计算机工程与设计
計算機工程與設計
계산궤공정여설계
COMPUTER ENGINEERING AND DESIGN
2009年
14期
3272-3277
,共6页
Windows%加密文件系统%文件过滤驱动%实现%输入输出请求包
Windows%加密文件繫統%文件過濾驅動%實現%輸入輸齣請求包
Windows%가밀문건계통%문건과려구동%실현%수입수출청구포
Windows%encrypting file system%file system filter driver%implement%IRP
为了解决Windows系统中文件加密存储的难题,分析了Windows EFS系统的不足,深入研究了过滤驱动开发过程中对IRP的处理、文件状态跟踪、避免重入等关键技术,使用文件过滤驱动技术,设计并实现了一个新的加密文件系统.该系统对用户完全透明,可以根据用户的策略对指定文件、文件夹或者某一类型文件进行加密存储,支持NTFS、FAT等多种文件系统,加密算法可以更改.实验结果表明,该系统性能良好且在功能和应用上都扩充了Windows EFS.
為瞭解決Windows繫統中文件加密存儲的難題,分析瞭Windows EFS繫統的不足,深入研究瞭過濾驅動開髮過程中對IRP的處理、文件狀態跟蹤、避免重入等關鍵技術,使用文件過濾驅動技術,設計併實現瞭一箇新的加密文件繫統.該繫統對用戶完全透明,可以根據用戶的策略對指定文件、文件夾或者某一類型文件進行加密存儲,支持NTFS、FAT等多種文件繫統,加密算法可以更改.實驗結果錶明,該繫統性能良好且在功能和應用上都擴充瞭Windows EFS.
위료해결Windows계통중문건가밀존저적난제,분석료Windows EFS계통적불족,심입연구료과려구동개발과정중대IRP적처리、문건상태근종、피면중입등관건기술,사용문건과려구동기술,설계병실현료일개신적가밀문건계통.해계통대용호완전투명,가이근거용호적책략대지정문건、문건협혹자모일류형문건진행가밀존저,지지NTFS、FAT등다충문건계통,가밀산법가이경개.실험결과표명,해계통성능량호차재공능화응용상도확충료Windows EFS.
To solve the problem of file encryption storage in Windows system, the system's lack of Windows EFS is analyzed. In-depth studied key technologies used on development of a file system filter driver, including data processing of I/O request packet in the filter driver, tracing file statues, avoid the system re-entry. Using the teelmology of file system filter driver, a new enerypting file system is designed and implemented. The system is completely transparent to the users. It encrypt specified files, folders or a certain type of files according to the policy placed flexibly by the users. It supports different kinds of file system such as NTFS and FAT. It can also select the encryption algorithm according to the policy. Experiments show that the system has good performance and extend the Windows EFS in both features and applications.