2984 Dec ITS AMI-C 1) AMI-C Java 7) J2ME/CDC 12) API API Java J2ME/CDC 5),6) J2ME/CDC J2ME/CDC 5 1 Fig. 1 Software architecture of in-vehicle in

Size: px

Start display at page:

Download "2984 Dec ITS AMI-C 1) AMI-C Java 7) J2ME/CDC 12) API API Java J2ME/CDC 5),6) J2ME/CDC J2ME/CDC 5 1 Fig. 1 Software architecture of in-vehicle in"

せせらながだき
5 years ago
Views:

1 Vol. 46 No. 12 Dec Java LAN Java J2ME/CDC Java Java Java Java Condition SecurityManager PolicyFile Java 5 1 µs Design and Implementation of Secure Java Platform for Telematics Servers with Context-dependent Access Control Nori Matsuda and Takeshi Yoneda In-vehicle information server is an embedded server which has a function as the gateway which connects in-vehicle LAN to the Internet. The J2ME/CDC, Java for embedded systems, can be adopted on the server which OS independent applications can be run on. For the server, to support safety driving, access control mechanism should be provided which prevents improper processing by applications. However, the mechanism provided by J2ME/CDC is not sufficient because it does not provide context-dependent access control mechanism which considers dynamically changing vehicle context. So, in this paper, we propose context-dependent access control mechanisms for J2ME/CDC platform. In our approach, context condition is introduced which checks if a given context condition is satisfied or not. Some context condition can be related to a permission so that the permission is valid only if all of the related conditions are satisfied. In addition, we introduce effective logging algorithms for access control based on call times and intervals of APIs. Furthermore, our proposal does not require any modification of existing Java platform and applications because it can be implemented only by replacement of original PolicyFile class. Finally, the performance result shows that the overhead of our proposal is insignificant. 1. 8) Information Technology R&D Center, Mitsubishi Electric Corporation 2983

2 2984 Dec ITS AMI-C 1) AMI-C Java 7) J2ME/CDC 12) API API Java J2ME/CDC 5),6) J2ME/CDC J2ME/CDC 5 1 Fig. 1 Software architecture of in-vehicle information server. 1 µs Security- Manager PolicyFile Java Java 2. Java 2.1 LAN S/W 1 OSGi 10) Java J2ME/CDC API OSGi Service OSGi Framework

3 Vol. 46 No. 12 Java Java J2ME/CDC API API 1 App 2 App LAN J2ME/CDC Java Java 3. Brewer 2) Chinese wall policy 1 Edjlali 3) Java Mobile Code Mobile Code Mobile Code McDaniel 9) Antigone Condition Framework ACF Strembeck 11) Context Constraint RBAC 4) Role-based Access Control Permission RBAC xorbac McDaniel Strembeck RBAC Java Java Java 4. J2ME/CDC J2ME/CDC PC Java J2SE 5),6)

4 2986 Dec ProtectionDomain Fig.2 Relationship between ProtectionDomain, class, permissions and permission. 4 Java2 Fig. 4 Structure of security policy file. 3 Fig. 3 Brief description of authorization algorithms. J2ME/CDC 4.1 ProtectionDomain 2 1 ProtectionDomain ProtectionDomain CodeSource Permissions Permissions Socket Permission 4.2 Java ProtectionDomain 3 A.class B.class C.class D.class D.class Java Permission 2 D.class Permission p SecurityManager checkpermission SecurityManager AccessController Access- Controller ProtectionDomain ProtectionDomain Protection- Domain 1 ProtectionDomain 4.3 java.policy Permission URL Jar Java ProtectionDomain

5 Vol. 46 No. 12 Java Fig. 5 Java2 Permission Hierarchy of Permission classes. 7 Java2 Fig. 7 Process for authorization. 6 Class Java2 Fig. 6 Process for loading Class. 4.4 Permission 5 Permission FilePermission Socket SocketPermission Java UserDefinedPermission 4.5 ProtectionDomain ProtectionDomain 6 PolicyFile PolicyFile ClassLoader CodeSource ProtectionDomain Permissions ClassLoader Class- Loader CodeSource ProtectionDomain ProtectionDomain PolicyFile Policy Java java.security PolicyFile SecurityManager AccessController 7 API API Permission SecurityManager SecurityManager AccessController AccessController ProtectionDomain ProtectionDomain ProtectionDomain Permissions Permissions Permission 4.2 AccessController Permission Condition

