安卓敏感数据和能力的访问控制增强机制研究

摘要

安卓设备中的敏感数据和感知能力面临严重安全威胁。现有的安全机制主要从应用层实施粗粒度访问控制，无法有效保护用户敏感数据和设备感知能力。为此，提出基于密码学和细粒度安全策略驱动的安卓敏感数据和能力访问控制增强机制。首先，结合密钥管理和细粒度加密策略，利用高强度对称加密算法对敏感数据进行加密，解决敏感数据的安全存储问题；其次，应用基于细粒度安全策略的访问控制机制，从安卓平台层控制感知能力的访问权限，实现感知数据保护的目的。通过原型系统和性能测试，提出的安卓敏感数据和能力的访问控制增强机制可以运行在当前安卓平台上，并且性能是可接受的。%Sensitive data and perception capacities in Android devices face severe security threats.Current security mechanism cannot efficiently protect the sensitive data of users and perception capacity of devices,because it only provides a coarse-grained access control on application level.Therefore,this paper proposes an access control enhancement mechanism for sensitive data and capacities in Android, which is based on cryptography and fine-grained security policy drive.First,with the help of key management and fine-grained encryption policy,it leverages a high-strength symmetric encryption algorithm to encrypt the sensitive data and this solves the secure storage problem of sensitive data;Then,the mechanism leverages a fine-grained security policy-based access control mechanism to control the access privilege of perception capacities on layer of Android platform to reach the goal of perception data protection.Through prototype system and performance testing,the proposed access control enhancement mechanism for sensitive data and capacity of Android is able to operate on current Android platform with acceptable performance.