Secure Application of Wireless Java in Mobile Devices

廖旭,凌力

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.19.043

2003-01-01

Abstract:This paper introduces wireless applications and J2ME security architecture, shows how to exchange sensitive data more securely over wireless links for end-to-end m-commerce applications by using data encryption and SSL protocol.

What problem does this paper attempt to address?

Research on security extensions based on Java 2 security architecture

TIAN Yu-hong,WANG Ze-bing,FENG Yan

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.24.029

2006-01-01

Abstract:The Java virtual machine(JVM)is used more frequently as the basic engine behind dynamic web services.With the proliferation of network attacks on these network resources,much work are done to provide security for the network environment.Little effort has been placed on securing a Java web server where the attacker has a valid login to the host machine.After describing the vulnerabilities in Java's security mechanisms,an extended security system based on Java 2 security architecture is introduced.It also explains the runtime status of system.The increased assurance of correct system operation and the integrity of Java application server are provided.
APPLICATION AND STUDIES ON SECURITY ARCHITECTURE OF WIRELESS JAVA

Xu Qiting,Wang Xin,Gao Chuanshan

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.08.063

2007-01-01

Abstract:The security architecture of J2ME is introduced.through two aspects:JVM Security and Application Security;brings up how to exchange senstive datas in wireless network by analyzing the methods about wireless security provided by J2ME MIDP2.0.Then,considering the existing security problems,some viable suggestions are presented.
Lightweight Security for Mobile Commerce Transactions

KY Lam,SL Chung,M Gu,JG Sun

DOI: https://doi.org/10.1016/s0140-3664(03)00188-9

IF: 5.047

2003-01-01

Computer Communications

Abstract:This paper describes a lightweight security mechanism for protecting electronic transactions conducted over the mobile platform. In a typical mobile computing environment, one or more of the transacting parties are based on some wireless handheld devices. Electronic transactions conducted over the mobile platform are gaining popularity and it is widely accepted that mobile computing is a natural extension of the wired Internet computing world. However, security over the mobile platform is more critical due to the open nature of wireless networks. Furthermore, security is more difficult to implement on the mobile platform because of the resource limitation of mobile handheld devices. Therefore, security mechanisms for protecting traditional computer communications need to be revisited so as to ensure that electronic transactions involving mobile devices can be secured and implemented in an effective manner. This research is part of our effort in designing security infrastructure for electronic commerce systems, which extend from the wired to the wireless Internet. A lightweight mechanism was designed to meet the security needs in face of the resource constraints. The proposed mechanism is proven to be practical in real deployment environment.
THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

SHAO Bing,LU Dong-ming

2000-01-01

Abstract:Data encryption is one of the key techniques for information security. In the beginning of this paper, the present encryption methods are analyzed. Next, we design one practical system which can transmits data in the Internet and has the capacity of digital signature and authentication. Finally, some technical issues encountered in the system implementation are discussed
Analysis of GSM and GPRS Security

WANG Qi-hua,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.02.049

2005-01-01

Abstract:The GSM and GPRS system provides solutions to a few important aspects of security: subscriber authentication, subscriber identity confidentiality and confidentiality of voice and data over the radio path. An analysis of the security features provided in a GSM and GPRS network is given.
Research on Security Protocol for Mobile Payment Based Oil J2ME

许峰,崔隽,黄皓

DOI: https://doi.org/10.3969/j.issn.1002-137x.2008.10.022

2008-01-01

Computer Science

Abstract:The security protocols which are crucial to the mobile payment system(MPS),especially to the authentication of the user(mobile hand-held devices)in the wireless environment,determine the security properties or even the fate of whole system.We investigate the existent mobile payment systems,study the characteristic and security requirement of the macro-payment,and consider the inherent security of the J2ME platform,and hereby propose a security protocol for mobile payment based on J2ME,emphasizing the authentication to the user.Then we analyze and test the security and feasibility of the security protocols and the conclusion we have drawn is that security protocol achieves its security goals,has the ability to resist usual attacks and enjoys high efficiency.
The Problems of Mobile E-Commerce Secure Payment and Solutions

