The Key Technology Research And Realization Of Android Privacy Protection System

Android is a powerful smartphone operating system,which is based on the Linux open source system.Android system can quickly build up application solutions,and also the security issues caused by its openness have become increasingly prominent,many applications have the action of excessive application of permissions in order to steal personal information,among those information,SMS messages,contact information and call record are easy to access,and the access to hardware may lead to more sever consequences like candid camera.Therefore,the study of privacy protection technology under Android platform is of great significance to improve the security of Android system and prevent potential safety hazard as well as property loss caused by privacy information leakage.This thesis mainly did the following work:1 ? By analyzing the domestic and foreign literatures,this paper analyzed the Android system architecture,the security mechanism and its hidden dangers and loopholes,investigated the related technology of the privacy protection of the Android platform,and studied the Xposed framework and the realization of privacy protection technology under this framework.2?Presently,the existing privacy protection applications rely too much on users,the function and the protection of privacy data is not comprehensive.In order to solve those problems,this paper presents a function-based data access rationality detection model,to offer an objective and scientific judgement of the rationality of an application's data access,and reduce the dependence of users.The use of permission control,false data return and data tracking provide comprehensive protection to private data.3?Based on the Xposed framework,through intercepting the methods to access privacy data to achieve the control of the applications' permissions,return false data to an application and track the usage of private data.In this way we can avoid the re-packaging of an application,the crash problem caused by empty reply and track the behavior of the application in the actual runtime.4 ? The system is encoded by Java,functions offered are: dynamic permission supervision and management,application runtime data access tracking,file encryption and remote data destruction;The privacy data and system equipment protected are:short message,call records,album,Contacts,device information,camera,audio and video,network status,geographic location information,and SD card data.Through the test and verification,the system function and performance are in line with the expected objectives,and the test verified the system's effectiveness of privacy data protection.This paper provides a good reference value for the research and application of user privacy data protection technologies under Android platform.