Study And Implementation Of Solutions To Integrated Security Of Cloud-Terminal

With the rapid development of mobile Internet and intelligent terminals, the privacy data produced by mobile applications are increasing. Because of the limited computing power and storage capacity of mobile intelligent terminal, the security measures for the traditional network terminal equipment are not suitable for mobile intelligent terminal. Mobile cloud storage is a typical method to manage and protect the privacy of mobile users, but the privacy protection mechanism has security risks, which may suffer from the security threats from the mobile intelligent terminal and cloud storage server. It is necessary to improve the security of mobile cloud storage. To address those problems, this paper studies mobile user’s privacy data security.For the security threats faced by the mobile cloud storage, this paper proposes a solution to integrated security of cloud-terminal, it backups the mobile user’s privacy data to the cloud storage server by the utilization of certificate cloud, key splice and symmetric encryption technologies, etc. The encryption master key is generated by the certificate cloud and mobile intelligent terminal together, then the mobile user utilizes it to encrypt the mobile user’s privacy data and upload these data to the cloud storage server, which effectively avoids the possibility of disclosing the privacy data of mobile users from mobile intelligent terminal and cloud storage server.Considering limited capacity the mobile intelligent terminal has, this paper proposes a privacy graded protection solution which reduces the system overhead and improves user experience effectively. Firstly, the mobile user sets the encryption level for data file being uploaded. Secondly, the certificate cloud generates key with different security level according to the encryption level. Finally, the mobile intelligent terminal generates encryption master key with different security level by key splice technologies.Android platform-based integrated security system is designed and implemented based on integrated security of cloud-terminal and privacy graded protection. The certificate cloud provides users management and key management functions, guaranteeing the security of privacy data uploaded and downloaded by mobile users. Mobile intelligent terminal provides users login, file browsing, data encrypting and uploading, data downloading and decrypting, facilitating the mobile user’s interactive with others.Through theoretical analysis and experimental verification, the integrated security solution and the privacy graded protection solution which this paper proposed can effectively protect the privacy data of mobile users, and avoid the security risks of the existing methods for mobile cloud storage privacy protection.