Design and Implementation of a Cryptographic File System for Linux Based on Trusted Computing Platform

A prototype system STEFS (Security and Trusted Enhanced File System) of dependability based on trusted computing platform, which can enhanced the security of the file system in Linux, is presented in this paper. Integrating Linux kernel security mechanism and security storage function of TPM (Trusted Platform Module) efficiently, STEFS provides three dynamic loading modules which are not only file encryption and integrity checking measures, but also multilevel access control mechanism to strengthen the security protection of system sensitive data. The whole system is secured through hardware-based protection and underlying security support relying on TPM chip.