Access control method and device of file encrypting system on the basis of partitions

Abstract

The invention discloses an access control method and device of a file encrypting system on the basis of partitions. The method includes that a password and/or a key file input by a user are/is read to determine whether an encrypting partition exists or not; if the encrypting partition does not exist, the user sets the password and/or the key file which are/is read so as to establish the encrypting partition which is protected by the user password and/or key file, and then the password and/or the key file input by the user are/is read to determine whether the encrypting partition exists or not; if the encrypting partition exists, a decryption key is generated by a possible algorithm according to the password and/or the key file input by the user, and a verification value and a checking value are obtained through the decryption key by the possible algorithm; whether the verification value and the checking value obtained after decryption are consistent to set verification value and checking value or not is determined respectively; if the verification value and the checking value obtained after decryption are consistent to the set verification value and checking value, identity verification passes to obtain file data; otherwise, the password and/or the key file are/or incorrect. Thereby, by means of the access control method and device of the file encrypting system on the basis of the partitions, identity verification grade of the file encrypting system can be improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to an access control method and device for a partition-based file encryption system. Background technique [0002] The "account + password" authentication method of the traditional file encryption system is a string of static data set by the user himself, which will remain unchanged unless the user changes it. This also leads to the security shortcomings of static passwords, such as being easy to peek, guess, dictionary attack, brute force cracking, stealing, monitoring, replay attack, Trojan horse attack, etc. Users frequently change passwords for a long time, which also brings problems in password management, such as too many passwords, and often forget the correct passwords. At the same time, traditional identity verification lacks post-processing of the original account number and password, which makes it vulnerable to brute force cracking. Even if the current popular dynam...

AI Technical Summary

Problems solved by technology

This also leads to the security shortcomings of static passwords, such as being easy to peek, guess, dictionary attack, brute force cracking, stealing, monitoring, replay attack, Trojan horse attack, etc.

Users frequently change passwords for a long time, which also brings problems in password management, such as too many passwords, often forgetting the correct password

At the same time, traditional authentication lacks post-processing of the original account number and password, which makes it vulnerable to brute force cracking

Even if the current popular dynamic password or biometric technology is adopted, the implementation cost is relatively high and the installation and settings are relatively complicated

Images