The Design And Implementation Of Authentication And Authorization System On Android Platform

With the continuous development of the Mobile Internet, people’s dependence on mobile terminal has become more and more intense at the same time. This dependence is mainly reflected on the various software installed on the mobile terminal, and the users usually need to be authenticated and authorized by the software to access more functionalities. In this process, the users and the system must ensure that the other party is trusted and secure communication is provided. So, how to build trust between the two parties and make the process be completed safely and quickly is becoming an increasing important task.To design and implement a set of security and fast authentication and authorization system on the Android platform, this paper analyzes the various aspects of the OAuth protocol in depth, simplifies and improves the system in accordance with system’s own characteristics. Ultimately designs a convenient, safe and reliable authentication and authorization system. This system inherits OAuth’s opening characteristic, and achieves a cross-platform result, furthermore it abandons the OAuth protocol’s recommendation of telecommunicating by the relatively poor safety performance HTTP protocol to HTTPS protocol, and makes the transmission process more reliable. In addition, the functionality that mobile platform is free to send and receive message is used in this system, and then targeted design a method which does not require the users to remember the username and password, which eliminates the user’s memory trouble. Thus, this identity authentication and authorization system is more reliable and easier. Although a variety of means to improve the security of the system are used in the system to make it more strongly, due to the limited technical means, the system which the paper designed still has many shortcomings.Finally, the authentication and authorization process is achieved on the Android platform in this paper, in accordance with the design method and solutions proposed in this paper can implement a secure, reliable, easy to manage and good portability system of authentication and authorization, it makes the authentication and authorization process more perfect.