Method for Ensuring Data Privacy on the Computer's Internal Hard Disk

摘要

The problem of data protection on external storage devices has been relevant for a long time and does not lose its relevance to this day. To solve it, various methods are used: access control at the level of computer systems, at the level of user accounts, physical restriction of access, control of the operating system load, file encryption, disk encryption. Each of these methods has its pros and cons-some are quite reliable, but require significant costs, the second-less expensive, but also less reliable, the third-require serious organizational measures and restrictions, etc. in fact, the most reliable are encryption provided sufficient cryptographic algorithm and key length, as well as the use of unique identifiers, both hardware and biometric. In this paper, we consider a method of data protection on the hard disk of a computer system, based on full encryption of the partition containing the operating system and confidential data, as well as on the concealment of the fact of the presence of data on the disk when using an additional installed alternative operating system. Thus, loading of the main OS and data decryption is possible only in the presence of the USB-carrier containing the loader and key information, provided knowledge of the password phrase by the user.