J. Chen,X. Peng

DOI: https://doi.org/10.4028/www.scientific.net/AMM.443.561

2013-10-01

Abstract:The payment system of wireless communication is a whole of the various types of software used by the wireless communication network, wireless payment terminals and payment terminals, which together constitute the user applications. Compared to traditional network, wireless communication network is an more open system. According to this, users personal is easier to be stolen in the transfer process and the type of attack has become more diverse and innovative. The article introduces two types attack and solutions. Fishing Wifi is a common means of attack in the wireless network nowadays. Mobile banking is a typical example too. It involves the security of payment in mobile banking which becomes the new problem within e-commerce.

Business,Computer Science
Research of Wireless Access Technology for Home Gateway Based on J2ME

Xu Sushan,Ma Guoqiang,Wu Jinyong,Xu Jianjian

DOI: https://doi.org/10.19651/j.cnki.emt.2005.01.041

2005-01-01

Abstract:In this paper, a wireless access technology for home gateway is presented. With it users can access home gate- way by mobile telephone at any moment. For the network security, an optimized algorithm of digital signature for mobile phone is introduced.
The Security of WAP-based Electronic Payment

LI BEIJIN,ZHANG LI

DOI: https://doi.org/10.3969/j.issn.1008-0570.2008.06.003

2008-01-01

Abstract:The popularity of WAP-based Mobile Internethas brought new opportunities and challenges to e-commerce. The security of WAP-based electronic payment is a key problem to be solved. This paper introduces the technical characteristics of WAP,analyzes the security problems and solutions of Internet-based electronic payment,then concludes new security problems of WAP-based electronic payment,and provides corresponding solutions.
Joint physical-application layer security for wireless multimedia delivery

Liang Zhou,Dan Wu,Baoyu Zheng,Mohsen Guizani

DOI: https://doi.org/10.1109/MCOM.2014.6766087

IF: 9.03

2014-01-01

IEEE Communications Magazine

Abstract:In recent years, there have been increasing demands for the security of wireless multimedia applications. Essentially, wireless networks, compared to traditional wired networks, are more likely to suffer from malicious attacks. Most current security methods consider physical layer and application layer security technologies independently and separately. Usually, physical layer information is dynamic in wireless networks, and application layer information is related to wireless multimedia delivery. Importantly, both of them have significant impact on security performance. In this work, we propose a joint framework involving both the physical and application layer security technologies. Specifically, by exploiting the security capacity and signal processing technologies at the physical layer and the authentication and watermarking strategies at the application layer, the available network resources can be utilized efficiently. In addition, scalable multimedia security services can be maximized within the given multimedia delivery deadlines. In particular, this joint scheme can be implemented easily with low communication overhead, which facilitates its deployment in large-scale wireless multimedia systems.
Analysis of MIDP 2.0 Security

DA Wu-san,YANG Wei-kang

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.14.001

2006-01-01

Abstract:J2ME is a micro Java runtime environment for resource-constrained devices.There are already many mobile devices that support MIDP 1.0 in J2ME.Many security threats exist in MIDP1.0 since the specification has only little security issues.It's supposed that the next version of MIDP will improve the security for the business information and personal privacy.The brief introductions of the J2ME and MIDP are given at first,the security threats and attacks in the J2ME environment are explained as following,then the new security mechanisms and features in MIDP2.0 are expounded and against presented threats are analyzed,finally the conclusion is drawn that MIDP2.0 improves the mobile information security.
A New Security Architecture for Mobile Communication

Chen Tianzhou,Huang Yu,Chen Feng,Hu Wei

2006-01-01

Abstract:There are many security defects in existing mobile communication systems, such as unidirectional authentication and cipher key transmission in plaintext. With the expansion of the mobile communication services, the mobile security becomes more and more important, but the existing communication systems can not prevent hostile attacks to supply high-quality service because of their defects in security. To solve these problems, we propose a new Security Architecture for Mobile Communication (SAMC), which employs new authentication protocols, chooses different encryption algorithms for different requirements and implements integrity control mechanism. Good security is developed in an open environment with the collaboration of experts. It has the robust security and the outstanding performance, just a slight and acceptable loss.
A Robust Middleware Architecture for Mobile Communication Security

