UTrustDisk: An Efficient Data Protection Scheme for Building Trusted USB Flash Disk

作者：Cheng, Yong^*; Ma, Jun; Ren, Jiangchun; Mei, Songzhu; Wang, Zhiying

来源：KSII Transactions on Internet and Information Systems, 2017, 11(4): 2276-2291.

DOI：10.3837/tiis.2017.04.024

• Integrity Verification
• Data Leakage Prevention
• Removable Storage
• Hash Trees
• Speculative Caching

Data protection of removable storage devices is an important issue in information security. Unfortunately, most existing data protection mechanisms are aimed at protecting computer platform which is not suitable for ultra-low-power devices. To protect the flash disk appropriately and efficiently, we propose a trust based USB flash disk, named UTrustDisk. The data protection technologies in UTrustDisk include data authentication protocol, data confidentiality protection and data leakage prevention. Usually, the data integrity protection scheme is the bottleneck in the whole system and we accelerate it by WH universal hash function and speculative caching. The speculative caching will cache the potential hot chunks for reducing the memory bandwidth pollution. We adopt the symmetric encryption algorithm to protect data confidentiality. Before mounting the UTrustDisk, we will run a trusted virtual domain based lightweight virtual machine for preventing information leakage. Besides, we prove formally that UTrustDisk can prevent sensitive data from leaking out. Experimental results show that our scheme's average writing throughput is 44.8% higher than that of NH scheme, and 316% higher than that of SHA-1 scheme. And the success rate of speculative caching mechanism is up to 94.5% since the access pattern is usually sequential.

• 出版日期2017-4-30
• 单位中国人民解放军国防科学技术大学