Transforming a hardware-centric raffles solution into a SaaS solution for the Mobile Cloud

将经过认证的硬件解决方案替换为安装在非托管设备上的应用程序是一个非常有趣的问题，它开始出现在各种移动云计算场景中（例如，允许员工在他们的设备上安装公司软件）。因此，开发与云托管后端通信的防篡改应用程序成为移动云计算领域的一个非常重要的问题。由于我们无法控制用户的移动设备，我们必须假设操作系统可能受到威胁，用户可能（有意或无意）安装了攻击我们应用程序的应用程序。因此，关键的挑战是开发一款可以在潜在的敌对环境中运行的应用程序。在这个项目中，我们将专注于加密的内部通信，确保加密数据（例如购买数据）的安全存储，以及在不可靠的网络中安全通信。将特别强调审计跟踪。

Replacing a certified hardware solution with apps designed to be installed on un-managed devices is a very interesting issue that begins to appear in a variety of mobile cloud computing scenarios (e.g. allowing employees to install company software on their devices). Developing tamper proof apps that communicate with a cloud-hosted backend is therefore becoming a very important issue in the mobile cloud computing space. Since we have no control over the mobile devices of users we must assume that the OS may be compromised and that users may have (intentionally or un-intentionally) installed apps that attack our app. The key challenge is therefore to develop an app that will run in a potentially hostile environment. In this project we will focus on encrypted internal communication and ensuring the safe storage of encrypted data (e.g. purchase data) and the safe communication within an undependable network. Special emphasis will be given to the audit trails.