Fine-grained access control method for hybrid Android applications

Abstract

The invention discloses a fine-grained access control method for hybrid Android applications. The method comprises: an accessing operation to system resources of an Android device is encapsulated in the form of plug-in objects; different plug-in access permission is granted to network content loaded from different sources in a hybrid application by configuring an access control policy; and when a system resource access operation is triggered by the hybrid application, whether a current request has access permission to the requested resources is judged by an access control framework according to the access control policy so as to control accessing operations on the system resources by different network codes loaded in the hybrid application. Compared with a permission-based native access control mechanism on an Android platform, the method has finer-grained access control and grants different system resource access permission to different network codes in the hybrid applications, so that the use is flexible, no modification is required in Android system and Web pages and the usability is good.

Description

technical field [0001] The invention belongs to the technical field of computer networks, and more specifically relates to a fine-grained access control method for Android hybrid applications. Background technique [0002] Android (Android) hybrid application is a mobile application written and developed using Web technology and Java language; compared with Android native application, the new features of hybrid application developed by using Web technology bring new features that do not exist in native applications. Security issues, especially hybrid applications need to load content from the network and execute network code, and the core component of the hybrid application, WebView, provides interfaces such as addJavaScriptInterface, which exposes access to device resources to JavaScript loaded from the network with unknown credibility Code, so that the resource information and private data on the user's device may be stolen by malicious attackers, bringing security risks. ...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the above defects or improvement needs of the prior art, the present invention provides a fine-grained access control method for an Android hybrid application. Without modifying the Android system itself and the Web page, the Android hybrid application can control device system resources. The distribution of access rights is refined to different network domains loaded in Android hybrid applications to overcome the security issues caused by the Android system's inability to finely control the access of network codes to system resources in Android hybrid applications

Images