Data Node Encrypted File System: Efficient Secure Deletion for Flash Memory
The authors propose the Data Node Encrypted File System (DNEFS), which uses on-the-y encryption and decryption of le system data nodes to efficiently and securely delete data on ash memory systems. DNEFS is a generic modification of existing ash le systems or controllers that enables secure data deletion while preserving the underlying systems' desirable properties: application-independence, fine-grained data access, wear-levelling, and efficiency. They describe DNEFS both abstractly and in the context of the ash le system UBIFS. They propose UBIFSec, which integrates DNEFS into UBIFS. They implement UBIFSec by extending UBIFS's Linux implementation and they integrate UBIFSec in the Android operating system running on a Google Nexus One Smartphone.