【摘要】 针对堆栈式加密文件系统eCryptfs存在主体管理粒度粗、多用户数据隔离差等问题进行改进,在eCryptfs密钥管理上,引入BLP模型(Bell&Lapudula模型)的多级安全策略。设计基于多级安全标签生成多级特征密钥框架,系统将分级特征密钥和分类特征密钥引入文件加密密钥的保护中,完成对文件的多级安全保护,并在eCryptfs上进行实现。实验分析结果表明,该多级加密文件系统通过分发给不同主体不同的特征密钥实现敏感数据的隔离,时间开销较小。更多还原

【Abstract】 To solve the problems that the classification of subject is coarse and data isolation protection of multi-users is non-considerable in the eCryptfs,based on key management of eCryptfs,BLP model(Bell & Lapudula model)was introduced to the system.A multi-level key generating framework using security label was designed.In the system,multi-level feature key and multi-category feature key were introduced to protect the file encryption keys.As a result,the system performed well on protecting the multi-level security of files.The design was implied to the eCryptfs.The analysis shows that the multi-level encryption file system guarantees the protection of sensitive information using different feature keys,and it brings little time cost to the system.更多还原