Porscha: policy oriented secure content handling in Android
Porscha: policy oriented secure content handling in Android
复制标题
Porscha：Android 中面向策略的安全内容处理
DOI：
10.1145/1920261.1920295
复制
发表时间：
2010
影响因子：
1.7
通讯作者：
P. Mcdaniel
中科院分区：
文献类型：
--
作者：
Machigar Ongtang;Kevin R. B. Butler;P. Mcdaniel
蜂窝网络在全球的渗透和智能手机的出现导致了移动内容的革命。用户在交换照片、玩游戏、浏览网站和观看多媒体时使用的内容多种多样。当前的手机平台为用户隐私、蜂窝无线电和操作系统本身的完整性提供了保护。然而，很少有公司提供保护措施来保护进入手机的内容。例如，放置在Android智能手机上的基于mp3的彩信或照片内容可以被提取和共享而不受惩罚。本文探讨了智能手机上数字版权管理（DRM）政策的要求和实施。对Android市场的分析表明，DRM服务应该确保：a)受保护的内容只能由授权的手机访问；b)内容只能由提供商认可的应用程序访问；c)访问受上下文约束，例如，在有限的时间内使用，最大的观看次数等。在这项工作中开发的Porscha系统将内容代理和引用监视器放置在Android中间件中，以强制执行嵌入到接收内容中的DRM策略。一项控制通过SMS、MMS和电子邮件获得的内容的初步研究说明了保时捷策略的可表达性和执行性。我们的实验表明，保时捷有足够的表现力来阐明所需的DRM政策，并且它们的执行对性能的影响有限。
The penetration of cellular networks worldwide and emergence of smart phones has led to a revolution in mobile content. Users consume diverse content when, for example, exchanging photos, playing games, browsing websites, and viewing multimedia. Current phone platforms provide protections for user privacy, the cellular radio, and the integrity of the OS itself. However, few offer protections to protect the content once it enters the phone. For example, MP3-based MMS or photo content placed on Android smart phones can be extracted and shared with impunity. In this paper, we explore the requirements and enforcement of digital rights management (DRM) policy on smart phones. An analysis of the Android market shows that DRM services should ensure: a) protected content is accessible only by authorized phones b) content is only accessible by provider-endorsed applications, and c) access is regulated by contextual constraints, e.g., used for a limited time, a maximum number of viewings, etc. The Porscha system developed in this work places content proxies and reference monitors within the Android middleware to enforce DRM policies embedded in received content. A pilot study controlling content obtained over SMS, MMS, and email illustrates the expressibility and enforcement of Porscha policies. Our experiments demonstrate that Porscha is expressive enough to articulate needed DRM policies and that their enforcement has limited impact on performance.