A Data Security System Based On The Filter Of File System Driver

Recently, electronic information technology develops more and more rapidly, and spreads over all aspects of our society. All kinds of information about corporation and user are mostly stored as electronic data inside computer, and are handled and utilized by specialized information management system. The extensive application of information technology, has promoted the digital and information progress of corporation effectively, updated the efficiency of corporation operation, reduced the expense of corporation management, and strengthened the ability of corporation competition. Consequently, the information data has become a vital important resource and a foundation of development in a corporation.Therefore, with the widely development of the electronic information technology, the information security becomes more and more important. How to ensure the secret information secure is a critical problem to solve. In the process of information management, because of the leak of information system and wrong operation, secret data is easily cracked and intercepted by non-authorized adversary in the process of transportation in network and stored inside computers, the leak of information can bring very disastrous loss to the corporation. As a result, the corporation and user demand some effective information security solutions to prevent the important information from intercepting and tampering.Through the analysis of the present information security technology, we can find out that these data security solutions also contain several defects. So my paper summarizes the dominating characters of existing information security mechanism, and then put forward new file systems filter driver-based Data Security System.Data Security System employs the worldwide advanced technique of kernel-mode filter driver encryption based Windows NT architecture. This system can complete data security operation and access control in the kernel-mode of OS. This system insert the filter driver layer between file system driver layer and application layer, the filter driver captures the data request and handles the data by security operation.The filter driver mechanism can avoid the defect of user-mode encryption technology greatly, and support the effective and safe information security technology. At the same time, the filter driver has very well expansibility; it can easily append the new functions, such as the information audit of file access, virus scanning and data mirror backup and so on.Considering the flexibility of management and operation, Data Security System employs the encryption mechanism of virtual disk. The system installs a virtual logical disk, which is used to stored important information. The user can access the file in the virtual disk; the driver of virtual disk can achieve the data security operation and access control. User can set the space of virtual disk, the symmetry algorithm, the access mode and access password, etc.Data Security System makes use of standard digital certificate, employs the Microsoft CSP standard encryption interface function, use UsbKey and other cryptographical hardware equipment. So the whole system has excellent security and flexibility, and is prone to be integrated and work with other security products.In conclusion, the file system filter driver-based Data Security System can figure out the critical information problem successfully, improve the shortage of current data encryption technique, and hold well expansibility and universality. As a result, Data Security System possesses the high investigation value and wide market future.