Design And Implementation Of Mobile Security Management System Based On Cloud Service Platform

With the popularity of mobile devices such as smart phones,mobile office has also experienced dramatic changes.Office workers can get rid of constraints of space and time to do office work with mobile phones at anytime and anywhere.However,this convenience brings great security risks,as office staff can save,spread and misappropriate the confidential information of the company in the situation of mobile office.So a security solution of the mobile office is the bottleneck of the mobile office development.The topic of this paper comes from the actual project "YunDun Mobile Office Security Solution" of Shenzhen ZTE Network Technology Co.,Ltd.This system has absorbed the advantages of the existing mobile office systems and improved its shortcomings,what's more it merged the advantages of cloud computing.By connecting the cloud computing center on the mobile phone,the remote virtualized Android system environment can be obtained.The system is not stored locally,the mobile phone is only displayed on the page.All the data are stored in the cloud virtual machine,which achieves the goals of safe office and not intrusive the staff privacy.This paper focuses on the design and analysis of mobile management system based on the revised project of YunDun mobile office solution.The main work of this paper includes:First of all,the system development framework is outlined.After comparing and analyzing various technology development frameworks,the system adopts the most widely used Spring MVC framework,and meanwhile cooperate with the data persistence framework MyBatis,which implemented the support of the application layer,simplified the tedious data interaction between the front-end and background.Secondly,the method of custom cloud platform and cloud database is described in detail.The Windows Azure public cloud service and SQL Azure are described in detail,and the system deployment and storage service are realized.Then,through the analysis of system requirements,The main functions of the system are divided into seven modules,which are user management,virtual machine management,client version management,application management,login authentication and etc.,and each module is described in detail,achieved the security management of the cloud office.In the security analysis,as the cloud service providers are not fully trusted,the security of data storage in the cloud platform is an indispensable part of the system design,so this paper proposes the use of cloud audit to verify the integrity of cloud data.This paper presents the use of cloud audit to verify the integrity of the cloud data.Through the process simulation of the cloud service providers,users,TPA(Third Party Audit)three terminals in the cloud audit interactive process to achieve the goal of verifying cloud data integrity verification.Finally,we operate the functional testing through show module page and the performance testing of users' current login and operation through stress testing on a testing environment,and evaluate the maximum processing capacity of this system.