为了实现对电子文档的保护,分析了应用层文件加解密的缺陷,提出了一种Windows平台下的电子文档防泄密系统的设计方法。该方法是通过虚拟磁盘的方式在驱动层对文件的读写进行控制,数据在文件系统层被加密,整个过程对用户是透明的。未经授权的用户不能访问加密后的文件内容,从而有效地实现了对数据的保护。
To achieve the protection of electronic documents,the defects of encryption/decryption in user level is analyzed and a design method of anti-disclosure system for protecting electronic documents under Windows platform is proposed.This method manipulates the read-write of file in driving level by using virtual disk.The data is encrypted and decrypted in file system and all the process is visible to users.The unauthorized users cannot access data in the encrypted file,so the data is effectively protected.