基于虚拟卷技术的安全U盘研究与实现

发布时间：2018-04-10 03:37

本文选题：安全U盘　切入点：虚拟卷技术　出处：《华中科技大学》2013年硕士论文

【摘要】：随着计算机的普及，U盘已经成为人们日常工作中不可缺少的信息传输工具,但是随之而来引发的安全问题却也成为了人们更为关注的事项。针对U盘中有些信息可以公开，而有些私密信息需要安全保护的需求，本文在分析研究虚拟卷技术的基础上，提出了一个基于虚拟卷技术的安全U盘系统，把普通U盘转变成一个常规卷和一个虚拟的安全卷。其中安全卷内信息使用AES加密算法以加密保护，而常规卷的读写使用和普通U盘完全一样,这样既有效地防止了机密信息的泄漏和扩散，又不失U盘方便、灵活的特性。基于虚拟卷技术的安全U盘关键是要实现安全卷的生成。首先，本文详细介绍了存储虚拟化分类,提出了U盘存储虚拟化实现方案，即在物理卷驱动和文件系统驱动程序之间写入一个安全卷驱动程序。其次，借鉴虚拟磁盘技术研究，得出安全卷生成的技术原理，接着研究了通过Windows卷挂载原理实现安全卷在硬盘上显示，并进一步研究了通过Windows的卷识别原理实现对安全卷内文件访问。再次，分析了Windows的存储管理，主要是Windows对安全卷内文件的I/O操作管理，结合加解密算法的研究，实现了安全卷内文件加解密。最后，，综合应用以上的研究成果，从企业管理实践的角度出发，设计了整个安全U盘系统，并对系统安全和性能进行了分析。
[Abstract]:With the popularity of computers, USB disk has become an indispensable tool for information transmission in people's daily work, but the security problems caused by it have become a matter of more concern.In view of the demand that some information in U disk can be disclosed and some private information need security protection, this paper presents a security U disk system based on virtual volume technology based on the analysis and research of virtual volume technology.Convert a regular U disk into a regular volume and a virtual security volume.The AES encryption algorithm is used to protect the information in the secure volume, and the reading and writing of the conventional volume is exactly the same as that of the ordinary U disk, which not only effectively prevents the leakage and diffusion of the confidential information, but also does not lose the convenience and flexibility of the U disk.The key of security U disk based on virtual volume technology is to realize the generation of security volume.Firstly, this paper introduces the classification of storage virtualization in detail, and proposes a realization scheme of U disk storage virtualization, which is to write a secure volume driver between the physical volume driver and the file system driver.Secondly, draw lessons from the research of virtual disk technology, obtain the technical principle of security volume generation, and then study the principle of Windows volume mount to realize the security volume display on the hard disk.Furthermore, the paper studies how to access the secure files in volume by the principle of volume recognition based on Windows.Thirdly, the storage management of Windows is analyzed, which is mainly the I / O operation management of secure volume files by Windows. Combining with the research of encryption and decryption algorithm, the encryption and decryption of secure files in volume is realized.Finally, the whole security U disk system is designed from the point of view of enterprise management practice, and the security and performance of the system are analyzed.
【学位授予单位】：华中科技大学
【学位级别】：硕士
【学位授予年份】：2013
【分类号】：TP333.2;TP309.7

【参考文献】