Android平台细粒度权限管理系统的研究与实现

Exploration and Implementation of Fine-Grained Permission Management System for Android Platform

由于Android平台的开源性,它拥有庞大的用户数量,而其本身的提供的粗粒度安全机制,如沙盒、权限控制、应用签名等,已经不能满足用户日益增多的需求。所以,Android粗粒度安全机制下存在安全问题急需解决。借鉴Android细粒度的权限管理机制,设计实现了对用户隐私数据的提取进行权限控制。该系统能够分析隐私权限,并且用户在授予权限时能够拥有选择的权利,从而增加Android系统权限控制的安全性,同时大大提高对隐私数据的安全性控制。

Due to its open-source nature, Android platform has the vast number of users, and the coarse-grained security mechanisms provided by itself, such as sandbox, permission control, application signature, can no longer meet the increasing needs of users, so the security issue existed in Android coarse-grained security mechanism requires a prompt solution. So with reference on the fine-granularity management mechanism of Android, the permission control of the extraction for user privacy data is designed and implemented. The system can analyze the privacy authority, and the user can have the right to make selection when the authority is granted, thus increasing the permission-control security of Android system. And at the same time, the security control of private data is greatly improved.