基于API HOOK技的文档透明加解密系统.doc

摘要 随着计算机网络和通信技术的迅猛发展，人与人之间的交流，企业间的生意往来越来越依赖于网络。大量的信息需要存储，因此伴随而来的就是数据文件的安全问题。数据文件的安全对于个人、企业甚至国家机构都有很重要的作用。针对日益严峻的文件安全问题，目前的主要解决方案就是加密。 比较有效的加密技术主要包括磁盘加密技术、在应用层的透明加密、在驱动层的透明加密。其中在应用层加密通常采用 API（Application Programming Interface,应用程序编程接口） HOOK（俗称钩子）技术，而在驱动层加密通常采用文件过滤驱动技术。这些技术都能够控制磁盘上的数据文件以密文的形式存储，这样既不影响用户的体验，又能够保护数据。 在各种技术中，本文主要研究基于API HOOK技术的文档透明加解密系统，该系统无需改变用户习惯，并且保证了文档的安全性。之所以选择API HOOK技术，主要由于它是最靠近应用程序I/O接口，使文件数据在内存中以明文形式存储的时间最短，只要做好进程保护，就能保证数据文件的安全，当API函数对文档进行写（write）操作时，自动将明文进行加密转换为密文存储；当进行读（read）操作时，系统自动将文件解密。通过对部分API函数的设计应用实现对文档透明加解密系统实现。 关键词：透明 加解密 API HOOK 过滤驱动 Abstract With the rapid development of computer networks and communication technologies,communication between people, business dealings between enterprises increasingly rely on networks.Need to store large amounts of information,and therefore the safety of the data file is accompanied .Safety data files for individuals, businesses and even national institutions have a very important role. For the increasingly serious problem of document security, the current main solution is to encrypt． More effective encryption technologies include disk encryption, encryption application transparent layer, the transparent layer is driven encryption.Which commonly used in the application layer encryption API (Application Programming Interface, Application Programming Interface) HOOK (commonly known as hooks) technology, while in the driver layer encryption technology commonly used file filter driver.These technologies are able to control the data files on the disk is stored ciphertext, so will not affect the user experience, but also to protect data. In a variety of techniques, this paper based on documentation API HOOK technology transparent encryption and decryption system that didnt　need to change user habits, and to ensure the security of the document.API HOOK technology was chosen primarily because it is closest to the application I / O interfaces, so that the file data in memory is stored in plain text shortest t