THE UNIVERSITY OF ZAMBIA

SCHOOL OF NATURAL SCIENCES

DEPARTMENT OF COMPUTER SCIENCE

SECURE DATA HANDLING

BY

EDSON BWALYA

CSC 4004 FINAL YEAR COURSE PROJECT

A THESIS SUBMITTED IN PARTIAL FULFILMENT OF THE

REQUIREMENT FOR THE AWARD OF A BACHELOR’S DEGREE OF

COMPUTER SCIENCE

SUPERVISOR: MR ANDIREA THEU

In the modern digital era, the management and protection of sensitive data has become

a critical concern. Many individuals and organizations continue to rely on outdated or

insecure methods to store and transmit data, leaving it vulnerable to unauthorized

access and tampering. The lack of accessible and user-friendly security tools

exacerbates the problem, especially for non-technical users who require simplified yet

robust solutions.

This project proposes a Secure Data Handling System designed to provide

comprehensive data protection through a combination of encryption, integrity

verification, and audit logging functionalities. It introduces a cross-platform mobile

application that enables users to encrypt and decrypt data using industry-standard

methods such as AES and RSA, verify file integrity through SHA-256 hashes, and track

actions taken on data files with metadata logging.

Unlike many cloud-dependent services, this system emphasizes local data processing,

addressing concerns about internet dependency and third-party data exposure. It aims

to serve as a cost-effective, all-in-one security toolkit accessible to both individuals and

small organizations.

By bridging the gap between powerful cryptographic tools and intuitive interfaces, the

Secure Data Handling System empowers users to take control of their data’s

confidentiality, integrity, and traceability.

I, the undersigned, hereby declare that this project titled 'Secure Data Handling System'

is my own work. It has not been submitted for any degree or examination in any other

university to my knowledge, and that all sources I have used or quoted have been

indicated and acknowledged by complete references.

Author:

Edson Bwalya

2021374424

Signature: ___________________________

Supervisor:

Mr. Andrea Theu

Signature: ___________________________
 DEDICATION

I dedicate this project to the Almighty God whose grace, strength, and provision have

sustained me throughout this academic journey. I also dedicate this work to my beloved

parents and family, whose unwavering support, prayers, and encouragement have been

the bedrock of my success.

I would like to extend my heartfelt gratitude to my supervisor, Mr. Andrea Theu, for his

patient guidance, constructive feedback, and steadfast support throughout the

development of this project. His insights and mentorship were invaluable to the

successful completion of this work.

1.1 Background

The exponential growth in digital communication and data storage has dramatically

increased the need for secure data handling practices. Individuals, institutions, and

businesses alike are now generating vast amounts of sensitive information that must

be protected from unauthorized access, tampering, or loss. However, despite

advancements in cryptographic techniques and cybersecurity tools, the implementation

of these technologies remains limited, particularly for non-technical users.

In recent years, there has been a growing emphasis on enhancing data privacy and

protection. Yet, many available solutions either focus solely on specific aspects like

encryption or are too technical for ordinary users to operate confidently. Consequently,

users often rely on insecure, outdated, or piecemeal methods for data

protection—methods that are prone to breaches, manipulation, and lack of traceability.

Moreover, the majority of available tools are either expensive enterprise solutions or

fragmented open-source utilities that require significant technical knowledge. There is a

clear need for an integrated system that simplifies encryption, allows for the verification

of data integrity, and enables metadata-based tracking—all within an intuitive, user-

friendly interface.

This project introduces a Secure Data Handling System designed to address these

challenges. It aims to empower users with a comprehensive yet accessible platform

that ensures their data remains confidential, tamper-proof, and traceable throughout its

lifecycle.
1.2 Problem Statement

The handling of sensitive data is fraught with risk, especially when users lack access to

secure and practical tools. While encryption technologies such as AES and RSA exist,

their application is often confined to technically adept users. The absence of a unified,

user-friendly system for encryption, integrity verification, and action logging leaves a

significant portion of users vulnerable.

Furthermore, existing systems tend to be either overly simplistic, compromising on

essential security features, or overly complex, deterring non-technical users from

adopting them. As a result, there is an urgent need for a secure data handling

application that combines robust security mechanisms with intuitive design and

functionality.

1.3 Research Questions

Can the integration of encryption, integrity verification, and metadata-based audit

logging into a mobile app improve data security for non-technical users?

Will users find value and usability in an all-in-one secure data handling system?

How effective is the proposed system in protecting data throughout its lifecycle, from

storage to transmission?

1.4 Aims

The aim of this project is to develop a mobile application that facilitates secure data

management by combining file encryption, data integrity verification, and audit logging

into one cohesive system. The application is intended to be both secure and accessible,

enabling users to manage their sensitive files confidently and efficiently.

 To implement data encryption using both symmetric (AES) and asymmetric

(RSA/ECC) methods.

 To provide SHA-256 hash-based integrity verification for detecting tampering.

 To log file operations with key metadata (e.g., timestamp, method used).

 To ensure ease of use for non-technical users via intuitive design.

 To create a lightweight, offline-capable solution that does not rely on cloud

storage.

 To test and validate the system for effectiveness, performance, and user

satisfaction.