Chen Tianzhou,Mao Haixia,Dai Hongjun

2006-01-01

Abstract:This paper briefly analyzes the security mechanisms of GSM/UMTS and finds their security defects, such as unidirectional authentication and cipher key transmission without encryption. For these defects, existing mobile communication systems can not prevent hostile attacks to satisfy high-level security demands. To solve these problems, we propose the robust Middleware Architecture for Mobile Communication Security (MAMCS), which employs new Authentication and Key Agreement (AKA) protocols, chooses different encryption algorithms for different applications and implements integrity control mechanism. In the end, we analyze the performance of MAMCS and show that MAMCS gets a 200%~2% improvement in security only at the cost of 1.51% descent in bandwidth and 18.14 ms extra latency.
Design and Development of J2ME and J2EE Based Mobile-Commerce

潘敏,金连甫,姚伏天

DOI: https://doi.org/10.3969/j.issn.1000-7024.2004.10.047

2004-01-01

Abstract:The combination of J2ME and J2EE technology provides a good solution for Mobile-Commerce. First, some related technologies in the development of mobile-commerce, such as J2ME and J2EE are introduced. Then, ticket booking system is presented as an implementation of mobile-commerce model based on J2ME and J2EE technology.
Mobile Security Middleware Architecture in High Strength

MAO Hai-xia,CHEN Tian-zhou,DAI Hong-jun

DOI: https://doi.org/10.3969/j.issn.1001-3695.2006.08.029

2006-01-01

Abstract:This article briefly analyses the security mechanisms of GSM and UMTS and finds the faults in them.To solve these faults,a mobile security middleware architecture in high strength based on end-to-end security mechanism is proposed.This article introduces the middleware architecture and its security mechanism,including the design of authentication and key agreement,discusses the encryption algorithm and the scheme of integrity control.
Analysis of Security Problems in WAP

余华,钱松荣,胡方农

DOI: https://doi.org/10.3969/j.issn.1007-130x.2002.06.010

2002-01-01

Abstract:Based upon SSL and TLS, the security module WTLS in WAP takes into account of the features of wireless communications and makes a modification, but also causes some problems .WAP introduces a new piece of software, the WAP gateway. This programming model can accord well with the existing Internet standards. However, it makes end to end security difficult to implement.
The Rearch of Mobile Agent Security Mechanism Based on JavaCard

Kai Sun

2002-01-01

Abstract:In current mobile agent systems, the research of protecting a host from possibly malicious mobile agents has made great progress, but reverse problem, namely protecting the agent from malicious hosts has not. This paper puts forward a scheme that uses JavaCard to provide a secure execution environment. First, attack of agent is analyzed. Then the detailed solution based on JavaCard is given.
Independent Credible: Secure Communication Architecture of Android Devices Based on TrustZone

Yichuan Wang,Wen Gao,Xinhong Hei,Irenee Mungwarama,Ju Ren

DOI: https://doi.org/10.1109/ithings-greencom-cpscom-smartdata-cybermatics50389.2020.00032

2020-01-01

Abstract:The development of mobile internet has brought convenience to people, but the openness and diversity of mobile Internet make it face the security threat of communication privacy data disclosure. In this paper, a trusted android device security communication method based on TrustZone is proposed. Firstly, Elliptic Curve Diffie-Hellman (ECDH) key agreement algorithm is used to make both parties negotiate the session key in the Trusted Execution Environment (TEE), and then, we stored the key safely in the TEE. Finally, TEE completes the encryption and decryption of the transmitted data. This paper constructs a secure communication between mobile devices without a trusted third party and analyzes the feasibility of the method from time efficiency and security. The experimental results show that the method can resist malicious application monitoring in the process of data encryption and ensures the security of the session key. Compared with the traditional scheme, it is found that the performance of the scheme is not significantly reduced.
A Secure Communication System with Multiple Encryption Algorithms

