关键词: 零信任；移动政务应用；安全技术架构；单包授权；数据安全沙箱

Abstract: With the widespread adoption of mobile internet and the rapid advancement of mobile intelligent terminal technologies, promoting more government services to be accessible via mobile and handheld devices has become a critical approach to enhancing government administrative efficiency and service effectiveness. Mobile government systems have also emerged as a vital component of digital government and digital institution construction. To ensure the security of mobile government systems and address the security risks arising from open interconnectivity, this paper proposes a zero-trust security architecture tailored for large-scale mobile government application scenarios. This architecture achieves comprehensive security protection across mobile terminals, mobile communications, mobile access, and mobile services, and employs a "distributed cluster deployment + intelligent dynamic routing" strategy to realize a dual high-availability architecture. The effectiveness and feasibility of the proposed architecture have been validated through construction practices and testing results on the mobile side of a provincial integrated government office platform.

Key words: zero-trust; mobile e-government application; security architecture; single packet authorization; data security sandbox