设计和实现基于UsbKey的透明加解密文件系统

加密文件系统是在操作系统级保护系统和防止用户敏感数据泄漏的一种有效手段。首先对几个著名的加密文件系统地进行了分析，并指出其在使用方式、密钥保护、配置管理以及性能方面存在的问题，而后从设计目标、系统组成、实现三个方面分析和讨论了一种基于UsbKey的透明加解密文件系统的实现方案，该方案基于Linux操作系统，使用UsbKey对于用户密钥进行安全存储和保护，并利用LSM（Linux Secure Module）机制，通过对于inode节点的读、写等关键操作的重定向，来实现文件的透明加解密的功能。本文对于Linux操作系统下的透明加解密文件系统的设计与实现具有一定的指导意义。

Design and Implementation of Transparent Encrypted and Decrypted File System Based on UsbKey

Encrypted file system is an effective method to protect sensitive data of system and user from disclosing on operating system level.This paper first investigates several famous encrypted file system and points out their limits,such as use method,key protection,management and performance,then discusses a scheme of transparent encrypted and decrypted file system based on UsbKey from design objective,architecture,and implementation.This scheme is based on Linux operating system,at the same time,uses UsbKey to ...