移动云下的终端集中安全管理系统研究  

Study on Centralized Security Management for Mobile Terminal under Mobile Cloud

作　　者：孙鑫红[1] 周君平 杜佳颖[1] 刘勇[1] 

机构地区：[1]北京国富安电子商务安全认证有限公司,北京100176

出　　处：《信息安全与通信保密》2012年第11期82-84,88,共4页Information Security and Communications Privacy

摘　　要：目前移动终端作为行业终端,承载行业应用,在日常办公中的地位日益重要,但移动终端尚未纳入到企事业单位的信息安全系统中,风险较大。文中分析了移动终端面临的风险,包括恶意软件风险、网络传输风险、身份识别风险和设备丢失风险,提出了移动终端集中化安全管理系统的架构以及针对风险的解决方案。在集中化安全管理系统中,移动终端数字证书的分发是一个重要的问题。文中最后分析了两种移动终端数字证书的分发方法并比较了其优劣。Mobile terminal,as a industry terminal,carries industrial application and plays an increasingly important role in daily work. However,the mobile terminal is still not incorporated into the information security system of the enterprise and institution,and thus could cause high risks. The paper analyzes the risks faced by the mobile terminal,including malware,network transmission risk,identity risk,and device-loss risk. Aiming at these risks,this paper discusses the centralized security management system of mobile terminals and the solutions to those risks. In the centralized security management system,how to distribute the digital certificates to the mobile terminals is an important issue. Finally,this paper treats of the two digital certificates distribution methods and compares their advantages and disadvantages.

关 键 词：移动终端 信息安全 集中管理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]