Research And Implementation Of Secure Communication Technology Of Mobile Devices

With the rapid development of wireless mobile network and embedded technology, embedded mobile-devices have been widely used in various fields. There are a lot of security risks in the way of wireless mobile communication as well as their constrain of compute resources for mobile devices used in practical application environment. Research on the communication security technology for mobile devices is both significant in theorectical aspect and valuable in practical applications.To aim at the problem of security in networking and data communicating of mobile devices, this thesis analyses the techniques of authentication, dynamic IP address allocation and data encryption and designs a lightweight secure communication approach that is independent of both the authentication server and IP address allocation server. This thesis combines the knowledge-based authentication mechanism with the feature-based authentication mechanism to realize the two-way authentication between the devices in order to improve connection security between the mobile devices. The technique of IP address negotiation is used to obtain an unique IP address of a mobile device, and the truncated binary exponential growth algorithm is improved to avoid IP conflicts in order to speed up the convergence of address assignment. The self-certified public key cryptography system is used to generate the session for securing data communication between mobile devices in order to ensure high security and reducing the computing complexity in the communication between the mobile devices.This thesis implements the communication security prototype system in the pratical application environmnet of mobile devices deployed in laborotary. It includes the analysis, design and prototype implementation of the autonomic authentication module. IP address negotiation module, and the secure data communication module. The prototype is tested in the laboratorial environment of wireless mobile devices, and the results show that the secure data communication prototype system reaches the design goal.