Abstract. In this paper we revisit the concept of mandatory access control and investigate its potential with personal digital assistants(PDA). Only if applications are clearly separated and Trojans cannot leak personal information can these PDAs become personal trusted devices. Limited processing power and memory can be overcome by using Web services instead of full-fledged applications – a trend also in non-mobile computing. Web services, however, introduce additional security risks, some of them specific for mobile users. We propose an identification scheme that can be effectively used to protect privacy and show how this system builds upon a light-weight version of mandatory access control.

摘要 在這篇文章中我們重溫強(qiáng)制訪問控制的概念,究其潛在的個人數(shù)字助理(PDA)。只有當(dāng)應(yīng)用程序明確分開和木馬,不能泄露個人信息可以成為個人信任這些掌上設(shè)備。有限的處理能力和內(nèi)存都是可以克服的利用網(wǎng)絡(luò)服務(wù)而不是完整的應(yīng)用程序——一種趨勢也在留在原地孜孜不倦的計算。網(wǎng)絡(luò)服務(wù),然而,施加額外的安全風(fēng)險,他們中的一些具體為移動用戶。提出了一種身份認(rèn)證方案,可以有效地用于保護(hù)隱私和顯示該系統(tǒng)建立在一臺輕量級版本的強(qiáng)制訪問控制。