Research On Access Control Based On Encrypted File System

Computer file system(CFS),which is the way to organize the storing files on storage devices, all of the files are stored on the storage device according to this method, by means of this way, users can store and read these files at the low price and make it more conveniently. Based on the above advantages, more and more users put their personal information into the computers through computer file system(CFS), this convenient means become an indispensable part in people's daily life. At the same time, the traditional file system which take the means of protecting files is not enough to ensure the users' information security, it makes the information of users facing many treats, such as peep, interpolation, forgery, many users have suffered from these treats. So it is the necessary for us to design a virtual file system which can ensure the information security of the users.Adopting fist language to realize the virtual file system which can achieve encryption between the provided service toward the users and physical file system will safeguard the confidentiality of the stored files, and prevent the peep of the illegal users. At the same time, by using the smack kernel module provided by Linux to realize discretionary access control and mandatory access control toward files, through this way the users can only get the files within the limit of their rights and safeguard the integrity of the file system. After achieved this target, we can by the way of improving the code efficiency to secure the file's information, although the users may not perceive the existence of the encryption module.