DEVELOPMENT OF ANDROID DATA ENCRYPTION SYSTEM

DEVELOPMENT OF ANDROID DATA ENCRYPTION SYSTEM

CHAPTER ONE

INTRODUCTION

“Oy Raisoft Ltd” was founded in 2000. Raisoft provides solutions for care planning, quality monitoring, and resource management in areas of elderly care, rehabilitation, and mental health” (Raisoft, 2020). The raiSecure Android application described in this thesis is proof of a concept for a bigger Android application RaiMobile, which is a mobile version of the software provided by Raisoft. RaiMobile is a dual application, which supports offline/online mode. The user can use the application offline and is able to synchronize the data to the Raisoft server when the device is connected to the internet.

The aim of this project is to encrypt the data in RaiSecure in the best possible way which can later be used in RaiMobile. Customer data security is important for any company, any compromise to it can lead to a negative image of that company, business loss, penalty fine and even the collapse of the company. Since RaiSecure is an offline mobile application the data is stored in a mobile local storage and it is always at risk. The data stored in a database, a local file or shared preference are at high risk if the device is lost or has root privileges. Thus, encryption is the best way to protect the data from any attack. This solution will improve the way data is secured in RaiMobile. With this solution more layers of security are added to the application data, making it more difficult for a potential attacker to obtain any possible data.

 

The user himself is the most responsible for data security. How the user handles his credential is important in data security. If the user is aware and keeps his credentials and device safe from any attacker then the data in the device is safe. But if the device is stolen or an attacker gets the credential for the application then it creates a security risk. RaiMobile uses the SQLite database to store data locally. Thus, if the phone is lost then it is possible for an attacker to get the application’s local database. And when the database is not encrypted then a data breach can occur. To avoid this worst-case scenario one of the possible solutions for database safety is to encrypt the database. Thus, even when the device is stolen the data stored in the device is safe. The only issue to this solution is the security of the key used to encrypt the database. Even if the database is encrypted, if the key is not kept safe then an attacker can decrypt it is using the key the then data is breached.

 

It does not matter how intense the door is if the key is not kept safe or not handled properly. Thus, it is the same with encryption. “The most important part of encryption is to keep the key used for encryption safe”. There are many ways how to keep the encryption key safe in an Android platform. Android Key-Store is a recommended way to keep the encryption key safe in Android Google. Android Key-Store generates a key for encryption, and it is stored in secure hardware that makes it difficult for an attacker to extract from the device even if the user has root privilege.

1.2 Research Objectives

Clearly state the research objectives that guide the development of the Android data encryption system. These objectives should reflect the goals and outcomes you intend to achieve through your research. For example:

To develop an efficient and secure data encryption system for Android devices.

To investigate and implement suitable encryption algorithms for the Android platform.

To evaluate the performance and effectiveness of the developed encryption system through experimentation and analysis.

To propose recommendations for improving data security on Android devices.

1.3 Scope and Limitations

Define the scope of your research project by identifying the boundaries and limitations within which the study will be conducted. Discuss any constraints that may affect the research outcomes, such as time constraints, hardware limitations, or access to specific resources. It is important to set realistic expectations and manage potential limitations upfront to ensure the validity and reliability of the research findings.

1.4 Significance of the Study

Explain the significance and potential impact of your research project. Discuss how the development of an Android data encryption system can contribute to the field of computer science, enhance data security practices, and benefit end-users, organizations, or society as a whole. Emphasize the need for improved data protection in the context of increasing cyber threats and the importance of securing sensitive information on mobile devices.

DEVELOPMENT OF ANDROID DATA ENCRYPTION SYSTEM. GET MORE COMPUTER SCIENCE PROJECT TOPICS AND MATERIALS

Sharing is caring!