DeHyp a Hardware-Irrelevant BYOD Device Security Enhancement Architecture

With the increasingly powerful computing capacity of mobile intelligent devices represented by mobile phone and tablet PC, bring your own device (BYOD) become popular in many enterprises. While bringing certain convenience, BYOD also bring forth many security challenges. Researches show that mobile intelligent devices are faced with many common risks in information security domain, for example, there are many security bugs and defects in the operating system. In order to solve various disadvantages of current security enhancement solutions for BYOD device represented by Samsung Knox, we describe the design and implementation of a hardware-irrelevant mobile intelligent device security enhancement architecture (deHyp). It can form completely isolated personal environment and office environment on most current hardware platforms and realize the protection of root permission in the operating system, security isolation, the access management of system resources, the protection of key system parameters, the protection of user private data and the protection of important software. The prototype of deHyp was implemented on Panda board. The security enhancement and the performance have also been tested. Test result show that the system meets the requirements of our design.