File transparent encryption and decryption method and system based on domestic operating system

Abstract

The invention provides a file transparent encryption and decryption method and system based on a domestic operating system. The system comprises a file system calling interface, a file redirection module, a VFS system, a stacked encryption file system, a real file system and a disk system. The file redirection module is used for redirecting files; wherein the stacked encrypted file system is deployed in a domestic operating system kernel layer to intercept and check an access request of a file, and the stacked encrypted file system is formed by inserting a layer of file system driver between aVFS system and a real file system and is used for calling a real file system interface to realize the access request of the file; and the stacked encrypted file system calls the file permission control module to control the file access permission. According to the scheme provided by the invention, the ciphertext is prevented from being divulged under an unauthorized condition, and the operation safety can be ensured.

Description

technical field [0001] The invention relates to the field of information security, in particular to a file transparent encryption and decryption method and system based on a domestic operating system. Background technique [0002] At present, there are relatively mature transparent file encryption and decryption software under the Windows operating system on the market, but with the change of information processing requirements, there is an increasing need for domestic, safe and reliable operating systems and domestic operations. System matching software. There are few existing file encryption and decryption software that support domestic operating systems. [0003] The directory protection products based on the LUKS disk encryption scheme can realize the protection of the files in the specified directory, and only allow the trusted process to access the files in the specified directory. After the system is shut down, the data will be saved in ciphertext, and will not be lo...

AI Technical Summary

Problems solved by technology

However, directory protection products based on the LUKS disk encryption scheme can only implement local protection. When the files in the directory have interactive requirements, or when a trusted process copies files from a protected directory to other directories, or when a trusted process copies files When sending out or sharing with others, the said files cannot be protected, posing a risk of leakage

Images