Improved Message Mechanism-Based Cross-Domain Security Control Model in Mobile Terminals

Improved Message Mechanism-Based Cross-Domain Security Control Model in Mobile Terminals

Zhiwei Cao, Zhijie Fan, Boan Chen, Zidong Cheng, Shijun Xu, Xin Li
Copyright: © 2024 |Pages: 27
DOI: 10.4018/IJISP.347987
Article PDF Download
Open access articles are freely available for download

Abstract

Dual-domain terminal with two built-in independent operating systems - Life Domain and Work Domain, provides convenience for daily use and mobile office. However, the security isolation between the two domains also causes that message reminders cannot be delivered and viewed across domains, which restricts the improvement of work efficiency and the expansion of mobile services. This paper conducts an in-depth study on this pain point and proposes the concept and implementation method of a cross-domain instant messaging reminder service system for mobile office, focusing on solving the problems of: cross-domain isolated boundary exchange of message reminders, timeliness and delivery rate guarantee of message reminders, and security check filtering of message contents. Technically, on the side of mobile office platform, based on AMQP technical framework and protocol, the cross-domain isolated border message queue push and synchronization services are built, which are real-time, reliable and high-throughput.
Article Preview
Top

Introduction

The mobile office platform is an information platform organized and constructed by relevant departments to provide mobile office and law enforcement activities for the majority of office personnel and social cooperation and governance forces (Bai et al., 2019). The mobile office platform is based on the security needs of information system processing data, and the nature of service user groups is divided into mobile Internet service sub-platform (referred to as Class I zone), network service sub-platform (referred to as Class II zone) and information network service sub-platform (referred to as class III zone) (Cui et al., 2018). Mobile office Class I zone mainly consists of personal ordinary terminals, mobile internet transmission links, and corresponding application and security control measures. Mobile office Class II zone mainly consists of general controlled terminals, wireless dedicated transmission links, and corresponding application and security control measures (Zhou et al., 2017). Mobile office Class III zone mainly consists of enhanced controlled terminals, wireless dedicated transmission links, and higher security level applications and control measures (Liu et al., 2018). The safety level is the lowest in the Class I zone, followed by the Class II zone, and the highest in the the Class III zone. Among them, Class I zone platform allows ordinary commercial mobile terminal access, Class II zone and Class III zone only allow access to dedicated mobile terminals (Benjamin et al., 2018).

Moreover, in order to promote mobile office, and maintain information system data security while improving law enforcement efficiency, relevant departments have purchased and issued mobile office terminals for the majority of front-line personnel (Fan et al., 2019). The common feature of such terminals is that the same hardware terminal runs the dual system of life domain and work domain, which meets the needs of office users to process business applications and data with different security requirements in the same terminal (Andresini et al., 2021). The two systems of life domain and work domain are completely isolated on the terminal side, and information cannot be exchanged (Pujitha et al., 2013). In the actual use process, the work domain system can only connect to the class II zone, and then connect to the class III zone through the VPN encrypted channel, the life domain system can only connect to the class I zone, which leads to the terminal in the life domain state when the user can not know its work domain information, in the work domain state when the user can not know its life domain information (Yao et al., 2021). Seriously led to the office user processing flow transformation and notification type of business lag, contrary to the original intention of mobile office service efficiency improvement (Sandhu, 1998).

Based on this, the researchers put forward a set of message push scheme based on information synchronization on the side of the mobile office platform to realize the interoperability of business reminder messages between the life domain and the work domain (Zou et al., 2018). Based on this scheme, a set of mobile office cross-regional message reminder service system is designed and developed. Information is synchronized through the platform side, and then the information is pushed by the terminal in the corresponding sub-platform zone of the mobile office, so as to meet the needs of users for cross-regional message reception (Xiao et al., 2019). This system mainly consists of the following components, such as platform side message, system configuration, system status, message push protocol, and so on.

Complete Article List

Search this Journal:
Reset
Volume 18: 1 Issue (2024)
Volume 17: 1 Issue (2023)
Volume 16: 4 Issues (2022): 2 Released, 2 Forthcoming
Volume 15: 4 Issues (2021)
Volume 14: 4 Issues (2020)
Volume 13: 4 Issues (2019)
Volume 12: 4 Issues (2018)
Volume 11: 4 Issues (2017)
Volume 10: 4 Issues (2016)
Volume 9: 4 Issues (2015)
Volume 8: 4 Issues (2014)
Volume 7: 4 Issues (2013)
Volume 6: 4 Issues (2012)
Volume 5: 4 Issues (2011)
Volume 4: 4 Issues (2010)
Volume 3: 4 Issues (2009)
Volume 2: 4 Issues (2008)
Volume 1: 4 Issues (2007)
View Complete Journal Contents Listing