| With the continuous development of modern automotive industry and electronic technology, in-vehicle information system has been developing from simple radio, dashboard to the integrated GPS navigation, voice communication, mobile office, multimedia entertainment, security auxiliary, remote monitoring and diagnostic system.But during the transition stage of functional to intelligent vehicle, the relatively barren application on in-vehicle center console has been far behind the Mobile Internet age. Therefore, setting up information sharing platform integrating smartphone to speed up the mobility, interconnectivity and sociability, has become the first scheme of auto enterprises at home and abroad. Meanwhile, security concerns such as legal remote control and system destroyed by malicious applications are starting to expose. The legal access to in-vehicle resources can be extremely dangerous for a moving car.On the basis of the domestic and foreign research status of IVIS, by virtue of Android’s openness and extensibility, this paper designed a vehicle resource access control mechanism and set up information sharing platform with the mobile terminal Specific to Android existing security mechanism, put forward a few points to increase system security. The main work as following:1) Study each module protocol in MirrorLink framework, set up information sharing platform with between mobile devices.2) Analyze Android permission mechanism, design and implement in-vehicle resource access control mechanism.3) Apply SEAndroid to enhance the system security, for the automotive special feature, the key resource are protected by custom strategy.4) In order to guarantee the security of remote access, put forward a set of permissions division according to user role, apply the certificate-based authentication way to ensure the legitimacy.5) Study the scheme of malicious application detection, in order to avoid the privilege escalation leak, select static testing technology to determine the security of application during installing period. |