Android Data Security Enhancement Mechanism And Plugin For Personalized Privacy Protection

Mobile intelligent devices provide users with convenient intelligent services,but also bring the risk of privacy disclosure.Under the protection of the native Android permissions mechanism,user grand all permissions that application requested to the application when installing it.But there is a risk of abuse of privacy because Android cannot verify the correlation between permissions and application function.Although there are some works to improving the privacy protection on Android,but there are still three weaknesses.The first is the lack of context-based privacy policy,the second is not applicable to enterprise applications and the third is poor usability.We present a context-aware privacy policy interface that allows users to restrict application accessing to privacy in different contexts.And there are two authorization methods,which according to the characteristics of the data usage,to ensure the application request can be blocked effectively.According to the storage security of enterprise application data in personal devices,a file isolation mechanism based on SEAndroid is proposed to block the access of non-enterprise application to enterprise application files.And we provide a encrypted storage function,to increase the difficulty of non-enterprise applications to obtain enterprise application data.In this thesis,we divide the privacy data according to the relevance of the application function and limit the ability of enterprise applications only obtain data related to the function,so that to reduce the risk of abuse of the user's applicationWe implemented the security plug-in which provides a variety of function included context-awareness,application request capture,privacy policy enhancement and enterprise data encryption etc.Through the functional testing,we verified the availability of plug-in in privacy data and enterprise data protection.By comparing the performance of the system before and after running the plug-in,it proves that the system has less performance loss.