一种Android平台下高性能透明文件加密机制  

A High-Performance Transparent File Encryption Mechanism on Android Platform

作　　者：胡炀[1] 陶敬[1,2] 刘林峰[1] 李剑锋[1] 胡文君[1] 梁肖[1] 

机构地区：[1]西安交通大学智能网络与网络安全教育部重点实验室,西安710049 [2]西安交通大学苏州研究院,江苏苏州215123

出　　处：《西安交通大学学报》2016年第3期120-126,共7页Journal of Xi'an Jiaotong University

基　　金：国家自然科学基金资助项目(91418205);江苏省自然科学基金资助项目(SBK2014021758);苏州应用基础研究计划资助项目(SYG201311);江苏省未来网络创新研究院未来网络前瞻性研究资助项目(BY2013095-4-13);江苏省产学研联合创新资金前瞻性联合研究资助项目(BY2014074)

摘　　要：针对Android平台当前采用的文件加密机制不能兼顾高安全性和高I/O性能的问题,提出了一种新型的基于映射表加密和物理块加密的透明文件加密机制。该机制使用10轮AES-128块加密算法加密文件的逻辑块与物理块的映射关系,使用改进的7轮AES-128块加密算法加密存储文件数据的物理块,从而在安全性和I/O性能之间寻求平衡。通过密码学理论推导证明了该机制的密码强度不低于Android平台当前采用的加密机制,通过I/O性能理论分析得出该机制的I/O性能优于Android平台当前采用的文件加密机制。此外,在Google Nexus 4智能手机上分别对该机制和Android平台当前采用的文件加密机制进行了108种不同测试条件下的I/O性能测试,测试结果验证了I/O性能理论分析得出的结论,并且发现:该机制的I/O写入性能比率比Android平台当前采用的文件加密机制平均高出13.12%,该机制的I/O读取性能比率比Android平台当前采用的文件加密机制平均高出16.16%。It is regarded as a design defect that high I/O performance is not compatible to high security in the file encryption mechanism used nowadays in Android platform. To solve this problem, we presented a new transparent file encryption mechanism based on the mapping chart encryption and physical block encryption. It applies 10-round AES-128 block cipher algorithm to the mapping chart encryption and applies revised 7-round AES-128 block cipher algorithm to physical block encryption, which contributes to the balance between I/O performance and high security. Then we performed cryptanalysis and proved that the cipher strength of our mechanism is not lower than Android＇s. In addition, we have conducted I/O performance theoretical analysis and concluded that the I/O performance of this mechanism is higher than Android＇s. Moreover, we also performed 108 I/O performance tests in different test conditions on Google Nexus 4 smart phone. The result of these tests not only verifies the conclusion proved by I/O performance analysis, but also shows that the I/O writing performance of our mechanism is 13.12% higher than Android＇s and the I/O reading performance is 16.16% higher than that of Android system.

关 键 词：文件加密机制 ANDROID平台 I/O性能 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]