Implementation of Encrypted File System under Windows

Xu Guodong,Bai Yingcai

DOI: https://doi.org/10.3969/j.issn.1007-757X.2006.05.020

2006-01-01

Abstract:In this paper, we firstly introduce a symmetric algorithm Crypto system and Public Key Cryptosystem with the Key Management. Then we propose an Encrypted File System under Windows, and analyze its availability and security.

What problem does this paper attempt to address?

Research and Implementation of New Encrypting File System

顾正义,黄皓

DOI: https://doi.org/10.16208/j.issn1000-7024.2009.14.050

2009-01-01

Abstract:To solve the problem of file encryption storage in Windows system, the system's lack of Windows EFS is analyzed. In-depth studied key technologies used on development of a file system filter driver, including data processing of I/O request packet in the filter driver, tracing file statues, avoid the system re-entry. Using the teelmology of file system filter driver, a new enerypting file system is designed and implemented. The system is completely transparent to the users. It encrypt specified files, folders or a certain type of files according to the policy placed flexibly by the users. It supports different kinds of file system such as NTFS and FAT. It can also select the encryption algorithm according to the policy. Experiments show that the system has good performance and extend the Windows EFS in both features and applications.
Design and Implementation of Waycryptic, a Versatile Cryptographic File System for Linux

LIN Hao-xiang,DONG Yuan,ZHANG Wei,ZHANG Su-qin,HU Chang-jun

DOI: https://doi.org/10.3969/j.issn.1000-1220.2007.01.026

2007-01-01

Abstract:Recently it has been a focus to protect personal sensitive information. Using cryptographic technique is a promising way. This paper describes the design and implementation of Waycryptic, a versatile cryptographic file system for Linux. By integrating cryptographic technique into file system level, users obtain transparent, dynamic, efficient and secure encryption function without modifying their applications. Encrypted files could be saved on any physical file system which supports extended attributes (XATTR). Waycryptic also permits encrypted files to be shared among multi users and to be easily recovered by designating an account in advance. The results of Iozone and Bonnie benchmarks show that Waycryptic is comparatively efficient and is suitable for personal or multi-user systems which require enhanced security.
Design and Implementation of Transparent Encrypted and Decrypted File System Based on UsbKey

LIU Wei-peng,HU Jun,LIU Yi

DOI: https://doi.org/10.3969/j.issn.1002-137X.2008.11.026

2008-01-01

Computer Science

Abstract:Encrypted file system is an effective method to protect sensitive data of system and user from disclosing on operating system level.This paper first investigates several famous encrypted file system and points out their limits,such as use method,key protection,management and performance,then discusses a scheme of transparent encrypted and decrypted file system based on UsbKey from design objective,architecture,and implementation.This scheme is based on Linux operating system,at the same time,uses UsbKey to storage and protect key.Using LSM framework and redirecting the "read" and "write" operation of inode implement transparent encrypted and decrypted function.This paper gives some lights on the research and implementation of transparent encrypted and decrypted file system in Linux.
Design of Secure Operating System

MAO Weifeng,PING Lingdi,JIANG Li,CHEN Xiaoping

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.12.068

2006-01-01

Abstract:SECOS is a secure operating system with independent intellectual property right,which accords with the requirements of level 4 secure operation system technology.This paper illustrates some key issues of the system,including design method for enchancement of security,improved model from the Bell-La Padula MAC(mandatory access control) implementation,the realization of the model,formal method during the system development,conversiion channel analysis and its prevention,and secure deletion.The performance evaluation shows the design and implementation of SECOS is effective.
THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

SHAO Bing,LU Dong-ming

2000-01-01

Abstract:Data encryption is one of the key techniques for information security. In the beginning of this paper, the present encryption methods are analyzed. Next, we design one practical system which can transmits data in the Internet and has the capacity of digital signature and authentication. Finally, some technical issues encountered in the system implementation are discussed
Techniques of File System Filter Driver-based and Security-enhanced Encryption System

ZHENG Lei,MA Zhao-feng,GU Ming

DOI: https://doi.org/10.3969/j.issn.1000-1220.2007.07.006

2007-01-01

Abstract:User-mode encryption systems require users manually do encryption or decryption when they want to access a file,in some of those systems the file may reside in cleartext on disk while the user is actively working on it.Encryption file systems decrease the user interaction and guarantee the files in disk is in cipher-text,but those systems are complex in design and realization.In this paper the encryption system is based on Windows NT driver model and file system filter driver to deal with data on the fly.It overcomes the disadvantages of both usermode encryption systems and encryption file systems.Additionally,through storing the encryption key in the smart card the system security is enhanced.
Efficient methodology for implementation of Encrypted File System in User Space

