Cryptographic System for Mobile Application (Automated Resume Builder)
Article Sidebar
Page Numbers:
347-362
Digital Object Identifier:
10.58578/kijst.v2i3.7228
Viewed: 183 times
Downloaded: 140 times
LYAS Publisher cordially invites qualified professionals to serve as Editors or Reviewers. Your expertise will make an important contribution to maintaining and strengthening the academic quality of our publications. Interested applicants are kindly requested to complete the application form at the following link: Editors & Reviewers
Please feel free to contact us if you need any further information about the submission process or if you have any additional questions.
Authors:Bartholomew Idoko1, Sampson Agada2, Okoro Denis Isah3, Chika Patricia Bossah4
Copyright :Authors retain copyright and grant the journal right of first publication.
Main Article Content
Abstract
This paper presents a secure and user-friendly approach for developing an automated mobile application system, using a resume builder as a case study. The proposed system automates the construction of resumes by utilizing applicants’ information as input, allowing users to create, edit, delete, read, and save resumes in PDF format, supported by login and signup via OTP verification. To enhance security, the study introduces a two-factor authentication (TFA) scheme that integrates a cryptographic-compatible device and a password, offering stronger protection against risks such as communication breaches, device or server vulnerabilities, and offline or online credential attacks. The TFA is implemented through shared access signature (SAS) message authentication or other PIN-based authentication methods. The system architecture incorporates an enhanced cryptographic framework adaptable to various password-based client–server authentication protocols, reducing reliance on less secure single-layer password systems. Data encryption is handled using the Advanced Encryption Standard (AES), chosen over 3DES for its superior processing efficiency, while the Message-Digest Method (MD5) algorithm is used to hash user-defined encryption keywords. All server-side data, including encryption keys, remain encrypted, ensuring that unauthorized access yields no advantage. By enabling users to encrypt and decrypt data with AES and securing encryption keys via MD5 hashing, the system improves both privacy and security in mobile applications. The study contributes to secure software design by demonstrating how cryptographic methods can be modularly integrated into mobile systems, addressing the cybersecurity gaps of conventional job search and resume platforms.
Downloads
Article Details
Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
References
[2] Taylor, C. (2017). Cloud Computing and Service Level Agreements (SLAs), http://www.datamation.com/cloud-computing/service-level-agreements.html
[3] https://jobportal.osunstate.gov.ng. Retrieved on the 30th of January, 2024
[4] Yao, G., Li, Y., Lei, L., Wang, H., & Lin, C. (2016). An efficient dynamic provable data possession scheme in cloud storage. In X. Huang, Y. Xiang, & K. C. Li (Eds.), Green, Pervasive, and Cloud Computing. Cham: Springer, pp. 63-81.
[5] J. Thakur and N. Kumar, “DES, AES and Blowfish: Symmetric key cryptography algorithms simulation based performance analysis,” Int. J. Emerg. Technol. Adv. Eng., vol. 1, no. 2, pp. 6–12, 2011.
[6] Adedeji Kazeem B. & Ponnle Akinlolu.A, “A New Hybrid Data Encryption and Decryption Technique to Enhance Data Security in Communication Networks: Algorithm Development., Int. J. Sci. Eng. Res., vol. 5, 2014.
[7] Mongoose https://www.npmjs.com/package/mongoose, https://github.com /Automattic /mongoose, https://mongoosejs.com/
[8] J. Kaur, S. Sharma, and M. Tech, “Secure image sharing on cloud using cryptographic algorithms: survey,” Int J Future Revolut Comput Sci Commun Eng, vol. 4, no. 2, pp. 319–325, 2018.
[9] https://www.impervacom/learn/application-security/http-parameter-polution/ Retrieved on 12th February, 2024
[10] Pancholi, V. R., & Patel, B. P. (2016). Enhancement of cloud com-puting security with secure data storage using AES. International Journal for Innovative Research in Science and Technology, 2(9), 18-21.
