摘要： 针对传统应用层加密系统每次使用都需要输入口令，使用复杂且安全性不高，而设备驱动层加密系统紧耦合于操作系统及其组件，实现繁杂等问题，在Windows NT内核框架下利用文件系统过滤驱动实现数据加解密的安全保护系统。结果证明可以对存取中的数据进行动态透明的加解密，使用方便安全，支持多种文件系统。从安全性和性能上对比了该加密系统与Windows EFS加密文件系统。

关键词: 文件系统过滤驱动, 加密, 加密文件系统

Abstract: User-mode encryption system with low security needs much interaction and the device drive encryption system compacted with operation system is complex in design and realization in general. A method based on file system filtering drive of Windows NT kernel to achieve the security of confidential data is proposed. The method can be used to encrypt storage data dynamically and transparently, and decrease the user’s interaction and support multi-file system. The security and performance of this encryption system are compared with Windows Encrypting File System(EFS).

Key words: file system filtering drive, encryption, Encrypting File System(EFS)

中图分类号: 

• TP393.08