Research And Application Of Filter Encryption Technology Based On Installble File System

The wide application of computer and information system generates more and more electronic data, including sensitive or confidential ones, stored on hard disk and other MSF, However, information systems of governments and enterprises are intruded frequently via virus and mal-programs. Unauthorized information disclose from interior employees also often happen in an intentional or unintentional way. Electronic information faces serious security problems during storage and access, while existing encryption schemes cannot solve those problems because of operation complexity and difficulty to be accustomed to users'requirements.The purpose of the study in this thesis is to resolve the security problems of electronic information in storage and access. To attain this goal, this thesis first reviews techniques adopted by existing encryption systems, analyzing their vulnerability, and then analyzed security requirement of transparent encryption system. Accordingly, we design and implement a transparent encryption system based on installable file system. In the end, we discuss the security of system and its function extension.The main work of the thesis are outlined as follows: Firstly, the roles and privilege division of a transparent encryption system based on Role-Based Access Control restriction model and roles hierarchical structure theories in order to enhance the secure authority allocation. Secondly, we design and realize transparent encryption system based on installable file system which can encrypt specific file.Since the accomplished software is modularized, and modules'interfaces are standardized, this thesis builds a general platform of to solve the security problems of electronic information during storage and access. Therefore the work of the thesis can provide a valuable reference for developers who develop practical and commercial intranet data security management system.