A SDKEY-Based Secure Storage and Transmission Approach for Android Phone

Author

Ma Licui ; Li Meihong ; Li Lun ; Du Ye ; Zhang Dawei

Author_Institution

Sch. of Comput. & Inf. Technol., Beijing Jiaotong Univ., Beijing, China

fYear

2014

fDate

13-15 Oct. 2014

Firstpage

1

Lastpage

6

Abstract

To resolve the more and more serious problems of sensitive data leakage from Android systems, a kind of method of data protection on encryption storage and encryption transmission is presented in this paper by adopting secure computation environment of SDKEY device. Firstly, a dual-authentication scheme for login using SDKEY and PIN is designed. It is used for login on system boot and lock screen. Secondly, an approach on SDKEY-based transparent encryption storage for different kinds of data files is presented, and a more fine-grained encryption scheme for different file types is proposed. Finally, a method of encryption transmission between Android phones is presented, and two kinds of key exchange mechanisms are designed for next encryption and decryption operation in the following. One is a zero-key exchange and another is a public key exchange. In this paper, a prototype system based on the above solution has been developed, and its security and performance are both analyzed and verified from several aspects.

Keywords

Android (operating system); message authentication; public key cryptography; storage management; Android phones; Android system; PIN; SDKEY device; SDKEY-based secure storage; SDKEY-based transparent encryption storage; data files; data protection; decryption operation; dual-authentication scheme; encryption operation; encryption transmission; fine-grained encryption scheme; key exchange mechanisms; lock screen; prototype system; public key exchange; secure computation environment; sensitive data leakage; system boot; transmission approach; zero-key exchange; Authentication; Ciphers; Encryption; Receivers; Smart phones; Authentication; Encryption Storage; Encryption Transmission; Key exchange; SDKEY;

fLanguage

English

Publisher

ieee

Conference_Titel

Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC), 2014 International Conference on

Conference_Location

Shanghai

Print_ISBN

978-1-4799-6235-8

Type

conf

DOI

10.1109/CyberC.2014.10

Filename

6984271