|
With the rapid development of mobile Internet, mobile terminals based on Android system are more and more widely used in industrial production and mobile office. One of the important application scenarios is remote access to the enterprise intranet for remote operation. How to access the enterprise intranet safely is a very important problem. Under the increasingly severe situation of network environment security at home and abroad, the application of domestic cryptographic algorithm is also imminent. Some domestic key fields, such as the State Grid, put forward the special needs of localization for network information transmission security. Therefore, it is very necessary to study the GMSSL VPN terminal based on Android. Firstly, this paper briefly introduces and analyzes the SM algorithm and GMSSL protocol standard. On this basis,introduces the key technologies on Android. Finally, the SSL VPN terminal based on Android system is designed and implemented, which adopts the SM algorithm and the GMSSL protocol standard. Compared with the international standard SSL / TLS protocol, it has better security. SM2 algorithm is used for key agreement, digital signature and SM2 certificate for identity authentication; SM3 algorithm is used to calculate message digest; combined with a variety of hardware encryption devices, hardware level data encryption is provided to realize a variety of ways of identity authentication, including encryption TF card, Bluetooth key, secure SIM card, etc. In addition, the security of terminal APK is analyzed and protective measures are taken to avoid the risk that Android applications are easy to be reverse cracked to a certain extent. Finally, through the experimental verification, the system also effectively provides security for remote terminal access on the basis of considering the ease of use. The research and implementation of GMSSL VPN terminal based on Android is of great significance for the popularization of Android mobile terminal in industrial production and the promotion of guomi algorithm.
|
