A Novel Protection Mechanism for Encryption System
Software drive encryption system is difficult to prevent memory attacks,in which,an attacker acquire the physical accesses to the unattended computer,obtains the decryption keys from memory and consequently decrypts the drive.We propose a new method for protecting encryption systems against memory attacks,by converting them to use two tiers of keys,a single Master Key and a set of File or Sector keys.When the computer is unattended,the Master Key and part of the second-tier keys are erased from memory.The method is secure against any type of memory attack,including attackers who gain complete control of the unattended system.Compared to previous methods of protection,which erase keys and shut down the computer,our method allows to keep the computer operational by a combination of cryptographic and operating systems techniques.
Encryption systems Memory attacks two tiers of keys Master Key
Lin Nan
College of Science PLA Information Engineering University Zhengzhou, China, 450002
国际会议
沈阳
英文
1286-1288
2012-07-27（万方平台首次上网日期，不代表论文的发表时间）