Virtual Disk File Encryption Intermediary Layer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current file encryption methods are either cumbersome and dependent on manual operations, or they significantly impact system performance due to the need for extensive filtering operations.
Innovation Solution
A method and apparatus utilizing a virtual disk to encrypt and decrypt files, where the virtual disk receives writing requests, encrypts data, and notifies the file system to write encrypted data to the physical disk, and redirects reading requests to decrypt data from the physical disk, maintaining system performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If direct encryption is used to encrypt files in the disk, then file encryption can be achieved, but manual operations are required for every encryption and decryption which makes the procedure complex and cumbersome
Solution Approach 1:
A virtual disk driver is introduced as an intermediary layer between the file system and physical disk. This driver automatically handles encryption and decryption of file operations without requiring user intervention. The virtual disk driver intercepts write operations from the file system, encrypts the data, and writes it to the physical disk, while automatically decrypting data during read operations, thus eliminating manual encryption/decryption steps while maintaining security
2Ease of operation
If transparent file encryption using filter driver is used, then manual encryption operations are eliminated, but filtering operations on all files seriously affect system performance
Solution Approach 1:
Instead of applying filtering operations to all files in the system, the virtual disk driver applies encryption only to specific files or directories that are mounted on the virtual disk. This localized approach means that only operations on encrypted files go through the encryption layer, while other system operations proceed normally without performance impact. The encryption overhead is concentrated only where needed rather than affecting entire system performance
3Reliability
If filter driver encryption is implemented, then transparent encryption is achieved, but the filtering operations required for all files reduce reading performance
Solution Approach 1:
The virtual disk driver acts as a mediator that selectively processes only read operations on encrypted files, rather than filtering all system reads. When the file system requests data from the virtual disk, the driver decrypts the data and forwards it to the file system. This targeted approach maintains security for encrypted files while minimizing performance impact on overall system reading operations
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This invention publishes a file encrypting method and apparatus, and a file decrypting method and apparatus. The file encrypting method includes the following steps: creating a virtual disk; the virtual disk receiving a writing request from a file system, encrypting data in the writing request; and notifying the file system to write the encrypted data into a corresponding physical disk, so that the file system writes the encrypted data into the corresponding physical disk after receiving a notification from the virtual disk. The methods and apparatuses provided by this invention employ the virtual disk to encrypt data in the writing request and decrypt the data required by the reading request, and this manner achieves highly-reliable, secure and effective file encrypting..