摘要
目前大多数透明加密技术都是依靠监控系统的进程来完成,这样就必须对所使用的软件进行限制,并且根据使用软件的升级而更新,对不支持的软件和进程则无法实现数据加密。文中揭示了一种基于涉密数据流向的透明加解密系统及方法,使得在本地数据的透明加解密不再依赖于对系统使用程序的限制,而是通过对涉密数据流向进行监控,结合对磁盘写入数据进行对比实现。只要对磁盘重要的文件进行指定加密,就既实现了对机密数据的防泄密,又实现了对未涉密数据的有效甄别,防止了过度加密带来的数据交流上的麻烦。
Nowadays the implementation of most transparent encryption technologies relies on the process of monitoring system, so it is necessary to limit the software in use and update the system with its upgrade.And the encryption on the data of unsupported software or progress could not be realized. This paper proposes a system and method of transparent encryption and decryption based on the flow of secret data, and thus the transparent encryption and decryption of local data no longer relies on the restrictions of system program, it is realized by monitoring the direction of secret data and comparing the write-in data of the disk. By encrypting the specific files on the disk, the information security of confidential data and the distinguishment of non-confidential data could be ensured, thus preventing the data exchange trouble brought about by excessive eneryption.
出处
《信息安全与通信保密》
2012年第9期113-115,共3页
Information Security and Communications Privacy
关键词
透明加密
数据流向
防泄密
transparent encryption
data direction
anti leakage
