安卓终端系统安全机制研究与设计  

Android OS security mechanism research and design

作　　者：黄静 赵海燕 孙玲玲 HUANG Jing;ZHAO Hai-yan;SUN Ling-ling(China Mobile Research Institute, Beijing 100053, China)

机构地区：[1]中国移动通信有限公司研究院,北京100053

出　　处：《电信工程技术与标准化》2017年第10期11-15,共5页Telecom Engineering Technics and Standardization

摘　　要：移动终端作为用户使用移动信息化业务的载体和入口,成为企业移动信息化安全体系中关键的组成部分。针对终端系统的安全问题,本文对主流终端操作系统的关键技术和安全机制进行了深入研究,比较分析了几种主流系统安全方案,提出一种基于SE Android的双域系统安全技术方案。通过对该方案的系统安全架构、安全访问控制、应用隔离等关键技术和创新工作的详细介绍,说明了该解决方案的可行性和实用价值。As a main carrier and entry of the mobility information services,mobile phone has become the key component of the enterprise secure information system.In order to enhance the security of the popular mobile operating system,the key security techniques and mechanism of mobile operating system and security modules were researched.Based on the deep understanding of the system security mechanism,the article introduces a dual-persona security system solution based on SE Android.By thorough descriptions on key techniques of the solution,including the system security architect,security access control and the application isolation,the article demonstrated the feasibility and practical value of the solution.

关 键 词：系统安全 SELINUX 安全策略 双域隔离 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP316[自动化与计算机技术—计算机科学与技术]