The invention is applicable to the technical field of security control, and provides a file security protection system. The system comprises a client, a server and a communication service layer, wherein the client and the server realize the communication connection through the communication service layer, and the client comprises a virtual encrypted disk operation unit, a file reading and writing request unit and a file filtering driving unit. The file security protection system provided by the invention adopts the driving layer encryption and decryption technology and the virtual encrypted disk redirection technology. Because the file filtering driving is in the driving level, more details of the system can be controlled, the correlation degree with the application program is small, the compatibility with all programs can be realized, in addition, the encryption and decryption operations of the files are respectively completed in a virtual encrypted disk, the encryption and decryption operations in an internal memory of an operation system are avoided, and the occupation on system resources is reduced, so the encryption and decryption efficiency is improved to a great degree.