Lightweight class privacy data encryption method and system for Android system

Abstract

The invention discloses a lightweight class privacy data encryption method and a system for an Android system and relates to the technical field of mobile communication devices. A to-be-protected sensitive file set is chosen in a file system, an encryption processing module and a decryption processing module are embedded into the Android system, and files in the sensitive file set are encrypted and stored so that a protected data base is generated. When an application program requests to visit the protected data base, a mirror of the protected data base of a plaintext can be obtained after the application program is verified by a secret key. The application program modifies the files in the protected data base by operating the plaintext mirror, and when the visit is over, the mirror is destroyed. The lightweight class privacy data encryption method and the system for the Android system aim at protecting the data base of a base layer of the system, a encryption function of the system can be used normally, a lightweight class encryption mechanism is added to the Android system to protect the privacy data files, and meanwhile system overhead is reduced.

Description

technical field [0001] The present invention relates to a method and system in the technical field of mobile communication equipment, in particular to a lightweight privacy data encryption method and system for an Android system. Background technique [0002] Data storage on mobile smart devices (smartphones, tablet computers) has a lot of security risks, and there are malware that steal private data on various mobile smart platforms. Existing data security storage products mainly use two types of solutions: encrypting data and storing data in secure hardware. [0003] Data storage on mobile smart devices (smartphones, tablets) has high security risks. Due to the existence of a large amount of private data (text messages, contacts, photos, etc.), malware that steals private data exists on every mobile smart platform . At the same time, due to the relatively weak computing power of mobile smart terminals, usually the security protection scheme has to reduce the protection s...

AI Technical Summary

Problems solved by technology

These existing secure storage solutions usually have relatively high overhead. For example, system-wide encryption causes serious performance degradation during data-intensive reading and writing, and secure hardware storage requires additional equipment.

[0005] The existing technology only supports the encryption of the storage medium (disk, flash memory) of the entire device. There are two problems in this encryption scheme: first, the full disk encryption brings a lot of computing overhead. Usually, the first encryption requires 2 -3 hours, and the encryption option is irreversible after it is turned on; compared with our scheme, only negligible time overhead is required, and it supports dynamic opening and closing

Second, the overall encryption scheme is an underlying transparent encryption mechanism, which cannot protect against attacks at the operating system level; our scheme is built-in encryption at the operating system level, which can effectively resist data theft between processes at the operating system level

However, the defects and shortcomings of this technology are: the encryption and decryption process is not transparent enough for users; the added virtual file layer will cause loss of system performance; only the data written to the database is encrypted, and the database itself is not encrypted, which has potential security risks

Images