Design And Implementation Of The AFACE Access Control Facility Based On LSM On Android Platform

As the rapid development of mobile devices hardware, the prevalence of the high-speed data service, the Web 2.0 boom and the emerging mobile enterprise applications requirements, the mobile Internet is a mainstream of the future direction of telecommunication industry and the Internet. The security of mobile devices will become a complicated and key issue, which will restrict the further development of mobile applications and services. In this paper the author discusses the protection of user private data, and then implements the multi-layered protection to the data files on Android.The mobile software systems are becoming full-featured software platforms. Android is an advanced open-source mobile platform launched by Google recently. It focuses on the next-generation mobile Internet services and is based on the Linux OS kernel. The built-in security model including permission system and application signature is completely designed on the Android application framework, and has no modifications on the underlying Linux kernel, therefore the attackers can easily gain the user private data by bypassing the application framework and even the OS kernel. However, researches on the generic Linux securities can not be applied directly on Android because of the differences between mobile and desktop environment. In this paper, a set of strategies of access control on Android is introduced based on the porting of Linux Security Modules framework to Android, and then the AFACE security module is implemented to protect the files by password and encryption, which is affective to the attacks bypassing the system, and imposes little overhead on performance.The research results also apply to other mobile platforms which use Linux as the OS kernel.