安全的Android移动终端内容保护方案

Project for protecting security of content on Android

为在企业移动管理系统(enterprise mobile management system,EMMS)中实现移动内容管理(mobile content management,MCM),提出一种安全的Android移动终端内容保护方案。通过一个安全的密钥容器,保护文件的加密密钥,确保文档在移动终端上的安全存储;通过Android App的动态分析技术和重打包手段对文档的使用进行限制,防止使用过程中敏感信息的泄露。该方案有效填补了现有EMMS中MCM功能的缺失,且方案的实现是在应用层,确保其具有很好的兼容性,能够适用于不同的Android移动终端。

To support mobile content management in enterprise mobile management system,aproject that ensured the security of content on Android mobile terminal was presented.A secure key container protecting the key was used to encrypt files,so the secure storage of files on the mobile device was guaranteed.Sensitive information in use was protected from being leaked via the restrictions on files imposed by Android dynamic analysis technology and repackaging.The project fills the gap when deficiencies exist in EMMS＇support for MCM.Meanwhile,given that the project was designed to get into use at the application layer,it demonstrates good compatibility and can be applied to different Android mobile terminals.