文件内部安全研究与实现

Research And Implementation for Intra- file Security

加密文件系统对文件的保护一般是基于文件或目录的,没有考虑到对一个文件内部数据细粒度的保护。提出了一种方法,使用常规的加密技术来保护一个文件内部任意大小区域的数据,安全区域在逻辑可以是不连续的,并允许在单个文件内有不同安全级的数据。

Cryptographic file systems generally provide security by encrypting entire files or directories, but do not allow for fine- grained protection of data within very large files. This paper put forward a method that uses common cryptographic techniques to se- cure any arbitrary-sized region of data within a file. The secure regions can be logically non-contiguous. The method allows data of different sensitivity existing in a single file.