USB KEY Identity Authentication Module uses double factors identity authentication to control user logon process to enhance system security. This module is implemented through taking the place of Windows default GINA (Graphical Identification and Authentication) DLL. File System Filter Driver is the core component of the control system. It can capture all the file operation of the target device to which the filter driver object is attached. Then it makes use of encryption or decryption function supported by USB KEY to do the transparent encryption or decryption operation. The content copied out is encrypted, so the unauthorized user cannot read it without USB KEY. Thus it can control mobile medium safely.Finally, this paper analyzes the feature of Mobile Medium Security Control System. The system can control user logon the OS securely, and it is integrated with Windows operating system seamlessly. Meanwhile, the system also achieves the result of security control. There is no restriction of using mobile medium, so it meets the actual requirement of enterprise and government, as well as can prevent the information leakage effectively.