6 2988 Dec Fig. 8 8 Condition Permission Relationship between Permission and Condition. 10 Fig. 10 Extended algorithms for authorization. 9 Fig. 9 Extended security policy file. Condition 8 ProtectionDomain Permission Condition ProtectionDomain Permissions Permissions Permission Permission Condition Condition Permission 3 Condition AND 1 OR Fig. 11 History table of using permissions. Condition Condition SecurityManager SecurityManager 5.4 J2ME/CDC a ProtectionDomain CodeSource

7 Vol. 46 No. 12 Java Fig. 12 Algorithm for recording history. b Permission c d ProtectionDomain ProtectionDomain ProtectionDomain CodeSource Jar 13 Fig. 13 Process of context-dependent authorization. 14 Condition Fig. 14 Hierarchy of Condition classes. 6. J2ME/CDC 13 API 6.1 Condition Condition 14 check

8 2990 Dec Fig. 16 condition.rule Example of condition.rule file. 17 Condition Fig. 17 Loading Condition classes. Fig Condition Examples of implementation of Condition. public abstract class Condition { public boolean check(codesource cs, Permission pm); } Condition 15 SpeedometerCondition Call- IntervalCondition check true/false Condition Condition condition.rule alias <cond_rule> <condition_class1>, <parameter1>; <condition_class2>, <parameter2>;... <cond_rule> Condition <condition_class> <parameter> 16 stop 18 Permission Fig. 18 Proprietary Permission classes. 0km/h interval50 50 ms CPU 70% N 50 ms CPU 70% Condition ConditionTable condition.rule Condition Dynamic loading Condition 6.2 ConditionalPermission ConditionalPermission 18 Permission Condition Permission implies

9 Vol. 46 No. 12 Java Fig. 19 java.policy Example of java.policy file. java.policy permission ConditionalPermission, \ "<permission>,<target>,<action>", \ "<cond_rule>"; <cond_rule> <permission> <target> <action> java.policy 19 Java 6.3 ProtectionDomain 4.6 Java Permissions ConditionalPermission 20 ConditionalPermissions ConditionalPermission ModifiedPolicyFile Permissions ConditionalPermissions ModifiedPolicyFile java.security PolicyFile ModifiedPolicyFile 20 Condition Fig. 20 Loading policy with Condition. 21 SecurityManager Fig. 21 SecurityManager for recording history. ConditionalPermissions ProtectionDomain 6.4 LoggedSecurityManager 5.3 ProtectionDomain SecurityManager SecurityManager 21 LoggedSecurityManager ProtectionDomain HistoryPermission LoggedSecurityManager 18 HistoryPermission AccessController ConditionalPermissions Protec-

10 2992 Dec tiondomain HistoryPermission LoggedSecurityManager ProtectionDomain LoggedSecurityManager JavaVM Java SecurityManager Condition a b Condition LoggedSecurityManager AND/OR Condition condition.rule condition.rule ConditionalPermission Java ConditionalPermission Java Java Java java.security ModifiedPolicyFile JavaVM LoggedSecurityManager J2ME/CDC Java Least Privilege Java 6) ProtectionDomain ProtectionDomain Java

11 Vol. 46 No. 12 Java (1) (2) (3) (1) 1 UPerm VPerm Rule i (i =1,...,n) grant{ } VPerm Rule 1 VPerm Rule 2.. VPerm Rule n VPerm Rule i (i = 1,...,n) 1 Perms n Perms = VPerm Rule i i=1 Rule i i 1,...,n VPerm VPerm 2 1 grant{ } VPerm 1 Rule 1 VPerm 2 Rule 2.. VPerm n Rule n VPerm c = VPerm i VPerm i = VPerm c VPerm i Perms Perms = (VPerm i Rule i ) ( ) = (VPermc VPerm i) Rule i ( ) = VPerm c Rule i ( ) (VPerm i Rule i ) VPerm c 1 VPerm c (1) Java (2) VPerm Cond 1 Cond 2 2

