Trusted full disk encryption model based on TPM

With the rapid development of information technologies and the rapid spread of information systems, security of data storage has become an important issue in information systems. This paper introduces the data encryption technologies of encrypting file system (EFS) and traditional full-disk encryption (FDE), and points out the problems of data encryption of EFS and FDE. Combined with the features of trusted plateform module (TPM), this paper constructs a trusted full-disk encryption (TFDE) based on TPM. In the model, the hard disk is divided into four partitions, and each partition is encrypted with different keys, and the data of different users is encrypted with different keys too. The model can not only ensure that the data can´t be stolen when the disk is lost or stolen, but also ensure that the data can´t be leaked between different users. Finally the security of the model is demonstrates in depth.