[11] Sen, M., & Choudhury, S. S (2017). Security and privacy issues for cloud computing and its challenges. Review of Computer Engineer-ing Studies, 4(2), 62–66.
[12] Wagh, G., Guran, S., Vira, S, Dung, M., & Chaugule, A. (2017). Securing user’s data on cloud using AES. International Journal on Recent and Innovation Trends in Computing and Communication, 5(2), 17–20.
[13] Pitchay, S. A., Alhiagem, W. A. A., Ridzuan, F., & Saudi, M. M. (2015). A proposed system concept on enhancing the encryption and decryption method for cloud computing. Proceedings of the IEEE 17th UKSim-AMSS International Conference on Modelling and Simulation, pp. 201-205.
[14] Chauhan, A., & Gupta, J. (2016). Review on encrypt the text by MD5 and RSA in client cloud approach. International Journal of Advance Research, Ideas and Innovations in Technology, 2, 1-7.
[15] Jaglan, V. (2015). Proposing efficient approach to improve integrity checking in cloud data security.
[16] S. M. Seth and R. Mishra, “Comparative analysis of encryption algorithms for data communication 1,” 2011.
[17] M. Agrawal and P. Mishra, “A comparative survey on symmetric key encryption techniques,” Int. J. Comput. Sci. Eng., vol. 4, no. 5, p. 877, 2012.
[18] M. A. Kumar and S. Karthikeyan, “Investigating the efficiency of Blowfish and Rejindael (AES) algorithms,” Int. J. Comput. Netw. Inf. Secur., vol. 4, no. 2, p. 22, 2012.
[19] A. A. Tamimi, Performance Analysis of Data Encryption Algorithms. Retrieved October 1, 2008 Fromhttp. 2008.
[20] N. Advani, C. Rathod, and A. M. Gonsai, “Comparative Study of Various Cryptographic Algorithms Used for Text, Image, and Video,” in Emerging Trends in Expert Applications and Security, Springer, 2019, pp. 393–399.
[21] G. Singh, “A study of encryption algorithms (RSA, DES, 3DES and AES) for information security,” Int. J. Comput. Appl., vol. 67, no. 19, 2013.
[22] M. N. A. Wahid, A. Ali, B. Esparham, and M. Marwan, “A Comparison of Cryptographic Algorithms: DES, 3DES, AES, RSA and Blowfish for Guessing Attacks Prevention,” J. Comput. Sci. Appl. Inf. Technol., vol. 3, pp. 1–7, 2018.
[23] N. Aleisa, “A Comparison of the 3DES and AES Encryption Standards,” Int. J. Secur. Its Appl., vol. 9, no. 7, pp. 241–246, 2015.
[24] https://en.wikipedia.org/wiki/HTML, Retrieved; 20th January, 2024
[25] https://en.wikipedia.org/wiki/CSS, Retrieved; 28th December, 2023
[26] https://www.npmjs.com/package/bcrypt, Retrieved, 5th February, 2024
[27] https://www.npmjs.com/package/crypto-js, Retrieved, 3rd January, 2024
[28] https://en.wikipedia.org/wiki/JavaScript, retrieved, 2nd February, 2024
[29] https://jwt.io/, Retrieved, 5th February, 2024
[30] Pandey T. (2022). A secure data transmission over the cloud computing: using salted MD5. International Journal of Innovative Re-search in Computer and Communication Engineering, 4(2), 1-6.
[31] Nicholas, K., Wilson, C., Kibe, A. (2017). Enhancing trust in cloud computing using MD5 hashing algorithm and RSA encryption standard. International Journal of Scientific and Engineering Re-search, 8(3), 550-566.
[32] Gul, F, Amin, A, & Ahsraf, S. (2017). Enhancement of cloud computing security with secure data storage using AES. International Journal of Computer Science and Mobile Computing, 6(7), 27-32.