| Most storage systems have serious security flaws, because these data were mainly protected through the operating system access control mechanisms. If you bypass the operating system and access the storage devices physically, you can freely access the data. In view of the data has become the most valuable resources.Having designed a Kernel-Level Cryptographic File System (KCFS) based on the traditional distributed file system (DNFS). The system can run on all POSIX-based file system. While ensuring a good performance and ease of use, it provices users with data confidentiality, integrity, file sharing and other needs. It realise random data encryption in the form of a separate file system module and run on the client in the distributed file system. This ensures that data in network transmission and on storage device are existed in the form of ciphertext. In KCFS, data and metadata are stored in the same file. Thus it perfectly provides support for incremental backups, file migration and file sharing between large-scale storage systems. KCFS is in high security, and can support a variety of different encryption algorithms and keys in different lengths. And every file is corresponding to a different key. Meanwhile, the software is easy to use. It can transparently handle file encryption and decryption. Once users and applications are authorized, the user can access the encrypted files transparently via the standard file access without any additional human intervention.In this paper, we have taken a lot of tests and analysis in functions and performance for KCFS. In function, we focused on the stability, file sharing mechanism, ease of use, and portability of the system. In performance, we focus on the impact on the system performance when adding the KCFS module and taking different encryption algorithms and keys in different length. The result shows that when ensuring the safety of the storage system, KCFS also has high performance. |
PDF Full Text Request