电子文档安全管理技术研究与实现.docx

电子文档安全管理技术研究与实现翟慧卿 1，程卫双 2，黄杰 3(1. 北京工贸技师学院智能楼宇系，北京 100079；2. 北京汉邦高科数字技术股份有限公司 NVR研发部；3. 北京吉利大学信息工程学院)摘 要：设计并实现了一个具有文件安全保护能力的终端文档安全保护系统。在技术上主要采用内核与应用层相结合 的方法来实现文档透明加、解密。在内核层实现功能上的控制，而在应用层实现相应的权限控制和策略制定。在操作系 统内核对访问电子文档的进程进行审核与控制，利用文件系统过滤驱动技术过滤掉非法进程对文档的读取。对于拥有 访问权限和安装该系统的客户端用户，才可以正常读取加密的电子文档，排除了电子文档泄密的可能，实现了对电子文 档的安全管理。关键词：电子文档；加密；解密；文件系统过滤驱动中图分类号：TP309.7 文献标志码：A文章编号：1006-8228(2014)01-21-02Research and realization of security management of electronic documentsZhai Huiqing1, Chen Weishuang2, Huang Jie3（1. Department of intelligent building system, Beijing Industry and Trade Technicians College, Beijing 100079, China;2. NVR RD team, Hanbang Technology Corp.Ltd.; 3. Information Engineering College, Beijing Geely University）Abstract： A safety protection system is designed and implemented, which can protect the terminal electronic documents. It is mainly applied to the encryption and decryption transparently and provides safety management services for users on the electronic documents. A combination method of kernel and application layer is mainly adopted technically to implement the encryption and decryption documents. The function of control will be realized in kernel layer. The access control and strategy selection will be implemented in application layer. In the operating system kernel, the system can audit and control the accessing process of electronic documents. Besides this, in order to prevent reading the file illegally, the system can filter out the unauthorized reading processes. But the users having the access authority and the client software can read the encryption documents normally. It solves the possibility of file leakage. The safety protection of the document is realized.Key words：electronic document；encryption；decryption；file system filter driver0 引言近年来，信息化技术不断深入到了人们生活中的各个领 域，以电子形式存在