Full Disk Encryption based on Virtual Machine and Key Recovery Scheme

Abstract

Full disk encryption is a good choice to solve the problem of information leakage. In this paper, a full disk encryption based on virtual machine is proposed for computers without TPM. The program to decrypt the operating system is stored in a USB device which is more secure than in hard disk together with confidential information. Its key recovery scheme is with the help of a smartcard which is used for enhancing security. The experiments, security analysis and comparison demonstrate the efficiency, security and advantage of the proposed scheme.