一种基于Linux容器机制的系统级双域隔离方案

A System-Level Dual-Domain Isolation based on Linux Container Mechanism

智能手机已经成为人们社交、娱乐、办公、支付等生活方方面面均不能或缺的终端平台,移动终端信息安全已成为全社会关注的问题。如何满足用户在同一台智能移动终端上同时处理办公流程、移动支付、社交及娱乐的需求?本文提出一种基于Linux容器机制的系统级双域隔离方案,在不影响用户体验的前提下,为智能手机用户提供满足社交娱乐、移动办公、移动支付及个人隐私保护需求且相互隔离的系统运行环境。

Intelligent mobile phone now becomes a necessary terminal platform for social contact, entertainment, official business, payment and other aspects of life, and the information security of mobile terminal also a problem concerning the whole society. How to meet the needs of users on the same platform to handle official-business processes, mobile payments, social contact and entertainment by intelligent mobile terminal is a problem demanding prompt solution. Thus a system-level dual-domain isolation scheme based on Linux container is proposed, this scheme could satisfy various requirements of the users, including social contact ,entertainment, mobile office, mobile payment, personal privacy protection and mutually-isolated system operating environment.