移动智能终端信息防泄漏模型的研究及应用  

Research and application of mobile intelligent terminal data leakage prevention model

作　　者：陈超群[1] 李志华[1] 闫成雨 胡振宇[1] 

机构地区：[1]江南大学物联网工程学院,江苏无锡214122

出　　处：《计算机工程与设计》2016年第10期2632-2638,共7页Computer Engineering and Design

基　　金：江苏省科技厅产学研前瞻基金项目(BY2013015-23)

摘　　要：针对移动智能终端信息防泄漏问题,提出轻量级SMS4加密算法、基于设备动态特征和用户身份信息的双向双因子认证技术。基于上述研究,与透明加/解密技术相结合,进一步提出一种移动智能终端信息防泄漏安全存储模型。以Android客户端、云存储服务器端为例,研发一个基于上述安全存储模型的应用系统,系统能够保证文件一旦离开移动智能终端就以密文形式存在,只有重新回到移动智能终端时才能被解密成明文,实现对用户文件的全生命周期保护。Aiming at the problems of preventing information leakage of mobile intelligent terminals,a lightweight SMS4 encryption algorithm was proposed.And more,a two-way two-factor authentication technology based on the dynamic characteristics of the facility and users＇ identity information was also presented.Integrating the above innovation,a security storage model for preventing information leakage of mobile intelligent terminals SMPILMIT was given.The model realized that a file could be preserved in its full life-cycle.Taking Android platform and cloud computing for examples,apractical system based on the proposed security model was developed.In the system,once a file left the platform of a mobile terminal,it existed in the form of ciphertext,and when it came back to the original mobile terminal,it could be decrypted into plaintext,and the full life cycle protection for users＇ files was then realized.

关 键 词：移动智能终端 轻量级SMS4加密算法 双因子双向认证 透明加/解密 安全存储模型 数据防泄漏 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]