Wang Jian,Liu Xu,Ji Xiaoyong

DOI: https://doi.org/10.1109/ICEE.2010.898

2010-01-01

Abstract:Information security is a necessary safeguard for mobile e-commerce and a secure communication system to obtain high quality secure communication in wireless environment is introduced, which is integrating three kinds of encryption algorithms including AES, RSA and CPRS chaos encryption. Secure communication framework based on three-layer encryption model is proposed: (1) AES layer of system code decrypt, system boot and the system self-destruct; (2) RSA layer of authentication, key negotiation and key management functions; (3) CPRS layer of communication data stream encryption and decryption. The implementation and optimization of the above-mentioned three kinds of algorithms are discussed. The experiments show the three kinds of encryption algorithms are safe and reliable to achieve a high degree of secure communication.
Design and implementation of mobile e-commerce application built on WAP mobile payment system

Pengnian Zhang,Le Xu

DOI: https://doi.org/10.1007/s11276-023-03409-2

IF: 2.701

2023-06-14

Wireless Networks

Abstract:With the development of science and technology and the popularization of e-commerce, the application of wireless network technology in the business field has gradually become a hot spot of academic research, which also brings us new topics and challenges. The secure payment system based on the improved TOTP algorithm proposed in this paper involves the WAP wireless secure payment theory and the application of mobile e-commerce. This paper first studies the WAP wireless network theory of mobile payment system, and proposes the WAP algorithm flow based on identity encryption. Then, the secure wireless execution environment of the WAP encryption payment algorithm is analyzed in depth. This paper discusses the security requirements of the WAP wireless network payment system. Based on the identity encryption algorithm, several practical algorithms are proposed, and a wireless network mobile payment model combining NTRU and ECC is constructed to improve the WAP algorithm. This paper proposes a WAP wireless network security payment system based on the improved TOTP algorithm, constructs its overall structure, and designs a core algorithm with strong adaptability, including the improved TOTP algorithm and risk assessment algorithm. Finally, the performance of the WAP e-commerce secure payment system is tested and analyzed. The research found that when the 256-bit key was used to encrypt the login information, the number of tests was 23,588, the number of concurrent threads was 200, the number of requests per second was 518, the average response time was 0.219 s, the average traffic was 500 KB/s, and the error rate was 2%. It can be seen from the data that the WAP wireless secure payment system operates normally with low network delay and can respond to operation requests quickly under the condition of concurrent access by multiple users, with strong overall pressure resistance. The work of this paper has a good reference value for the construction of the WAP wireless network payment system and the design and application of mobile e-commerce, which is conducive to further research.

computer science, information systems,telecommunications,engineering, electrical & electronic

Secure Application of Wireless Java in Mobile Devices

Research on security extensions based on Java 2 security architecture

APPLICATION AND STUDIES ON SECURITY ARCHITECTURE OF WIRELESS JAVA

Lightweight Security for Mobile Commerce Transactions

THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

Analysis of GSM and GPRS Security

Research on Security Protocol for Mobile Payment Based Oil J2ME

The Problems of Mobile E-Commerce Secure Payment and Solutions

Research of Wireless Access Technology for Home Gateway Based on J2ME

The Security of WAP-based Electronic Payment

Joint physical-application layer security for wireless multimedia delivery

Analysis of MIDP 2.0 Security

A New Security Architecture for Mobile Communication

A Robust Middleware Architecture for Mobile Communication Security

Design and Development of J2ME and J2EE Based Mobile-Commerce

Mobile Security Middleware Architecture in High Strength

Analysis of Security Problems in WAP

The Rearch of Mobile Agent Security Mechanism Based on JavaCard

Independent Credible: Secure Communication Architecture of Android Devices Based on TrustZone

A Secure Communication System with Multiple Encryption Algorithms

Design and implementation of mobile e-commerce application built on WAP mobile payment system