计算机信息安全防拷贝系统研究与实现

The Research and Implement of Computer Information Safeguard and Anti-copy System

文章针对通过计算机USB、光驱、软驱、串并口、网络端口等进行窃密/泄密的信息安全漏洞和隐患,提出了一种软、硬件相结合的有效技术解决方案。该技术可以对各端口实施可灵活配置的关闭或拷贝加密控制。已在FPGA上实现了PCI总线协议与加/解密算法,实现硬件和软件并行工作,相互保护。实际应用表明该系统安全可靠,完全达到了保护计算机信息安全的目的。

The paper presented a novel computer information security solution scheme by combining software and hardware way in order to prevent the potential security risk of computer information which is copied via USB interface, CDROM, floppy driver, serial and parallel interface, and network port. The proposed scheme can configure flexibly the functions of all interfaces and close up the interfaces or encrypt the copied information. The PCI bus specifications and encrypting/decryption algorithmic were implemented on a FPGA. The software and the hardware simultaneously worked well and were protected each other. The application result shows the system had highly reliability and guaranteed the computer information＇s security well.