基于混合加密的 移动存储文件安全系统设计与实现

Design and Implementation of A Security System of Files on Removable Storage Devices Based on Hybrid Encryption

摘要:

针对移动存储设备数据传递过程中面临的信息泄露、内容篡改等安全问题,基于多层嵌套混合加密思想,将 ECC公钥密码体制与 AES高级加密标准相结合,建立操作系统服务层的移动存储文件安全体系。设计了 ECC密钥对存储格式、公钥离线交换机制和基于 ECDH的密钥交换协议。将密钥信息以密文身份认证文件的形式随加密文件同时存储至移动存储设备中；解密时,以身份认证文件和 ECC算法为依据进行解密。设计了二层混合加密和三层混合加密 2种模式,使系统在安全和便捷方面具有一定的弹性,并在提高文件分发灵活度的同时,保证了系统的安全性。经严格测试,系统具有理想的安全性,能够实现对移动存储设备文件的有效防护。

Abstract:

In this paper, a method of building the security system of removable storage file in operating system’s service layer was delivered. Based on the idea of multilayer nested hybrid encryption, the system combined ECC public key sys.tem and AES advanced encryption standard, which solved the problem of information leak and content alteration duringthe process of data transmission among mobile storage devices. A storage format of ECC secret keys, offline exchangingmechanism of public keys and exchanging protocols based on ECDH for private keys were designed. The storing ciphercode was proposed in the form of cipher text authentication file and cipher text to the mobile storage devices, and the au.thentication file and ECC algorithm were used as evidence to decipher. The two modes were designed, such as two-layermixed cryptogram and three-layer mixed cryptogram, which made the security and facility of the system gain much elastici.ty. It enhanced the flexibility of distributing files and ensured the security of the system at the same time. Through rigoroustesting, the system had the desired security level and had the ability of protecting files in mobile storage devices effectively.