Access control method and system for Android operation system

Abstract

The invention relates to an access control method and system for an Android operation system, wherein the access control method for the Android operation system comprises the steps of step A, controlling the access of application programs to private data by the private permission set for the application programs; step B, according to a preset strategy for preventing privilege promoting attack and collusion attack, controlling the communication request between the first application program and the second application program. According to the access control method and system for the Android operation system, the safety when a single application program accesses the system resource or user private data is improved, and the safety during communication of multiple application programs is enhanced, so the flexibility of an Android permission mechanism is improved, the collusion attack and privilege enhancing attack can be effectively prevented, and the safety of a middleware layer in the Android operation is greatly improved.

Description

technical field [0001] The present invention relates to the communication field, in particular to an access control method and system for an Android operating system. Background technique [0002] Google's Android has become a popular operating system for smart devices due to the popularity of laptops and tablets and the open-source nature of Android. However, although the market share of mobile smart devices is increasing, the security of mobile smart devices is becoming more and more worrying. Due to the fact that the original Android code is open source, the Android system has become the main target of attacks. Not only are there many Android platform versions, but there are also many types of Android markets at present, and software is emerging in endlessly. Developers with a little development ability can upload it independently. application, so the security of the Android device is severely compromised. [0003] Android's core security mechanism is application signat...

AI Technical Summary

Problems solved by technology

For example, in the sandbox mechanism, privilege escalation attacks or collusion attacks cannot be effectively prevented

For another example, in the permission mechanism, if a user wants to use this application, he must agree to all the permissions, otherwise it cannot be installed, and once the application is installed, these permissions can no longer be changed during the subsequent running process

Images