A method of full-disk encryption based on trusted cryptographic modules

Abstract

The invention provides a full-disk encryption method based on a trusted cipher module, which protects the login key and the storage key through the trusted cipher module, designs a file system to filter and drive the encryption module to encrypt and decrypt disk I / O data, and realizes real-time transparency of the full-disk data Encryption, by adding a startup verification module to the first track of the disk, calling TCM to perform authentication and integrity verification on the encryption system, and the key and integrity verification information are stored in the TCM. Compared with the prior art, the full-disk encryption method based on the trusted cryptographic module is not stored in the disk, and has high security. The system login requires TCM authentication and integrity inspection, which can prevent malicious programs from implanting and intercepting user passwords.

Description

Technical field [0001] The invention relates to the technical field of information security, in particular to a method for full disk encryption based on a trusted cryptographic module. Background technique [0002] Enterprises, governments, and especially secret-related organizations often carry a large amount of secret-related data. The storage security of these data has become more prominent with the development of information technology. In a complex network environment, data leaks frequently occur, and users urgently need a safe and effective data protection system. The disk encryption system uses various encryption technologies to realize the ciphertext storage of important data, ensuring data security to a certain extent. The current disk encryption system is divided into application layer encryption and drive layer encryption. The application layer encryption system requires users to The files to be protected are operated separately, the encryption and decryption efficien...

AI Technical Summary

Problems solved by technology

The disk encryption system uses various encryption technologies to realize the ciphertext storage of important data, which ensures data security to a certain extent. The current disk encryption system is divided into two technical implementation methods: application layer encryption and driver layer encryption. The application layer encryption system requires users to The files to be protected are operated separately, the efficiency of encryption and decryption is not high, and it is inconvenient to use

Images