【作者】 廉喆；

【导师】 张笑燕； 赵方；

【作者基本信息】 北京邮电大学 ， 软件工程， 2010， 硕士

【摘要】 随着移动通信技术的发展,移动互联网将成为未来人们数字化生活的重要环境。手机作为移动互联网的接入设备之一,其功能已日益丰富。人们可以利用手机进行各种活动,如手机办公、手机支付、手机娱乐等等。手机将继PC之后,成为人们日常生活的必备工具。然而,手机应用发展的同时也存在安全问题。手机和传统PC一样,软硬件并非天然安全,其中软件漏洞、硬件缺陷在所难免。手机病毒、木马等恶意软件的出现,不断提醒着人们手机环境的不安全性。为此,研究人员提出了各种保护技术和方法。如手机防火墙,手机杀毒软件,文档加密系统等。这些防范措施主要目的就是防止重要资源被非法访问、篡改,以免无法使用等问题的产生。手机文档信息是手机终端应用非常需要保护的资源之一。为了方便使用,人们可能将一些办公文档、个人隐私信息等以文档的方式存储在手机上,然后通过手机中的各种应用软件进行处理,如进行移动办公,信息共享等活动。这些环节中必然会存在一些不安全因素,导致手机文档存在很大安全风险,因此,急需研究适合手机文档的保护.技术来解决这类问题。传统的文档保护技术有内容加密技术、访问控制技术等。这些技术都在某些方面为文档安全提供了服务保障，成为文档保护系统设计的一些主流思想。但是,手机应用的自身特点决定了某些传统PC上的文档保护方案并不适用于手机平台。在将这些方案移植到手机平台上时,更需要考虑手机的运算能力、软件环境以及用户体验方面的需求。因此,设计性能影响小,易用性好的文档保护技术是一个非常有意义的课题。本文重点研究了主流手机操作系统下的文档保护技术,论文在分析传统文档保护技术基础上,提出了一种适合手机平台文档保护方案。新方案在虚拟文件系统中嵌入安全模块,实现了诸如加解密、访问控制、密钥更新等功能。该方案中应用程序与安全模块相互独立,在提供文档安全保护的基础上保持了原有的用户体验效果,对于非法访问则提供了强有力的防控功能。本文还对该方案进行了详细的说明,实现了一个系统原型。实验结果证明,本文所提出的方案是可行性。更多还原

【Abstract】 With the rapid development of mobile communication technology, mobile Internet will become people’s important environment of the future digital living. As one of the access devices of mobile internet, the mobile phone’s functions are increasingly rich. It can be used in various activities, such as mobile office, mobile payment, mobile entertainment and so on. As the PC, the mobile phone will become an indispensable tool of daily life. However, we have to face the safety issues behind the development of mobile applications. The mobile phone’s environment is not the natural safety, which means the software flaw and hardware defects are always inevitable. Various mobile viruses, Trojans and other malicious software become more and more, which proves the insecurity of the mobile environment. To this end, researchers have proposed various protection technologies and methods include mobile phone firewall, mobile phone antivirus, file encryption system and so on. The main purpose of these measures is to prevent happen unauthorized access, tampering and denying using to important resourcesDocument Information is one of important resources that need to protect. People may store a number of office documents, personal privacy information on the phone in daily work and life, such as in mobile office, information sharing and other activities. These activities will inevitably include some unsafe factors, result to a big security risk in cell phone documents. Therefore, it is necessary and important to study the document protection technology of mobile phone to solve such problems.Traditional document protection technology includes encryption, access control technology and so on. These technologies provide some supports of document security and become the mainstream thinking when designing document protection system. However, the mobile device has some features that are different from the traditional PC that mean the document protection solution for PC does not apply to mobile platforms. Many aspects need to consider in migrating these solution to the mobile phone platform, at least the performance of mobile computing, software design and real user feelings. Therefore, the study of document protection technology with good performance and easy to use characters is a good and meaningful topic.This paper focuses on the document protection technology of the major mobile phone operating system. Firstly, the paper analysis the traditional document protection technology in detail. Then, a new document security solution of mobile platform is given. The virtual file system is enhanced with adding the protection module, which work as encryption and decryption, access control, key updates and other functions. The document application program and security modules are independent of each other. The new solution not only provides document security protection, the unauthorized access is prevention, but also keep the user experience. At last, a prototype system was implemented. Experiments show that the proposed solution is feasible.更多还原