摘要
Symbian OS v9.x引入了新的基于能力的系统安全模型,以构建一个可信计算平台。为了理解安全模型对应用开发的影响,深入分析了基于能力的安全模型,首先阐述了为什么进程是可信的基本单元,然后说明如何使进程和能力联系起来,并解释了相互访问的可执行文件的能力应满足一定的关系。数据锁定实现了对重要数据的访问控制,而应用程序签名机制则保证只有合适的应用程序才能安装到手机上。对应用程序签名流程的简化和改进还需要进一步的研究。
The capability-based security model has been introduced into Symbian OS to construct a trusted computing platform for Symbian OS v9. x. To understand the difference after the security model has been introduced, this paper analyses the capability-based security model. It firstly expatiates why the process is the unit of trust, then explains how to associate a process with some capabilities and what are the relation among capabilities of different processes with interaction. Data caging provides access control to sensitive data and Symbian signature ensures that only properly signed programs can be installed into device. More research work is needed to simplify and improve the process of applications signing.
出处
《北京机械工业学院学报》
2008年第4期58-61,共4页
Journal of Beijing Institute of Machinery
关键词
可信单元
能力
可信计算平台
数据锁定
the unit of trust
capability
trusted computing platform
data caging
