论文部分内容阅读
随着信息技术的发展,以硬盘为介质的数字化存储成为企业和个人主要信息存储方式,数据存储安全的问题也因此成为信息安全领域不可忽视的重要问题.使用加密硬盘作为存储介质,是企业和个人常用的存储数据保护的方式.对于硬盘数据加密存储而言,密钥的存储和管理是安全性的关注焦点.当前的加密硬盘普遍将加解密密钥存放在硬盘本身,或者在执行运算期间被加载出现在计算机内存中,使得攻击者可以采用直接硬盘读取或者是采用冷启动攻击内存等手段获得加解密密钥,进而存在硬盘内数据被泄露的风险.为了更好的解决上述问题,本文提出了一种基于安全U盘的加密硬盘密钥保护和身份鉴别方案,以安全U盘作为硬盘加密密钥的载体.计算机在启动时从安全U盘引导,在系统启动之前由安全U盘完成对用户的身份鉴别,并将硬盘加密密钥传递给硬盘,从而实现密钥存储与硬盘的物理隔离,保障硬盘解密密钥的安全存储.我们针对此方案实现了原型系统,验证了身份鉴别和密钥保护方案的有效性.
With the development of information technology, the hard disk-based digital storage becomes the main information storage mode for enterprises and individuals, and the problem of data storage security has become an important issue that can not be ignored in the field of information security. Using encrypted hard disk as a storage medium is an issue that enterprises and Personal storage of data commonly used way for the hard disk data encryption storage, the key storage and management is the focus of security.Currently encrypt the hard disk encryption key is generally stored in the hard disk itself, or during the execution of the operation Was loaded in the computer memory, making the attacker can use the direct hard drive to read or cold start attack memory to obtain encryption and decryption keys, and thus there is the risk of data leaked in the hard disk.In order to better solve the above problems, This paper presents a secure U disk encryption key encryption and identity authentication scheme to secure U disk as a hard disk encryption key carrier.Computer boot from the security U disk boot before the system starts by the security U disk Complete the user’s identity authentication, and pass the hard disk encryption key to the hard disk, in order to achieve the key Physical isolation and hard drive storage to ensure secure storage of a hard disk decryption key. We realized a prototype system for this program to verify the validity authentication and key protection scheme.