移动终端系统的访问控制框架

随着移动计算的不断普厦，针对移动终端的安全问题日益受到重视。传统的访问控制技术能够解决机密性和完整性问题，但没有充分考虑可用性要求。移动终端同个人计算机相比更容易耗尽系统资源，受到拒绝服务攻击。本文提出一种应用于移动终端的访问控制框架，扩充DTE机制，保证数据机密性和完整性，并允许关键应用预留动态资源（如CPU时间、物理内存页面等），系统对预留的资源进行统一的调度和管理，防止关键应用与其它程序竞争系统资源时产生冲突，保证系统对关键应用的响应，提高系统的可用性。

Access Control Framework for Mobile Terminal Systems

With popularity of mobile computing,security issues of mobile terminals recently became a hot research area. Traditional access control technologies can effectively resolve confidentiality and integrity problems of information,but do not pay enough consideration to availability. Compared with personal computers,mobile terminals are easier under Denial of Service attacks by exhausting system resource. In this article,we provided an access control framework for mobile terminals. Extending DTE mechanism to guarantee confidentiality and integrity of information,the framework allows key applications to reserve dynamic resource(such as CPU time and physical memory pages). Managed and scheduled by mobile terminals,reserved resource can be used to avoid resource conflict between key applications and others,which improve response and availability of mobile terminals.