Dr. Shishir Kumar,U.S. Rawat,Sameer Kumar Jasra,Akshay Kumar Jain

DOI: https://doi.org/10.48550/arXiv.0908.0551

2009-08-05

Abstract:The Encrypted File System (EFS) pushes encryption services into the file system itself. EFS supports secure storage at the system level through a standard UNIX file system interface to encrypted files. User can associate a cryptographic key with the directories they wish to protect. Files in these directories (as well as their pathname components) are transparently encrypted and decrypted with the specified key without further user intervention; clear text is never stored on a disk or sent to a remote file server. EFS can use any available file system for its underlying storage without modifications, including remote file servers such as NFS. System management functions, such as file backup, work in a normal manner and without knowledge of the key. Performance is an important factor to users since encryption can be time consuming. This paper describes the design and implementation of EFS in user space using faster cryptographic algorithms on UNIX Operating system. Implementing EFS in user space makes it portable and flexible; Kernel size will also not increase resulting in more reliable & efficient Operating System. Encryption techniques for file system level encryption are described, and general issues of cryptographic system interfaces to support routine secure computing are discussed.

Cryptography and Security
Secure Remote Storage through Authenticated Encryption

Fangyong Hou,Dawu Gu,Nong Xiao,Yuhua Tang

DOI: https://doi.org/10.1109/NAS.2008.48

2008-01-01

Abstract:Storage systems are more distributed and more subject to attacks. Cryptographic file system gives a promising way to mitigate the danger of exposing data by using encryption and integrity protection methods and guarantee end-to-end security to clients. This paper describes SRSAE, a generic approach to cryptographic file system, as well as its realization in a distributed data storage environment. SRSAE applies authenticated encryption to each data block transferred between clients and the remote block devices. It provides strong data confidentiality and integrity protections through trusted IV (Initialization Vector) and MAC (Message Authentication Code) comparison. Performance is optimized by buffering IV and MAC locally. Integration into original file system is presented with specific implementation. Related model, approach and system realization are elaborated, as well as testing results. Theoretical analysis and experimental simulations show that it is a practical and available way to build secure network storage system.
A File Encryption Schema Based on Smart Card

DAI Wei,ZHANG Shen-sheng

DOI: https://doi.org/10.3969/j.issn.1006-9348.2005.04.050

2005-01-01

Abstract:There is a file protection mechanism called Disk Partitions Encrypti on on FreeBsd system. When one disk partition is set to encrypted state, all fil es p laced on the partition will be automatically encrypted and people are never cons cious of the fact that the files had been encrypted. When one file placed on the partition is opened and the operator has enough privilege to open the file, the file will be automatically decrypted and people are not conscious of it. If th e hard disk are lost or stolen ,the data saved on the encrypted disk partition w ill not let out. The paper mainly describes on Windows System how to realize a p rotected partition or protected file directory through an encrypt agent and a de crypt agent, like the Disk Partitions Encryption on FreeBsd system. The files ca n be easily dragged to the partition or file directory that have been set to enc rypted state and be automatically encrypted .The files on the partition or file directory can be freely opened , read or modified . Once the files are saved to disk ,they will be automatically decrypted .
Creating Secure File Systems in Open-Source Operating Systems

Nizomiddin Ochilov

DOI: https://doi.org/10.37394/23202.2022.21.24

2022-11-24

WSEAS TRANSACTIONS ON SYSTEMS

Abstract:The relevance of this study is determined by insecure data storage on personal computers, as it is the main operating system that performs authentication and file access control. Bypassing these security rules is possible in case of using another open-source operating system on the same personal computer. The aim of this work is the research and development of file encryptors, disk encryptors and file system encryptors. Each of them has its shortcomings which manifest themselves during development. Combining the advantages of file encryptors and file system encryptors helped to overcome those shortcomings. The userspace filesystem library was used for this purpose. The study involved the methods aimed at designing and developing the Udev daemon file system for Linux using the OpenSSL library. The file system design was mathematically modelled and formally verified through a test parser. The file system also has its own authentication and authorization procedures to provide uniform access across multiple operating systems. The Udev daemon file system is the result of this work. Each file is encrypted with a separate key to protect against cryptanalysis. This key is encrypted with the owner’s private key, thereby enabling him/her to change the ownership. The passphrase is used to decrypt the user’s private key. The developed file system has passed authentication and access control testing successfully. The file system shows best performance with file sizes 1 KB to 256 MB. Encryption-caused performance degradation was also measured and found to be within acceptable limits. This Udev daemon stackable file system is available for all Unix clones with OpenSSL libraries. The prospects for further work are the development of a file system using several combined methods from a list of existing design and development methods for file systems.
DESIGN AND IMPLEMENTATION OF A SECURE NETWORK FILE SYSTEM