12 2994 Dec Table 1 Performance of original authorization µs 22.5 µs 34.6 µs 51.7 µs µs 23.2 µs 35.7 µs 53.5 µs µs µs µs µs Fig. 22 Setup of access control policy. 23 Fig. 23 Classification of access control permissions Pentium3-1 GHz Linux PC JIT HotSpot J2ME/CDC J2ME/CDC 2 3 DoorLockPermission("left","unlock") ProtectionDomain ProtectionDomain 1 16 µs ProtectionDomain 1 J2ME/CDC 3 1 Protection- Domain 1 47 µs µs ProtectionDomain 1 2 Permission Permission 5.4 Permission HashMap Vector java.util 3

13 Vol. 46 No. 12 Java Table 2 Analysis of performance of recording history. 6.5 µs 13.9% 2.8 µs 5.9% Permission 19.1 µs 40.8% 18.4 µs 39.3% 3 Table 3 Performance of utility classes in java.util package. HashMap 4.0 µs Vector 2.3 µs put 2.7 µs add 1.0 µs get 1.6 µs get 0.5 µs 4 Table 4 Performance of context-dependent authorization a 35 µs 37µs 39µs 44µs 2b 48 µs 64µs 79µs 110 µs 3a 94 µs 96µs 98µs 103 µs 3b 109 µs 127 µs 144 µs 179 µs µs 19.1 µs 11 HashMap µs a 2b 3a 3b ProtectionDomain DoorLockPermission Table 5 Performance of history-dependent authorization µs µs CPU 1 µs 2 2a 19 µs 1 71% 13.5 µs 13.5 µs 2b 13 µs 2a 3a 59 µs 2b 13 µs ProtectionDomain DoorLockPermission ms true

2996 Dec. 2005 110 µs 3b 10 3b 8. Java J2ME/CDC J2ME/CDC Java 1) AMI-C: AMI-C Specification Release 2 (2003). http://www.ami-c.org/ 2) Brewer, D. and Nash, M.: The Chinese Wall Security Policy, Proc.

5th ACM conference on Computer and communications security, pp.38 48, ACM Press (1998). 4) Ferraiolo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.R. and Chandramouli, R.

14 2996 Dec µs 3b 10 3b 8. Java J2ME/CDC J2ME/CDC Java 1) AMI-C: AMI-C Specification Release 2 (2003). 2) Brewer, D. and Nash, M.: The Chinese Wall Security Policy, Proc. IEEE Symposium on Research in Security and Privacy (1989). 3) Edjlali, G., Acharya, A. and Chaudhary, V.: History-based access control for mobile code, CCS 98: Proc. 5th ACM conference on Computer and communications security, pp.38 48, ACM Press (1998). 4) Ferraiolo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.R. and Chandramouli, R.: Proposed NIST standard for role-based access control, ACM Trans. Inf. Syst. Secur., Vol.4, No.3, pp (2001). 5) Gong, L.: Inside Java2 Platform Security, Addison Wesley (1999). 6) Gong, L. and Schemers, R.: Implementing Protection Domains in the Java Development Kit 1.2, Internet Society Symposium on Network and Distributed System Security, San Diego, CA, pp (1998). 7) Gosling, J. and B. Joy, G.S.: The Java Language Specification, Addison Wesley (1996). 8) VRM (2004). 9) McDaniel, P.: On context in authorization policy, SACMAT 03: Proc. 8th ACM symposium on Access control models and technologies, pp.80 89, ACM Press (2003). 10) OSGi: OSGi Service Platform, Release 3 (2003). 11) Strembeck, M. and Neumann, G.: An integrated approach to engineer and enforce context constraints in RBAC environments, Vol.7, No.3, pp , ACM Press (2004). 12) Sun Microsystems: Java2 Platform, Micro Edition / Connected Device Configuration (J2ME/CDC) Specification 1.0 (2002). ( ) ( ) SCIS IT Text ACM

& Vol.5 No (Oct. 2015) TV 1,2,a) , Augmented TV TV AR Augmented Reality 3DCG TV Estimation of TV Screen Position and Ro

& Vol.5 No (Oct. 2015) TV 1,2,a) , Augmented TV TV AR Augmented Reality 3DCG TV Estimation of TV Screen Position and Ro TV 1,2,a) 1 2 2015 1 26, 2015 5 21 Augmented TV TV AR Augmented Reality 3DCG TV Estimation of TV Screen Position and Rotation Using Mobile Device Hiroyuki Kawakita 1,2,a) Toshio Nakagawa 1 Makoto Sato