| With the rapid development of mobile Internet technology,smart phone is gradually replacing the computer,and becoming an important tool for people to live,work and entertainment.With its open features,many handset vendors are like to produce mobile phone based on Android operating system.Mobile phone has installed many kinds of Apps,and many Apps have stored the user’s personal information,such as bank card account,address book,chat information,tourism information.Once the Apps are started,the user will be able to read or use the personal information stored in the Apps with no constraint,there is a big security risk.This thesis has designed and implemented an application unified authentication system based on Android platform,the system can manage all Apps installed on the phone.Any system-protected App that the user wants to use must be authenticated by the system,thereby preventing unauthorized user to read personal information in the App.The system consists of Android client,security server,SMS platform and CA,it is mainly divided into client configuration module,verification code module,certificate detection and application module,registration module,login authentication module and application management module.The client uses the SMS authentication mechanism provided by the security server and the SMS platform to authenticate the user’s identity information.The system uses the digital certificate authentication and signature function provided by the security server and the CA to ensure the user’s identity information;The client uses the application management module to manage the Apps installed on the phone.When someone uses system-protected Apps,they must be authenticated by the login authentication module,and only authorized user can use system-protected Apps.The system has been fully tested in the mainstream Android mobile phone.The result shows that the system has implemented all the functional modules and has good adaptability in the mobile phone. |