Luo Hui,Guan Haibing,Bai Yingcai

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.08.062

2007-01-01

Abstract:Secure network file system can secure the stored data and provide confidence and integrity in opening environment.It should consider such factors as security,performance and convenience when designing a secure file system.The design and implementation of a secure network file system:SecNFS,including its design idea,system architecture,key management,security analysis,share schema and implementation techniques is described.
Design and Implementation of Fast Disk Encryption Algorithm

GAO Wei,GU Da-wu,HOU Fang-yong,SONG Ning-nan

DOI: https://doi.org/10.3969/j.issn.1000-3428.2009.02.050

2009-01-01

Abstract:A fast disk encryption algorithm targeted at the specific application scenario of disk encryption is devised.The new algorithm is a tweakable cipher,and experimental results show that its performance is about 20% better than the algorithm adopted by Windows Vista Bitlocker Driver Encryption in software environment.The algorithm can provide the pseudo integrity protection ability.
Decentralized Secure Distributed Storage System

JIA Ya-ru,LIU Xiang-yang,LIU Sheng-li

DOI: https://doi.org/10.3969/j.issn.1000-3428.2012.03.043

2012-01-01

Abstract:This paper proposes the decentralized secure distributed storage system.The privacy of data is fulfilled by the combination of public key system and symmetric key system.Symmetric key for data from different sources are different,hence encryptions can be implemented in a distributed way.The employment of decentralized erasure code,together with the distributed encryptions,makes possible the decentralization of the system.RS codes are used to store the encryption of symmetric keys,and the list decoding of RS codes ensures the robust.Analysis result shows that the computing efficiency of this system is higher.
Electronic Documents Protective System for Information Leakage on Internal Network

Wu Qingtao,Hu Yuanyuan,Yang Xintong

DOI: https://doi.org/10.3969/j.issn.1009-6833.2010.06.016

2010-01-01

Abstract:Aiming at the information leakage on the Intranet,an electronic documents protective system based on Windows NT Core operating system-driver framework is developed,which implement transparent encryption and decryption on the electronic documents with file system filter.System evaluation shows that it is effective for protecting the electronic documents on the itrnanet.
SoK: Untangling File-based Encryption on Mobile Devices

David Galindo,Jia Liu,Chris McMahon Stone,Mihai Ordean

DOI: https://doi.org/10.48550/arXiv.2111.12456

2021-11-24

Abstract:File-based encryption (FBE) schemes have been developed by software vendors to address security concerns related to data storage. While methods of encrypting data-at-rest may seem relatively straightforward, the main proponents of these technologies in mobile devices have nonetheless created seemingly different FBE solutions. As most of the underlying design decisions are described either at a high-level in whitepapers, or are accessible at a low-level by examining the corresponding source code (Android) or through reverse-engineering (iOS), comparisons between schemes and discussions on their relative strengths are scarce. In this paper, we propose a formal framework for the study of file-based encryption systems, focusing on two prominent implementations: the FBE scheme used in Android and Linux operating systems, as well as the FBE scheme used in iOS. Our proposed formal model and our detailed description of the existing algorithms are based on documentation of diverse nature, such as whitepapers, technical reports, presentations and blog posts, among others. Using our framework we validate the security of the existing key derivation chains, as well as the security of the overall designs, under widely-known security assumptions for symmetric ciphers, such as IND-CPA or INT-CTXT security, in the random-oracle model.

