基于口令锁生成动态组密钥的整盘加密方案

摘要

To solve the problems of hard to maintain system and manage key in practical applications of the full disk encryption mode, this paper puts forward a full disk encryption scheme based on logic password lock by using the generation key structure of two-layer based on password lock.Techniques of dynamic group key and secret splitting and threshold access for security parameters are applied in the scheme, so the scheme achieves respective accesses by multi-users and free storage disk key. Theory analysis and experimental results show that the scheme has higher security and its performance is better than its counterparts.%针对整盘加密模式在实际应用中系统较难维护和密钥管理困难的问题,采用基于口令锁的双层密钥获取结构,应用动态组密钥和安全参数的秘密拆分与门限接入等技术,提出一个基于逻辑口令锁生成组密钥的整盘加密方案.该方案可以实现多用户独立接入,且无需保存磁盘密钥.理论分析和实验结果证明其具有较高的安全性,性能优于同类方案.