Research And Implementation Of Identity Authentication And Access Control System Based On USB-key

With the popularity of computers and the rapid development of related technologies,large enterprises and units use various business systems and service systems to manage the growing documents and others.Many of these documents belong to internal documents and are classified.They are scattered in the computers of backbone staff of enterprises.On the one hand,due to the weak security of some employees or poor awareness of prevention,on the other hand,because of the security problems of the computer itself,the secret related documents are directly faced with the threat of the security of malicious employees.The safety consciousness of employees can be cultivated,but the security problem of computers needs to be solved in a targeted way.The security problems involved mainly come from two aspects: computer login and file protection.In computer system,Windows is the mainstream,and its login mechanism is simple password authentication,which easily leads to password being guessed and cracked.The storage problem of files,which is stored in computers without precaution,is easy to copy or use network transmission.Therefore,we need to solve these two problems.At present,in the authentication technology,hardware encryption device(USB-Key)and biometrics technology are widely used,and data protection is mainly to encrypt files,with hardware encryption and software encryption.Through the research and comparison of various technologies,this paper designs a authentication system based on USB-Key,which writes digital certificates into USB-Key,the purpose of protecting the private key based on the hard encryption of USB-Key,and using the identity authentication of the digital certificate instead of the system authentication.Then,the mini filter driver technology is used to realize file encryption and control of U disk devices in the kernel layer of the system,so as to achieve the purpose of protecting private files.In the end,the paper gives the test and analysis of the system: using the digital certificate technology to improve the system logon protection significantly,and the mini filter driver can effectively encrypt documents and other files,and restrict the writing of external memory,and eliminate the copy of the external device.The improvement of system login security restricts the chance of illegal entry to the system,and mini filter driver is effective in protecting private files.Through these two improvements,the security of account data of Windows operating system users is strengthened.