Transparent File Level Encryption

What is the EaseFilter Encryption Filter Driver SDK

The EaseFilter Encryption Filter Driver (EEFD) is a comprehensive solution for implementing transparent, on-access file-level encryption on Windows systems. This SDK enables developers to build applications that automatically encrypt and decrypt files at the file system level, ensuring data remains secure without requiring changes to existing workflows or applications.

Understand The File System Filter Driver

A file system filter driver operates within the Windows kernel, intercepting requests directed at a file system or another filter driver. By capturing these requests before they reach their intended targets, the filter driver can extend or replace the functionality provided by the original target. This mechanism is essential for implementing advanced file security measures. Transparent File Level Encryption

Key Features

Transparent Encryption and Decryption: Files are encrypted before being written to disk and decrypted when read, all at the file system level. This process is seamless to users and applications, requiring no additional actions or temporary files.

AES Encryption Algorithm: Utilizes the Advanced Encryption Standard (AES) algorithm with key sizes of 128, 192, or 256 bits, implemented through Microsoft's Cryptography API: Next Generation (CNG) library. This ensures compliance with U.S. FIPS 140-2 standards.

Per-Process Access Control: The SDK supports defining access rights on a per-process or per-user basis. Authorized processes can access decrypted data, while unauthorized ones receive only encrypted content.

Isolation Mini Filter Driver: Employs isolation technology to create separate views of encrypted files for different processes. This ensures that decrypted data is not inadvertently shared between authorized and unauthorized processes.

Secure File Sharing with DRM: Encrypted files can include embedded Digital Rights Management (DRM) metadata within their headers. This allows for secure sharing, with the ability to control and revoke access as needed.

Use Cases

Data Protection at Rest: Ensure that sensitive data stored on disk remains encrypted and protected from unauthorized access.

Compliance and Regulatory Requirements: Meet industry standards and regulations that mandate encryption of data at rest.

Secure Collaboration: Safely share encrypted files with partners or remote teams, maintaining control over who can access the data.

Secure File Sharing with DRM Protection

The EaseFilter Encryption Filter Driver supports file encryption using an appended header format. This encrypted file header allows you to embed Digital Rights Management (DRM) metadata directly into the file. As a result, encrypted files can carry DRM information, enabling secure file sharing while ensuring the data remains encrypted during transit.

With this capability, you can easily build a secure file sharing solution that gives you full control over access permissions. You can grant, revoke, or set expiration for access rights at any time—even after the encrypted file has been distributed outside your organization.