WinShareExt- File Share Security Extension System

Print

File Share Security Enhancer System

(Minifilter Based)

1 Overview

The centralized file sharing feature of Windows is currently a file collaboration method used internally by many enterprises. The file share component integrated in Windows provide the infrastructure for this feature, but some extension function is lacked of or uncompleted on data security, access control and operation audit. FSSES provides 3 additional features for this component, including file data on-the-fly encryption and decryption, more accurate access control rules, access log and operation audit. Deploying this product can also meet the stringent data protection regulations imposed by legislation.  

2 Advantages

It is easy to deploy WinShareExt . It is installed on the computer that provides file sharing services. FSSES does not contains a client side software, so the workload on deploying is notable decreased.

The encryption and decryption module of FSSES does not depends on any Windows component. The encryption key is not related to the windows login password. Unlike Windows encrypted file system, after reinstall of OS or changing password will not affect the encryption method of existing files.

3 Features

WinShareExt is based on a kernel mode minifilter driver. The minfilter framework is highly recommended by Microsoft. It is very convenient to intercept the file I/O requests and insert encryption module on file system stack. It captures the file read request and decrypt the data to make the target application can get the plain data, encrypt the data of file write request to ensure that data on the disk is encrypted.

WinShareExt only filter the directory set by the user and will not encrypt any file outside this directory, so system files will not be encrypted. 

The system supports multiple rule control, including encryption key configuration, file name filter, file name exclusion filter, date control etc.

The system support file access control based on process name, user name, and remote computer name. WinShareExt can identify the file I/O request whether it is from local or remote computer and implement the access control based on these request. The control options are:

CTRL_NO_ACCESS -- The process or user have no access to dir

CTRL_ENCRYPTED_READ_WRITE -- The read/write request of the process or user will be auto decrypt/encrypt by minifilter.

CTRL_DECRYPT_ON_READ_ONLY -- The read request of the process or user will be auto decrypt by minifilter.

CTRL_BACKUP_CIPHER_TEXT-- The read/write request of the process or user will be ignored by minifilter.

WinShareExt integrates the XTEA and AES encryption algorithm into the transparent file encryption core. FSSES can support any type of block encryption algorithm by customized development.

WinShareExt support to authenticate a user or a process to allow them get the encrypted data for file backup.

WinShareExt support access audit. It can audit operation from local user name, remote user, or process. The audit log including file create, access, delete.

WinShareExt provide a shell overlay icon module. It add an small lock icon on an encrypted files.  

WinShareExt supports any type of file system only if the file system is available in windows. The supported file system list includes fastfat, ntfs. WinShareExt is compatible with the encryption and compression feature in ntfs.

Windows 7、Windows 10、Windows 11、Windows 2012 Server、Windows 2018 Server， etc.

4 Support and Services

License type

Clients can evaluate WinShareExt for 1 month. WinShareExt supports two types of license term. 

1. SDK license

The SDK package includes these items shown in the flowing list:

2. Full source code license

The full source code package includes these items shown in the flowing list:

Both SDK and source code license are no limitation on number of copy installation. 

Technical support 

License of WinShareExt includes one year of technical support, including questions, bug support, and access to framework maintenance updates. Licensees will also have options to secure major updates (functional enhancements) and OS upgrades as well.

Custom development 

Some clients may want to customize core components of WinShareExt to meet their product needs. In addition to providing full source license, we can be engaged to provide custom development services to modify WinShareExt to client specifications.