一种基于文件过滤驱动的Windows文件安全保护方案

针对提高文件安全级别需要较高安全成本问题，提出了一种低成本高安全的Windows文件保护方法。该方法采用Windows NT驱动框架，基于文件系统过滤驱动技术实现对文件进行透明加解密。文件内容用快速的对称算法加密，并且一文件一密钥。文件密钥用安全性更高的非对称算法加密，加密密钥保存于专用密钥文件中，用户私钥存放在密钥U盘里。在此基础上，提出了一种文件安全共享的方法。分析和应用表明，该方案在增加较少硬件成本基础上，可有效保护存储设备遗失或被盗、管理员密码被破解、文件共享时的文件安全。

Solution of Windows files security protection based on file system filter driver

In order to solve the problem that enhancing files security needs high cost, a solution to Windows files security protection with low cost was proposed. It was based on Windows NT driver and file system filter driver to encrypt and decrypt the files. File content was encrypted with fast symmetrical encryption algorithm, and every file had one encryption key. File encryption key was encrypted with safer asymmetrical encryption algorithm, and encrypted encryption key was saved in the encryption key file. Through storing the private key in the U disk, the system security was enhanced. Additionally, a method of encrypted file share was introduced into this paper. Analysis and application results show that when the memory is lost, administrator password is cracked and files are shared, and the solution can enhance file security with low cost.