一种透明加解密文件系统的设计与实现

DESIGN AND IMPLEMENTATION OF A TRANSPARENT ENCRYPTION FILE SYSTEM

提升计算机安全性,保护敏感数据成为目前的热点问题。加密文件系统作为一种数据加密存储技术可以有效防止非法入侵者窃取用户机密数据。设计一种基于堆叠式文件系统的安全防护策略,屏蔽了具体文件系统的操作差异,实现透明高效的加密、解密。在不改变用户使用习惯的前提下添加加密、解密过程,用户使用时将密文形式存储的数据解密为明文,加、解密算法以当前较为成熟的Blowfish算法为基础在内核层完成,并且每个文件拥有独立密码,极大增加了破解难度,整体实现性能和易用的平衡。

Enhancing computer security to protect sensitive data has become a key problem nowadays. The proposed approach provides users with effective protection for preventing illegal invaders stealing the confidential information. This paper designs a safety protection strategy based on the stackable file system which is independent of any particular file system. Users do not have to change their habits while adding encryption and decryption transparently. The blowfish algorithm is taken as the foundation of this strategy within the kernel layer,converting information between plain text and cipher text. Different files own their independent password. In addition,this encrypted file system greatly enhances the difficulty of being cracked and balance the performance and ease of use.