采用容器技术的多Android系统的研究与实现  

Research and Implementation of Multiple Android Systems Based on the Container Technique

作　　者：杨霞[1] 孙超群[1] 

机构地区：[1]电子科技大学信息与软件工程学院,成都610054

出　　处：《小型微型计算机系统》2016年第7期1422-1427,共6页Journal of Chinese Computer Systems

基　　金：国家核高基重大专项项目(M1401060112ZX0103301)资助;国家科技支撑计划项目(2012BAH44F00)资助

摘　　要：为增强Android操作系统的安全性和功能可定制性,在分析当前的虚拟化技术后,提出一种基于容器技术的方法使多个Android系统同时运行在一个设备上.首先,通过采用容器技术和虚拟化技术在Linux内核中生成多个相互隔离的运行空间,为了在每个空间中独立地运行一个Android子系统,实现了显示设备、Binder驱动、GPU的虚拟化.然后,研究并实现了Android子系统之间的切换技术.最后,通过实验原型和测试数据验证了所提方法的可行性.由于各容器之间相互隔离、互不影响,很好的保护了用户数据的隐私.此外,即使某一个Android子系统出现运行故障或者被恶意攻击,其它子系统照样可以正常运行,从而提高了整个系统的安全性.同时,各子系统的应用和功能可以根据不同的应用场景特别定制,可满足用户的个性化需求.To enhance the security and customizability of Android system,a method based on the container technique on the Android system is proposed in this paper through analyzing the current virtualization technology. It can run multiple Android systems on one device simultaneously. First of all,we create multiple isolated operation space in the Linux kernel by using container and virtualization technology. In this paper we also implement the display device,Binder driver and GPU virtualization for running an Android subsystem independently in each separated space. Then,this paper designs and implements a switching technology between the Android subsystems. Finally,in order to verify the feasibility of this proposed method we design a prototype and make a lot of tests.Due to each container isolates from each other,this approach can effectively protect security of user＇s data. Even if there is a running fault or malicious attacks in one of the Android subsystems,the other subsystems can still working correctly. So it can improve the security for whole system. And,the Applications and functions of each subsystem can be particularly customized to meet different requirements of users.

关 键 词：ANDROID操作系统 空间隔离 安全性 容器技术 虚拟化技术 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]