Cryptography and Security
An Encrypted File System Based on Trusted Computing Platform

ZHANG Qin,LIU Shu-ming

DOI: https://doi.org/10.3969/j.issn.1002-2279.2008.01.014

2008-01-01

Microprocessors

Abstract:Ordinary encrypted file system can protect the content of files,and the encrypted file is bound with the relevant key.But,the key is just protected securely by the short password.This is a defect for the system and this question need to be solved exigently.This paper proposes a method based on TPM key-tree and data check-up with HMAC.The TPM key-tree encrypts all keys in file system and binds the keys with the TPM platform,thus,keys are protected safely and security of the whole system is enhanced.The data check-up with HMAC not only ensures security but also improves the performance of integrality check-up.
An Anti-forensic Scheme Based on Symmetrical Encryption and Steganography

Can WANG,Zhi-guang QIN

DOI: https://doi.org/10.3969/j.issn.1673-5439.2009.03.005

2009-01-01

Abstract:In this paper, a anti-forensic scheme based on symmetrical encryption and steganography is proposed. According to the scheme, the secret file is processed by the algorithm of symmetrical encryption and XOR, and it can not be reconstructed by the attacker even the symmetrical key is revealed. The contradiction between convenience of short key and security of long key, which exists in traditional symmetrical encryption, is mitigated by the scheme. The difficulty of cracking is notably augmented with a low cost and there is no special requirement on the carrier files using in steganography. So the scheme is suitable for the application environment of anti-forensic. On the basis of the scheme, a prototype tool, which is called StegEncrypt, is developed in Windows platform. This command-line tool can be used to make it hard to decrypt the files, which are to be saved or transferred, by force.
Design and Implementation of Virtual Cryptographic Device System

ZHU Ying-hong,SHEN Bei-jun,JIN Bo

DOI: https://doi.org/10.3969/j.issn.1000-3428.2011.10.036

2011-01-01

Abstract:Virtual machine,instead of the local terminal,communicates with application server in virtual environment.However,the virtual hardware may not support the interface of the cryptographic device when virtual machine uses the local cryptographic device.This paper proposes to develop Virtual Cryptographic Device System(VCDS) as the intermediate party,which combines the real cryptographic device plugged into the local terminal and the application layer of virtual terminal.It describes the designs of the core modules,as well as the implementations of VCDS,and analyzes its security.This system helps to ensure the transparency when virtual terminal using local real cryptographic device,and provides a good service of encryption,authentication and so on.
A new storage method of file key

Yang Jianxin

DOI: https://doi.org/10.3969/j.issn.2095-2783.2011.04.003

2011-01-01

Abstract:Many access control mechanisms are employed in modern operating system to safeguard confidentiality and integrity of data.However,if malicious users can get around these mechanisms,then these mechanisms will be useless.Cryptographic technology should be applied to add a last line of defense.Encrypted file system is one of the important methods,and the storage of file key has top priority in encrypted file system.However,current storage methods of file key cannot satisfy the need of expansibility.A storage method of file key based on extended file attribute is proposed.By implementing this method in ext2 file system we can see that it can be easily integrated into current file systems and satisfy the efficiency requirement of data encryption.
Driver Development of Encryption Card in Secure Storage Area Network

Jianliang Xie

2009-01-01

Abstract:The secure threads and the responded strategies of Storage Area Network (SAN) were illuminated. A secure system based on a hardware encryption card was proposed. Windows Driver Foundation (WDF) was introduced, which was Microsoft s next-generation driver-development model. At last some tactics in developing the encryption card driver based on WDF were described.

Implementation of Encrypted File System under Windows

Research and Implementation of New Encrypting File System

Design and Implementation of Waycryptic, a Versatile Cryptographic File System for Linux

Design and Implementation of Transparent Encrypted and Decrypted File System Based on UsbKey

Design of Secure Operating System

THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

Techniques of File System Filter Driver-based and Security-enhanced Encryption System

Efficient methodology for implementation of Encrypted File System in User Space

Secure Remote Storage through Authenticated Encryption

A File Encryption Schema Based on Smart Card

Creating Secure File Systems in Open-Source Operating Systems

DESIGN AND IMPLEMENTATION OF A SECURE NETWORK FILE SYSTEM

Design and Implementation of Fast Disk Encryption Algorithm

Decentralized Secure Distributed Storage System

Electronic Documents Protective System for Information Leakage on Internal Network

SoK: Untangling File-based Encryption on Mobile Devices

An Encrypted File System Based on Trusted Computing Platform

An Anti-forensic Scheme Based on Symmetrical Encryption and Steganography

Design and Implementation of Virtual Cryptographic Device System

A new storage method of file key

Driver Development of Encryption Card in Secure Storage Area Network