File mandatory access control method and system thereof based on minifilter drive

Abstract

The invention discloses a file mandatory access control method based on minifilter drive. The method comprises the following steps of realizing access control and safety protection of files through combining file system minifilter drive and a mandatory access control multi-level security strategy model, wherein setting a file mandatory access control rule to store into a configuration file is included; generating an I / O request and downloading; processing the I / O request and downloading IRP information; intercepting, acquiring and analyzing the IRP information; through roll poling the configuration file, releasing the IRP information or returning reject information. According to the file mandatory access control method based on minifilter drive, the loading sequence of a filter is easier to control; the development efficiency can be greatly improved, and better support is provided for multiple platforms and application programs; the file mandatory access control method based on minifilter drive is safe and good in use, and is applicable to departments such as military industry and the like with office confidentiality special requirements.

Description

technical field [0001] The present invention provides a file mandatory access control method and system based on a micro-filter driver, relates to the field of computer technology, in particular to a Windows system micro-filter driver-based file mandatory access control combined with a multi-level security policy model (MLS) Access control method and system thereof. Background technique [0002] With the gradual popularization of electronic office technology, the security of electronic documents is becoming more and more important. As the most mainstream C2 commercial operating system today, the Windows system still has access control for files at the stage of autonomous access control (DAC), which obviously cannot meet the high confidentiality and integrity of document processing by the military industry department or even the aerospace department. Require. [0003] Mandatory access control is an important method to realize the security of the operating system. It is to c...

AI Technical Summary

Problems solved by technology

[0007] HOOK technology is to filter the file operation functions provided by the Windows system and the system messages triggered by the file operations, and achieve the effect of file access control through targeted processing. Stability and compatibility are very poor on high systems

[0008] In summary, the existing technology is difficult to implement a file access control method with strong security protection that meets the needs of security and ease of use

Images