Transforming a hardware-centric raffles solution into a SaaS solution for the Mobile Cloud

点击翻译按钮获取中文摘要

Replacing a certified hardware solution with apps designed to be installed on un-managed devices is a very interesting issue that begins to appear in a variety of mobile cloud computing scenarios (e.g. allowing employees to install company software on their devices). Developing tamper proof apps that communicate with a cloud-hosted backend is therefore becoming a very important issue in the mobile cloud computing space. Since we have no control over the mobile devices of users we must assume that the OS may be compromised and that users may have (intentionally or un-intentionally) installed apps that attack our app. The key challenge is therefore to develop an app that will run in a potentially hostile environment. In this project we will focus on encrypted internal communication and ensuring the safe storage of encrypted data (e.g. purchase data) and the safe communication within an undependable network. Special emphasis will be given to the audit trails.