基于双缓存机制的文件透明加解密方法与实现

为了实现文件透明加解密过滤驱动,首先提出了基于文件流的文件信息存储和转化方式,对于已经存储标识信态的文件,只有规定进程,才能读到其明文,否则读到的则是该文件的密文.其次,提出了分组对齐IRP(Input/Output Pequest packet)的方法,使加解密过滤驱动对加解密算法具有通用性.最后,设计并实现了具有文...

Method and Implementation of Double-Caching Mechanism-based Transparent File Encryption and Decryption

In order to implement transparent file encryption and decryption filter driver,this paper introduces storage and conversion of file information basing file flow.The plain text of the flagged file could only be accessed by some permitted process,and processes having no permission could just access cipher text of the file.In addition,the paper introduces way of packet alignment of Input/Output request packet(IRP),which makes encryption and decryption algorithm of filter driver general.In the end,the paper designs and implements a new double-caching mechanism with plain text cache and cipher text cache.This mechanism bypasses the native operating system caching mechanism and implements,and it not only avoids effectively series of problems caused by origin system cache,but also effectively reduces the repeatable read operations of hard disk.