Development method and system based on mobile terminal application program security application

Abstract

The invention discloses a development method and system based on mobile terminal application program security application. The system comprises a sending terminal, a safe software development kit (SDK), a server and a receiving terminal. The method includes that the sending terminal requests a random number from the server, after the requested random number is received, a private key of the sending terminal is called to perform signing on the random number, and a signing result and a signing public key certificate are sent to the server; after the success of identity authentication, the safe SDK is called, received data information is encrypted through symmetric keys, the symmetric keys are encrypted by a public key of the receiving terminal, and encrypted symmetric keys and data information are sent to the receiving terminal; the receiving terminal calls the safe SDK to decrypt encrypted data. By means of the development method and system based on mobile terminal application program security application, related problems such as identity authentication, data breach and equipment controlling of data information safety are avoided.

Description

technical field [0001] The invention relates to the field of mobile terminal data security, in particular to a method and system for developing security applications based on mobile terminal application programs. Background technique [0002] PKI: Public Key Infrastructure, that is, public key infrastructure, is a key management platform that follows established standards. It can provide cryptographic services such as encryption, decryption, and digital signatures for all information security applications, as well as the necessary key and certificate management systems. To put it simply, PKI is the infrastructure for providing security services established by using public key theory and technology. PKI technology is the core of information security technology, and also the key and basic technology of e-commerce. [0003] Certificate SDK: Software Development Kit, based on the PKI system, a development platform that can provide security support, internally encapsulates certi...

AI Technical Summary

Problems solved by technology

[0009] 1. Use a password or password lock for identity authentication, the password strength is weak, and identity security cannot be ensured;

[0010] 2. In the process of data transmission, the data may be monitored in clear text transmission;

[0011] 3. Use the mobile terminal to download and view the file as plain text, which cannot ensure data security

However, most of the basic SDKs do not consider how to ensure the security of identity authentication itself, such as preventing replay attacks, preventing identity masquerading and deception, and too much consideration in network transmission is transmission efficiency, or the model is lightweight, and does not consider whether there is leakage, etc. Potential safety hazard, file data may be monitored during transmission; in terms of data storage, it may be stolen if stored locally in plain text, and there is no authority control and document life cycle management; lack of unified management and unified protection

Images