Research and implementation of user data cryptographic mechanism based on VFS

摘要

In order to meet the desire of people to modern operation system mobility and to consider the missing or stolen of device that will leak user sensitive data, a method based on Aufs and eCryptfs to build a secure and steady operation system is presented. Meanwhile, the duplicates of user personal modification for system are auto-saved and the user directory is encrypted based on Vnode layer. On boot, eCryptfs file system is automounted which implements encryption transparently for user and applications and ensures data security even the storage device is lost or stolen.