Hardware token-based common U disk dynamic access control method and device and medium

Abstract

This application provides a method, apparatus, and medium for dynamic access control of ordinary USB flash drives based on hardware tokens. The method includes: generating a symmetric key; encrypting an access control policy using the symmetric key to obtain policy ciphertext; during runtime, intercepting file input / output requests for the ordinary USB flash drive based on a kernel-level filtering mechanism; when a hardware token is detected to be in place, reading the policy ciphertext and key ciphertext associated with the device serial number from local storage; decrypting the key ciphertext using the hardware token to recover the symmetric key; temporarily decrypting the policy ciphertext in memory using the recovered symmetric key to obtain the access control policy; performing access determination on file input / output requests based on the access control policy; and clearing the symmetric key and access control policy from memory after completing the access determination. This application can reduce deployment costs, improve access control granularity, and enhance anti-bypass security.

Images