Research On The Protection Mechanism Of Android Terminal Sensor Data

With the development of the mobile Internet,mobile terminals represented by smart phones are becoming more and more popular.The advancement of sensor technology and the application of sensors in smart phones have enabled mobile terminals to have rich sensing capabilities,which have facilitated the enrichment of people's lives and brought about huge security risks.With the continuous exposure of security problems in smartphones,the leakage of sensitive information has aroused great concern.Malicious applications can perform feature extraction and machine modeling to identify the user's private information by stealing the sensitive data.Sensor-based attacks on smartphones have become a new way revealing users'privacy under the background of big data and machine learning.Android operating system controls the access to sensors based on the authority mechanism.In addition to several sensitive sensors need to apply for system permissions to use,some sensors are widely used and permissions are not limited,such as gyroscope and accelerometer sensors.Because of the security problems of the permission mechanism,there is a risk of privacy leakage for the malicious Android apps by sensor attacks.In response to the above problems,this paper carries out the following work:1.Design and implement a sensor data protection mechanism based on the Android mobile terminal.The protection mechanism has the ability to intercept the access to sensors,preventing malicious applications from stealing the original sensor data from the underlying system interface;at the same time,malicious applications which request the access to sensors are authenticated,and the sensor data provided for malicious applications will be processed with privacy protection.2.Based on the working principles and attack characteristics of different sensors,various security strategies such as subsampling,data encryption,and data protection based on differential privacy are specifically designed and implemented.Various protection strategies are tested and analyzed in terms of security and effectiveness.The protection mechanism designed in this paper can effectively hide some of the user's sensitive information without affecting the normal functional requirements of the application.Using differential privacy technology,it effectively eliminates the sensitivity to the attacker's background information and greatly improves the privacy protection for sensor data.