A Transparent File Encryption Scheme Based on FUSE

Transparent file encryption is an important means to protect file data security. However, for the traditional file encryption system based on file filter driver, constant cache cleaning is required to ensure the correctness of the data in the cache, which greatly reduces the efficiency of file operations. In the paper, a transparent file encryption system based on FUSE (File System in User Space) is proposed to overcome the shortcomings of the traditional transparent file encryption systems. To avoid cleaning the system file cache frequently, file redirection is adopted to transfer file operations to FUSE, which processes the file operations initiated by the trusted processes and non-trusted processes differently, with respect to cache. This system can not only be used for local file protection, but can also be applied to secure the files on cloud storages.