Wince Os-based Security Technology Research And Realization

Along with computer functions more powerful, cost reducing, especially because of hardware cubage reducing greatly, power cost falling, software developing fast and networks prevelence, many electronic productions which can be linked to internet gains ground every aspects of people's life in embedded sysytem modes. The security problems of embedded system become more and more important. Operating system is the core part of the embedded system. If it is not protected well, the security of the application system and the whole embedded system built on it can not be protected thoroughly. Research on security of embedded operating system is on the beginning step, and there are not ripe technologies.This paper, after researching and analysing the security theories and technologies of traditional security operating system, with the characteristics of the embedded system, puts forward a security kernel frame which is suitable for embedded operating system: ESK_EC(embedded security kernel of Win CE). The security kernel has the innovations as below:1. Base on different applications, the system administrator can put up the security policy. He can set up different security levels, and put different security purviews to different security levels.2. This paper puts forward multi-policy model which holds out MLS, DTE and RBAC, and designs the multi-policy integration language.3. In order to ensure high security, this paper adopts MAC technology. Each use of the interfaces will be checked.4. This paper adopts security marker technology. Security marker is mapped to security purviews.5. In the security kernel, in order to pick up the speed of decision-making, this paper adopts decision-making buffer techonlogy. The efficiency of the security kernel is advanced.Base on the theories upwards, this paper realizes the security kernel prototype in the Win CE4.2 operating system. After test, it is indicated that the functions and the...