The design and implementation of the kernel level mobile storage medium data protection system

摘要

After decryption, the data in mobile storage is lack of the protection from encryption. To solve this problem, our team proposed an aprotection scheme for classified documents, which is based on kernel level file filtering system, implements a set of data protection system for mobile storage medium. First, through the transparent encryption technology, ensure that unauthorized visitors cannot access classified documents; Then through the file redirection technology, make sure that the decrypted data is under the comprehensive protection when authorized users are in the normal using process; Finally, clear the temporary file on the disk and the data trace in the memory, ensure that no using trace left on the computer. Experimental results show that this project has realized comprehensive security protection for classified documents, and achieve the goal that classified devices can be used on unclassified computer safely.