Research On Electronic Documents Anti-disclosure Based On Double Filter Drivers

With the rapid development of information technology and networking,more and more frequency people use computers to spread information.As one of the most important information carrier,electronic documents carries a lot of important confidential data,such data needs to be properly preserved.However,many factors lead to such confidential electronic documents can easily be leaked to unauthorized users.To ensure the security of confidential data stored locally,and prevent illegal process of obtaining and translating confidential data through the network.This paper constructs two filters to achieve the function of anti-disclosure of electronic documents.The research is based on file system filter driver and filter driver on transport layer.It improved the approach to handling the drivers.The achievement of file system filter driver is intercepting the IRP requests which was sended by I/O subsystem manager to the file system.And then analysing the IRP requests in the corresponding distribution function.Then encrypting and decrypting the confidential electronic documents when the kind of IRP request is reading and writing.For the network filter driver on transport layer,the achievement of the IRP requests was to intercepting data which was sended by network transport layer protocol of TCP,UDP.The driver will communicate with file system filter driver and check whether to send the data or not which depends on the feedback of the file system filter driver.It will control the data transmissions of network..A file system filter driver and a network filter driver on transport layer was used to achieve the function of electronic documents anti-disclosure.And the research also support the encryption and decryption of electronic documents like doc format.The research of electronic documents anti-disclosure can be completed by completing these two drivers.