微过滤驱动中文件加密标识的实现

分析了企业信息化过程中面临的信息安全问题.针对文件透明加解密系统的开发过程中难于区分文件是否已经加密的问题,提出了一种基于微过滤驱动的文件加密标识实现方法.首先给文件增加一个4kB“隐藏”的文件头,将加密标识、加密算法、密级信息等嵌入其中,然后对文件的操作(查询、读/写等)进行偏移设置,使得文件透明加解密系统的研发更加高效.试验结果表明该方法具有有效性.

Implementation of File Encryption Tag based on Minifilter Driver

The security problems faced by the enterprises in their informatization process are analyzed. For the hard identification of that whether the file is encrypted or not in the development of file encryption and decryption system, a new implementation approach of file encryption tag based on minifilter driver is proposed. First a 4kB file header is added to the file, and the information, such as the file encryption tag, encryption algorithm and degree of secrets is embedded in this header. Then the file operations, including file inquiring, reading or writing, are offset, thus making the development of transparent file encryption system even more efficient. The experiment results indicate the effectiveness of this implementation approach.