Earticle

초록

영어

The Android platform stores basic telephony data such as contacts, call logs, schedules, and SMS messages. These basic telephony data are managed by ContentProvider, which is one of the core components of Android applications along with Activities, Services, and BroadcastReceivers. If an Android application requires basic telephony data, it requests queries such as query, insert, update, and delete operations to ContentProvider. In the Android platform, every operation for which there is a possibility of misuse is protected by permissions. Generally, every application with proper permissions can request a protected operation from the Android platform. Database operations which access a database through ContentProvider are also protected by READ and WRITE permissions. However, this security policy has a critical flaw: it is impossible to differentiate the permissions of individual contacts in the Android Platform. If one application has READ permission for contacts, it can read every contact stored on an Android device. When the entities are not equal value, this flaw becomes a critical flaw. In the particular case of SMS, the problem is more serious because SMS messages can include financial information, authentication tokens, or privacy information. To address this security problem, we have designed and implemented a privacy-enhanced SMS provider. In this paper, we show how to hide sensitive SMS data from untrusted applications.

목차

Abstract
 1. Introduction
 2. Security Model and Limitations of the Android Platform
  2.1. Security Model of the Android Platform
  2.2. Limitations of the Security Model
 3. Privacy-enhanced SMS Provider
  3.1. SMS_RECEIVED Action in the Android Platform
  3.2. Function of Privacy-enhanced SMS Provider
  3.3. Design and Implementation
 4. Demonstration of Privacy-enhanced SMS Provider
 5. Conclusion
 References

키워드

저자

• Min-woo Park [ Department of Electrical and Computer Engineering, Sungkyunkwan University, Chunchun-dong 300,Jangan-gu, Suwon, Kyunggi-do, Republic of Korea ]
• Jung ho Eom [ Military Studies, Daejeon University, 62 Daehakro, Dong-Gu, Daejeon, ] Corresponding author
• Tai-Myoung Chung [ Department of Electrical and Computer Engineering, Sungkyunkwan University, Chunchun-dong 300,Jangan-gu, Suwon, Kyunggi-do, Republic of Korea ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605