File transparent encryption and decryption system and method based on driver layer

Abstract

The invention discloses a file transparent encryption and decryption system and method based on a driver layer. The encryption process comprises the steps that a plaintext document is generated from an application layer; the plaintext document and attribute information therefore are sent to a kernel layer, and a structure body is formed by plaintext data and the attribute information through a kernel layer equipment drive, wherein the structure body comprises a tag head, a tag body, the plaintext data and verification equipment; the structure body is placed into an external encryption card to be encrypted, the encryption card generates a random number, the tag body is encrypted through a whole network unified encryption key, and a tag document is formed by the tag head, the encrypted tag body, ciphertex data and the verification equipment. The decryption process comprises the steps that the tag document is read from the kernel layer and sent to the encryption card, the encryption card reads the label body from the tag head according to a set format, the tag body is decrypted by calling a whole network unified decryption key, the ciphertex data is decrypted by calling the random number, whether verification is correct or not is calculated, and if yes, the decrypted plaintext document is sent to the driver layer.

Description

technical field [0001] The invention belongs to the technical field of file transparent encryption and decryption, in particular to a driver layer-based file transparent encryption and decryption system and method. Background technique [0002] Transparent encryption technology is a technology commonly used in data leakage prevention system solutions. The so-called transparency refers to adopting transparent encryption and decryption technology to perform encryption and decryption on specified types of files without changing user habits, computer file formats, and application programs. Real-time, forced, and transparent encryption and decryption. That is to say, during normal use, the files in the computer memory are stored in protected plain text, but the data stored on the hard disk is in an encrypted state. If there is no legal use identity, access rights, and correct security channel, all encrypted files will be encrypted. It is stored in ciphertext state, and all data ...

AI Technical Summary

Problems solved by technology

Therefore, plaintext information is easily intercepted by other processes, and the security is not high

Images