基于SEAndroid的移动设备远程管理  

Remote management of mobile devices based on SEAndroid

作　　者：杨中皇 梁善强 詹维骁 YANG Zhonghuang;LIANG Shanqiang;ZHAN Weixiao(Department of Software Engineering and Management,Kaohsniug Normal University,Ggaoxiong 82444,China;National Engineering Laboratory for Wireless Security,Xi＇an University of Posts and Telecommunications,Xi＇an 710121,China;China Academic of Information and Communications,Beijing 100191,China)

机构地区：[1]高雄师范大学软件工程与管理学系,台湾高雄82444 [2]西安邮电大学无线网络安全技术国家工程实验室,陕西西安710121 [3]中国信息通信研究院,北京100191

出　　处：《西安邮电大学学报》2018年第3期13-20,共8页Journal of Xi’an University of Posts and Telecommunications

基　　金：国家自然科学基金资助项目(61472472)

摘　　要：设计由客户端和服务器构成的移动设备远程管理系统。修改Android开源项目的 policy文档,重新编译得到新的Android内核策略文档sepolicy。客户端根据服务器命令替换移动设备中原有sepolicy,以实现禁止或开启移动设备的相关功能。在服务器端校验应用程序SM3Hash,若Hash错误,则借助Android权限机制远程管理应用程序权限,或远程卸载应用程序。设计的系统通过管理移动设备功能与权限,可防止恶意者窃取重要数据,提高移动设备的安全性。客户端在Android 8.0系统运行,在Pixel 2设备上测试显示,其所有功能都可实现。A remote management system for mobile devices is designed,which is composed of client and server.The policy document of the Android open source project is modified and recompiled to get a new Android kernel policy document sepolicy.The client replaces the original sepolicy in the mobile device according to the command from the server to realize the function of prohibiting or turning on the mobile device.The application SM3 Hash is verified on the server side,if Hash error,the Android permission mechanism is employed to manage the application permission remotely,or uninstall the application program remotely.By managing the functions and permissions of mobile devices,the disigned system can prevent malware from stealing important data and improve the security of mobile devices.The client runs on Android 8.0 system,and tests on Pixel 2 device show that all of its functions can be realized.

关 键 词：移动设备管理 SEAndroid 系统安全 SELINUX 权限管理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]