Systems and Methods for a Cryptographic File System Layer

Abstract

There is provided a method for use in a computer system including a file system having first directories and second directories. The method includes receiving a write command to write a data file in the file system, obtaining a destination directory location associated with the write command, intercepting the write command, and encrypting the data file, using an encryption key, to generate an encrypted data file. When the destination directory is one of the first directories, storing the encrypted data file in the destination directory location, and applying a first securing process to further secure the encrypted data file stored in the destination directory. When the destination directory is one of the second directories, storing the encrypted data file in the destination directory location without applying the first securing process to further secure the encrypted data file stored in the destination directory.

CPC Classifications