的Andr​​oid如何确保文件目录内容 [英] Android how to secure contents in document directory

问题描述

我问同样的问题如下：

• 安全内容的文档目录

有关机器人。

有没有在Android中什么是$ P $这里psented等价概念：

• 保护应用程序沙箱

我的特殊要求是保护文件从植根设备也使他们只能通过应用程序，并有一定的寿命。

感谢

解决方案

  

我的特殊要求是保护文件从植根设备

根据定义，那是不可能的。

首先，谁拥有root权限的设备访问所有文件，随时随地在设备本身。

二，加密只是帮助的用户的保护的及其的来自第三方的数据。而你，另一方面，试图攻击由$ P $访问他们的数据pventing它们的用户。你可以尝试这样做，通过加密是你是唯一一个与解密密钥，并自认为解密密钥必须是设备上的设备能够解密文件，任何用户谁希望的唯一途径以可以通过您的应用程序翻找，找到钥匙，和解密文件本身。加密文件这样的概念被称为DRM，有两种类型的DRM：已经破解了的人以及那些没有人打扰试图破解又

如果您不希望用户访问这些数据，不要把它自己的设备上

I am asking the same question as here:

• Secure contents in document directory

For android.

Are there equivalent concepts in android to what is presented here:

• Protecting the app sandbox

My particular requirement is to protect files from rooted devices and also make them available only through application and for a certain lifetime.

Thanks

解决方案

My particular requirement is to protect files from rooted devices

By definition, that is impossible.

First, anyone who has a rooted device has access to every file, anywhere in the device itself.

Second, encryption only helps the user protect their data from third parties. You, on the other hand, are trying to attack the user by preventing them from accessing their data. The only way you can try to do that via encryption is for you to be the only one with the decryption key, and since that decryption key has to be on the device for the device to be able to decrypt the file, any user who wishes to can rummage through your app, find the key, and decrypt the files themselves. The notion of encrypting files this way is called DRM, and there are two types of DRM: the ones that have been cracked and the ones that nobody has bothered trying to crack yet.

If you do not want the user to access this data, do not put it on their device.

这篇关于的Andr​​oid如何确保文件目录内容的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！