Design And Implementation Of Virtual Disk Security Mobile Storage Device With Cryptographic Algorithm

Mobile stroage devices are widely used in people's information exchange due to their large capacity,easy to bring and easy to deploy with the development of information technology.A lot of data security problems caused by more and more frequently information exchange between people.However,the data within it is stored in clear text and lacks valid identity authentication which aroused more and more information security problem.In this context,this dissertation designs and implements a virtual disk-based encrypted mobile storage device.The data security management software coo perate with the mobile storage device.The controller chip S686 independently developed by Sage Microelectronics,Corp selected as the main control solid-state hard disk.Based on this the data security management software is designed and developed to complete the design of the whole scheme.A virtual driver program embeded between the physical volume driver and the file system to virtualizes part of the storage space of mobile device into a secure partion.This dissertation introduces the design and implementation of the entire solution.It mainly includes the mass production of stroage devices,the development and management of hidden areas and read-only areas,the design of data security management software,and identity authentication.The data security management software is based on Windows system.First of all,the dissertation research the process of Windows system to the underlying storage devices,storage virtualization technology,bridge controller,multi-threading technology and S686 master chip;Secondly research the classification of cryptographic algorithms,the Chinese Cryptographic Algorithm SM45s and its operation mode are introduced in detail,and analyzes their advantages and disvantages.Then optimize its encryption and decryption speed to improve the read and write rate of data in the security zone.In order to enhance security,the stroage scheme designed in this dissertation is designed with multiple authentication methods,including passord authentication,data security management software and dynamic library authentication,data security management software and mobile storage device authentication,security zone and PC authentication.Data can only be obtained after the certification has been passed.Finally,the test cases are designed to test the storage scheme designed in this dissertation,including the functions,compatiability of the software and the reliability,read/write rates of the security zone are tested in detail,the results show that the functions of the scheme designed in this dissertation can normal operation,and has the advantages of good compatiability,high security,fast encryption and decryption and easy to deploy which prove that the scheme is feasible and has a ccertain paractial vslue.