Privilege isolation method and device of Android third-party class library

Abstract

The invention relates to a privilege isolation method and device of an Android third-party class library. The method comprises the following steps of: configuring the privilege information of an application, wherein the privilege information comprises adopted third-party class library information and the privilege endowed to the third-party class library; when the application is started, replacing a sensitive method or function, and calling and redirecting the sensitive method or function to an agent method or function; and obtaining the caller of the sensitive method or function, judging whether the calling is legal or not, if the calling is legal, calling back an original method or function, and otherwise, stopping the calling. The device comprises an interception module, a control module, a checking module and a privilege file. By use of the privilege isolation method and device of the Android third-party class library, the privileges of the Android third-party class library and a host application during operation can be effectively isolated, and therefore, the third-party class library can not use the privilege of the host application.

Description

technical field [0001] The invention belongs to the technical field of system security, and relates to a third-party class library authority isolation method and device, in particular to an Android third-party class library authority isolation method and device. Background technique [0002] The Android third-party class library is widely used in the Android application development process to simplify and accelerate the program development process, provide some better performance or additional functions, etc. However, unlike system class libraries, the security of third-party class libraries cannot be guaranteed. When developers use third-party class libraries, they often focus on the functions they provide, while ignoring their security. [0003] Because Android permissions are granted at the application level, when an Android application including a third-party library is installed, the host application and the third-party library it uses will share all permissions, inclu...

AI Technical Summary

Problems solved by technology

[0003] Because Android permissions are granted at the application level, when an Android application including a third-party library is installed, the host application and the third-party library it uses will share all permissions, including those that do not belong to the third-party application. Caused over-privilege of third-party libraries

Third-party libraries may abuse the permissions of the host application, leading to security issues such as user privacy leakage

However, these works either modify the application installation package or the Android framework, and cannot be widely used

Images