CAJ | 학술논문

随着移动存储设备的广泛使用，其面临的安全风险也日益突显。目前，已有一些针对移动存储设备安全管控技术的研究，但是这些方案并不能有效地解决环境认证的问题。文章通过对加密存储、身份认证技术的深入分析和研究，结合企业内部数据安全需求的特点，提出了一种基于RFID的环境感知方法，以实现移动存储设备对使用环境的认证；同时根据该环境感知方法，设计并实现了一个安全的移动存储系统，该系统集加密存储、用户认证和环境认证功能于一体，能够对移动存储设备进行全方位的安全管控。
수착이동존저설비적엄범사용，기면림적안전풍험야일익돌현。목전，이유일사침대이동존저설비안전관공기술적연구，단시저사방안병불능유효지해결배경인증적문제。문장통과대가밀존저、신빈인증기술적심입분석화연구，결합기업내부수거안전수구적특점，제출료일충기우RFID적배경감지방법，이실현이동존저설비대사용배경적인증；동시근거해배경감지방법，설계병실현료일개안전적이동존저계통，해계통집가밀존저、용호인증화배경인증공능우일체，능구대이동존저설비진행전방위적안전관공。
With the portable storage devices widely used in the departments and units, the security problems caused by them have been increasingly highlighted. In some scenarios, it is necessary to restrict the context when using the devices. By now some works on the security control towards portable storage have been published, yet effective context authentication schemes for portable storage devices have not been seen in literature. According to the data security requirements within the enterprise, this paper analyzed the technology of storage encryption and authentication mechanism, and presented a context-aware method based on Radio Frequency Identiifcation (RFID) to solve the problem of context authentication. Based on the context-aware method, the paper designed and implemented a secure portable storage system. The system integrates storage encryption, user authentication and context authentication, and can achieve excellent security management and control for portable storage devices.