Key management and protection method for encrypted hard disk

Abstract

The invention relates to a key management and protection method for an encrypted hard disk, and belongs to the field of information security. According to the invention, the key management system is utilized to realize centralized management and protection of the hard disk key, distribution, backup and recovery of the hard disk encryption key can be carried out, and a threshold scheme is used when the key is backed up and recovered, so the backup stored key is only a key component, and the security of the hard disk encryption key is improved; and the key can be recovered only when at least t persons exist in the n administrators during backup, so the security of the key management system is improved. The encryption key of the hard disk is divided into two parts, one part is stored in the host, the other part is stored in the encrypted hard disk, the host sends the key component to the hard disk to synthesize the complete key for decryption only after bidirectional authentication is passed during startup, physical separation of the encryption key and protection data is guaranteed, and the protection of the hard disk is enhanced. According to the method, the security of the encrypted hard disk is improved.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a key management and protection method for an encrypted hard disk. Background technique [0002] As the main data storage device of the computer, the hard disk will lead to the leakage of confidential information and important data once it is stolen or accessed illegally, which will bring huge economic losses and security threats to individuals, enterprises and governments. Therefore, using an encrypted hard disk as a storage medium is a common way for enterprises and individuals to protect stored data. [0003] Currently existing hard disk encryption technologies can be divided into two types: software encryption and hardware encryption. Software encryption technology, such as TrueCrypt, can create a virtual disk on the hard disk without generating any files, and users can access it according to the drive letter. All files on the virtual disk are automatically en...

AI Technical Summary

Problems solved by technology

[0006] The technical problem to be solved by the present invention is how to provide a key management and protection method for an encrypted hard disk, so as to solve the problem that the existing hardware encrypted hard disk technology is not conducive to the centralized management and hierarchical protection of the key, and does not solve the backup and recovery of the key, etc. aspects of the problem

Images