An Encrypted File System Based-on Windows Kernel-mode Driver

Nowadays computer mass storage media replaces papers as a major method of information storages and the information security problems grow to be remarkable. The stealing of business secret, research findings or military confidential information may inflict enormous loss. Since currently more and more fiercely storage system security problems must be solved, based on study on Windows kernel-mode drivers, the thesis puts forward kernel-mode driver as encrypted file system's design methodology after analyzing current file system.The thesis has make a great amounts of attempts in the course of driver program design, so that feasible encrypt mechanism has been established, and the design of encrypted file system has been completed. The processing of great importance in encrypt mechanism realization by driver program are discussed in details, and the whole systematic architecture is designed in the thesis. The structure design method of hierarchical architecture is adopted in systematic structure of encrypted file system centralized-driver program. Interface layer designed as a dynamic link library make the system flexible and extensible, and make the application layer development easy. For the realization of encrypt algorithm, system encapsulates several encrypt algorithms to inform a common interface. This thesis also describes common knowledge about kernel-mode drivers, especially about development and debugging tools used in driver development.This thesis makes the performance evaluation of present encrypted file system by using the kernel-mode performance analysis and the specially-developed Read-Write efficiency analysis tools designed in the thesis work, the advantages and disadvantages of the present encrypted file system has been concluded. The thesis puts forward some viewpoints about future encrypted file system. After current problems being solved, encrypted file system will have broad application prospect in information security field.