Assume a requirement for creating a custom application for Android or iOS smartphones, which will send and receive data (documents, e-mails, etc.) to/from a corporate server, perhaps after local editing via standard applications (e.g., Word or Powerpoint). The data will have to reside at the smartphone for certain amounts of time.
The application has to be
i.e. it should use as much of existing functionality as possible.
It seems that, for the network part, HTTPS is a better option than VPNs.
So, a general model of operation will be for the user to supply authentication credentials, login to the server, identify the document to be retrieved and download that document to the smartphone. Vice versa, the user should be able to load the document from the smartphone storage, edit it and then send it to the server.
Based on the above:
- Is there any open source solution for the client part (Android and iOS) of the client-server communication, i.e. a recommended HTTS client library?
- Is hardware encryption the recommended path for smartphone data storage (in terms of performance and security)?
- Is there any other part of the communication that needs to be secured?