MAS server

The MAS system includes MAS server, MAS management platform and MAS terminal. China Mobile provides group customers with internal deployment of mobile proxy servers (mainly government industry users and enterprises with complete enterprise information systems). Provide information application services based on mobile terminals (including SMS, MMS, GPRS, WAP, mobile phone clients, etc.). Extend user applications and services from different industries to mobile terminals through mobile proxy servers.

(1) MAS server composition and functions:

MAS server composition:

MAS server consists of application access adaptation plug-in module, business scheduling module, It is composed of mobile security access module and management module.

Functions completed by each component:

The application access adapter plug-in module realizes the mobile application interface of the mobile application business, and completes mobile office, mobile email, and data through a variety of mobile communication methods. Mobile application services such as on-site inquiry, collection, entry, and WAP applications.

The business processing module processes data information received from the application system. Its main functions include information processing and routing, user authentication, business scheduling, log processing and QoS control.

On the one hand, the mobile security access module realizes data communication between the MAS server and the industry gateway through the interface protocol provided by the mobile industry gateway. On the other hand, security encryption technology is used to provide SMS secure access, MMS secure access, GPRS secure access, WAP secure access, USSD secure access, and smart terminal secure access functions. In this way, encrypted transmission of information over the air is achieved. , providing security services for MAS terminals.

The management module completes the self-management and services of the MAS server, and can provide interface sub-modules including network management and authentication. Functional modules such as business navigation, routing management, business management, data management, application publishing, statistical analysis, address book management, and system configuration management are available.

(2) MAS management platform:

The MAS management platform runs in the mobile company and communicates with the MAS server through encrypted IP channels to complete the management and control of the MAS server. Specific Management contents include configuration management, certification management, monitoring management, fault management, security management, and upgrade and maintenance management.

(3) MAS terminal:

Through the MAS system, mobile terminals can connect and access application data in the information network through mobile communication methods such as SMS/MMS short messages and GPRS to complete data movement. application. The MAS terminal is equipped with a hardware encryption module (for example, a mobile phone is equipped with a secure SIM card, and a notebook is equipped with a secure PCMCIA card). It decrypts the information encrypted by the mobile security access module and encrypts the uplink information to ensure that the information received or sent is The transmission of information is secure. MAS terminals can be mobile terminals such as ordinary mobile phones, smart phones or PDA mobile phones, mobile laptops, etc. MAS network structure:

(1) MAS server: Deployed within industry users and enterprises, communicating with industry gateways and MAS management platforms through wide area networks or mobile public networks.

(2) MAS management platform: Deployed in the mobile computer room, it communicates with BOSS and provincial comprehensive network management through China Mobile's internal network, and manages each MAS server through the WAN.

(3) MAS terminal: MAS terminal uses the services provided by the MAS system through the mobile network. Client software may need to be installed as needed. (1) MAS business description:

The MAS terminal forwards the MAS terminal’s business request through the MAS business proxy server through secure short messages, GPRS online mode, IP online business, WAP and other data business modes to complete the data processing Mobile applications such as mobile query, collection, and entry receive processing results from the MAS server after business processing is completed, and return the processing results to the MAS terminal.

(2) The process for MAS to complete the business:

1) Deployment of MAS server: Install and deploy the MAS server according to the business that industry users need to complete,

2) Business acceptance

3) MAS server registration

4) MAS server authentication and authentication:

5) Configure application access adaptation module :

Configure the plug-ins that need to be activated in the mobile application access adaptation module on the MAS server. The configuration content includes the basic information of the MAS server, including host information, number of supported users, IP address, and business services. Ports etc.

6) Run the MAS system:

The MAS server activates corresponding functions according to the mobile data business and business adaptation capabilities issued by the MAS management platform;

MAS management The platform monitors and manages the equipment status and operating status of the MAS server;

MAS terminals are configured with security modules and application modules to achieve secure communication with the MAS server through the mobile communication network, and the MAS server serves as a business proxy server Forward the service request of the MAS terminal to the application service processing server. After the service processing is completed, the processing result is received from the MAS processing server and the processing result is returned to the MAS terminal. The MAS system adopts security measures to ensure the security of information network transmission, MAS server security, industry user information network information security, and mobile terminal security to protect the overall security of mobile applications for users in China's mobile industry.

(1) Data transmission security:

The MAS server is connected to industry gateways and MAS management platforms and other equipment through VPDN to ensure the security of data transmission from the IP link; the information is Network transmission is carried out in an encrypted manner to ensure the security of data transmission.

In industries and applications that have higher requirements for secure transmission, dedicated secure transmission and authentication systems with higher security levels can be used to ensure information security.

(2) Mobile terminal security:

Special secure SIM cards and secure PCMCIA modules can be used on mobile terminals for information encryption and user identity authentication to ensure the security of the mobile terminal.

(3) MAS management platform security:

The MAS system provides security functions from a series of aspects such as access control, security detection, attack monitoring, and operation auditing, and has complete network security monitoring. , alarm and fault handling functions ensure the safety of the MAS management platform.

(4) Complete authority management and log management:

MAS system provides database logs, operating system logs and complete management logs; secure SIM card/secure PIMCIA card on mobile terminals And the user and administrator permission management provided by the MAS management platform effectively manage the permissions for the use of the MAS system.