Method and system for configuring simple kernel access control policy for android-based mobile terminal

• US 10,097,588 B2
• Filed: 12/06/2016
• Issued: 10/09/2018
• Est. Priority Date: 08/19/2016
• Status: Active Grant

• Current Assignee: Agency For Defense Development (Government of The Republic of China)
• Original Assignee: Agency For Defense Development (Government of The Republic of China)
• Inventors: Lee, Sang-Hoon, Kim, Hoon-Kyu, Kwon, Mi-Young, Kang, Tae-In, Lee, Seong-Kee, Han, Seung-Ho
• Primary Examiner(s): Shiferaw, Eleni A
• Assistant Examiner(s): Khan, Sher A
• Application Number:
  US15/370,270
• Publication Number:
  US 20180054462A1
• Time in Patent Office: 672 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method of configuring a simple kernel access control policy for an Android-based mobile terminal includes: creating an entire list in a file system of a plurality of mobile terminals through a web user interface of a management server; creating a system policy set and an application policy set by recognizing in advance subjects and objects in the entire list by means of the management server; creating a group policy for each user group on the basis of the system policy set and the application policy set by means of the management server; distributing the group policies to the mobile terminals by means of the management server; and executing the group policies by means of the mobile terminals.

Claims

1. A method of configuring a simple kernel access control policy for an Android-based mobile terminal, the method comprising:

creating an entire list in a file system of a plurality of mobile terminals through a web user interface of a management server;

creating a system policy set and an application policy set by recognizing in advance subjects and objects in the entire list by means of the management server;

creating a group policy for each user group on the basis of the system policy set and the application policy set by means of the management server;

distributing the group policies to the mobile terminals by means of the management server; and

executing the group policies by means of the mobile terminals,

wherein the group policy is composed of a combined system policy set including system policy items of the system policy set and a combined application policy set including application policy items of the application policy set,

wherein the system policy items include an init protective policy for protecting an initial user process when kernel booting is finished, a zygote protective policy for protecting processes for executing applications, and a media protective policy for protecting processes for executing media, and

the application policy items include a camera application policy, a video application policy, a recorder application policy, and a map application policy.

2. The method of claim 1, wherein the user group is composed of a plurality of users and a plurality of mobile terminals assigned to the users.

3. The method of claim 1, wherein a type of the subjects is defined as an application and a process and a type of the objects is defined as a file, an application, a process, and a system.

4. The method of claim 1, wherein the system policy set and the application policy set can be changed or added.

5. A system for configuring a simple kernel access control policy for an Android-based mobile terminal, the system comprising:

a plurality of mobile terminals; and

a management server creating an entire list in a file system of the mobile terminals through a web user interface, creating a system policy set and an application policy set by recognizing in advance subjects and objects in the entire list, creating a group policy for each user group on the basis of the system policy set and the application policy set, and distributing the group policies to the mobile terminals,

wherein the mobile terminals execute the group policies,

wherein the group policy is composed of a combined system policy set including system policy items of the system policy set and a combined application policy set including application policy items of the application policy set,

wherein the system policy items include an init protective policy for protecting an initial user process when kernel booting is finished, a zygote protective policy for protecting processes for executing applications, and a media protective policy for protecting processes for executing media, and

the application policy items include a camera application policy, a video application policy, a recorder application policy, and a map application policy.