一种增强型Android组件间安全访问控制方案  

An Enhanced Security Access Control Scheme for Intercomponent Communication in Android

作　　者：余丽芳[1] 杨天长 牛少彰[1] 

机构地区：[1]北京邮电大学智能通信软件与多媒体北京市重点实验室,北京100876

出　　处：《信息网络安全》2016年第8期54-60,共7页Netinfo Security

基　　金：国家自然科学基金[61370195];国家自然科学基金联合基金[U1536121]

摘　　要：Android智能移动终端迅猛发展的同时,其安全问题也层出不穷,而且Android系统自身提供的沙箱机制,签名机制和权限访问控制也存在着缺陷,无法应对目前出现的各种安全问题。针对权限访问控制机制对组件通信保护存在的不足,文章提出了一种增强型安全访问控制方案,该方案利用签名机制对组件进行签名,在Android Framework层对需要进行安全保护的组件通信进行签名验证,以实现增强型的组件安全访问控制。实验结果表明,该方案能够对控制访问的通信过程进行有效地审核,提高了组件通信的安全性。With the rapid development o f A n d ro id smart m obile devices, its security issuesemerge in endlessly. However, the sandbox mechanism, signature mechanism and access control o fpermission provided by Android system has its drawbacks, and unable to cope w ith a variety o f securityproblems at present Given the lack o f access control mechanisms for the protection o f communicationcomponents, this paper presents an enhanced security access control scheme, in w hich signaturemechanism is used to sign the components in the scheme and achieve enhanced security access controlfo r components communication need to be protected, and certificate verification is checked in theAndroid Framework layer. Experimental results show that the scheme can be effective for the securityaccess control o f process validation, and improve the security o f the communication component.

关 键 词：ANDROID 权限访问控制 签名机制 安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]