Research And Implementation Of Document Secure System Based On Minifilter Driver Model

Data file security is an important issue in the field of information security. Theeffective means to prevent the leakage of documents is to encrypt the files stored ondisks, but the traditional user mode encryption software which changes the users’behavior gives the users inconvenience.Based on minifilter driver model, both transparent encryption technology and theprinciple of minifilter driver model are analyzed in the thesis. A document securesystem with a transparent encryption kernel is designed and implemented.The solution and architecture of the document secure system are researched. Thesystem consists of a transparent encryption kernel and a user mode program whichtransmits message through a communication port. The kernel mode program withoutmodifying the existing file system enables the document secure system to encrypt thefiles, and the whole encryption course is transparent to the user. The user mode programwhich is used to control transparent encryption kernel is also designed and implemented.The program provides the following functions: transparent encryption kernelconfiguration, document key management, files safely sharing through LAN, access toremovable disk control and document key recovery. The system stores the user key andthe document separately which improves the data security. The file sharing throughLAN management makes the system be flexible in sharing files in either plaintext orciphertext. The function which controls access to the removable disk ensures that thedocument can not be leaked through the removable disk. The document key recoverymechanism enables the user to decrypt the document in case of USB Key lost ordamaged. On balance, the document is protected in both kernel mode and user mode,the test result proves that it reaches the expected goal.