File encryption method based on TCM (trusted cryptography module) and USBkey

Abstract

The invention provides a file encryption method based on TCM (trusted cryptography module) and USBkey, which is implemented by a programmed software module. The software module comprises an initialization module, an encryption / decryption module and two hardware devices (TCM and USBkey); a user primary key is protected by the TCM, and the programmed software module is used for implementing file encryption; the initialization module activates and initializes the TCM, inputs the USBkey user logon information, and computes the user primary key and file key according to the user logon information; the user primary key is encrypted by EK and stored in the TCM; the file key is used for encrypting / decrypting the user file; and the file primary key is encrypted by the user primary key in the TCM and stored in a nonvolatile private storage region of the USBkey.

Description

[0001] technical field [0002] The invention relates to the technical field of information security, in particular to a file encryption method based on a TCM trusted cryptographic module and a USBKey. Background technique [0003] With the development of information technology and the Internet, the sharing of information resources is getting higher and higher, followed by information security issues appearing constantly, and these issues are getting more and more attention from the government, enterprises, especially secret-related departments. If appropriate security measures are not adopted, the leakage and loss of certain confidential information due to interception and tampering will cause huge losses. Therefore, the need for encryption of confidential files is very urgent. The current file encryption methods generally include two methods: special encryption tools and storage media encryption, and there are still some problems: [0004] The storage medium encryption me...

AI Technical Summary

Problems solved by technology

[0004] The storage medium encryption method adopts a coarse-grained encryption method to encrypt the entire storage partition or file system, which has the disadvantage of low efficiency and is not conducive to file sharing

[0005] The hidden danger of the special encryption tool is the storage method of the encryption key. The key stored on the hard disk is easy to be stolen and cracked, and the user password is used for encryption and decryption identity authentication. The user password is easy to forget and easy to be cracked. Guarantee the security and uniqueness of user identity

[0006] In addition, the above encryption methods often use the same key for multiple users, which cannot enable users to independently use their own permissions to complete encryption and decryption operations, and the flexibility is poor.

Images