A Novel Security Scheme with Message Level Security for Hybrid Applications

Abstract

With the popularity of smart device, mobile applications are playing more and more important role in people's daily life, these applications stores various information which greatly facilitate the user’s daily life. However due to the frequent transmission of data in the network and some specific security issue from application itself that may increases the risk of data leakage therefore more and more developers began to focus on how to protect user data. Using different data protection methods based on different application development models. Current mainstream development models include Native development model, Web development model and Hybrid development model. Hybrid development model is based on JavaScript and HTML5, it is not only has a cross platform advantages similar to Web Apps but also has a good user experience similar to Native Apps. In this thesis according to the features of Hybrid applications, we proposed a security scheme for Hybrid development model implements message-level data encryption to protect user information. And we designed a sandbox mechanism, before application load the web page content by using JNI interface to call the underlying dynamic library automatic detect page content. Then return the detection result if the current page contains access device JavaScript code. Through the security analysis and performance evaluation we found that the proposed security scheme can effectively ensure data security during the transmission.