The Design And Implementation Of Removable Storage Device Security Protection System For E-government Intranet

With the rapid development of information technology, the business and management services of government agencies are increasingly required to use computer and network technique. At the same time, the E-government Intranet improves the administrative efficiency of government agencies, and increases the risk of government information leaked and betrayed. Because the easy-to-use and high capacity characteristics of removable storage devices, they become widely used in the E-government Intranet. ,especially in different segments. While lacking of effective security management technique, The amount of government information are exchanged by removable storage devices, which are therefore one of the means of leaking information media. Once the important information was leaked would cause major economic losses, as well as military, defense, foreign affairs and so on.Though it is necessary and practical to find the security protection methods which overall, usefully and effectively solve the removable storage devices for E-government Intranet. The author participate in a combination system for some government agencies intranet, and is responsible for the subsystem of the removable storage device design, development, and project management. The system is mainly based on the Windows operation system, is constructed by client, server and control panel, and realize the security control of the removable storage device for E-government Intranet. The system is usefully controlled government information not to leak illegally and is enhanced the protection capability for intranet environment , without influences upon normal users'work.The main contents of this dissertation conclude:1. Analyze the E-government Intranet and its structures, researche the main methods to prevent the government information revelation; then, find several leaking ways by removable storage devices; aim at the leaking problems caused by removable storage devices to study protective policies.2. Research and use the Windows GINA technique to authenticate the user's logon, to ensure the legitimacy of the user of reomovable storage devices, and use the File Driver Technology to register and authenticate the removable storage devices, to ensure the legitimacy of the removable storage devices;3. Make an intensive study of the WDM driver technique, fine grit control the devices in the kernel layer, not only provide the free/forbidding mode, but also the read-only/written-only, to improve the effectiveness of practical work;4. Design a system that corresponded with the normal work of government agencies, and prevent the removable storage devices from leaking information, implement the control module of the system, accomplish the purpose that safety protect the E-government Intranet information, fine-grained control the removable storage devices under the kernel mode as to accomplish the security and controlled of the information, and able to effectively reduce the revelation risks.5. Finally, test the key modules of the system and get the corresponding results. And summarize the main results of the dissertation, put forward ideas to further improve.