Study On Security Of Wireless Web Services On J2ME

Mobile E-business development depends on several technologies: First, the combination of the mobile communication technology and the Internet technology; Second, the J2METM technology, which supports application development on mobile devices; Third, the Web Service technology which is convenient to implement distributed network application; The last, technologies supporting SOAP message parsing on wireless platforms (Fortunately, some third-party SPs (service provider) have offered some solutions to parse SOAP messages on wireless platforms). All these technologies promote the Mobile E-business.However, security issue remains critical to mobile E-business before it gets prevalent.With Web service becoming more and more import in the Internet technology field, combination of wireless network and Web services will be the subject of the next generation E-business. But the mobile e-business based on this architecture will face some new security problems. Web services use an open protocol to communicate and run out of the firewall. So when we deploy these applications in our corporation, we will face serious security threaten.So, we must offer an end-to-end security solution - an end-to-end secure communication between the customer and the SP (service provider) to ensure system's security. Implementing end-to-end security involves every step in the whole transport process. Against every weak point application should take corresponding measures to ensure the security in the transport process.This thesis is based on a mobile E-business system - Mobile Auction System, which adopts the J2ME?and Web service technologies. After comprehensive research work upon the Web service security and J2ME security technologies, I bring forward a security model, and implemented it in the Mobile Auction System. The primary goal is to enhance the security of Mobile Auction System.The thesis aims at SOAP messages' encapsulation and SOAP security extensions. This system uses KSOAP and Bouncy Castle technologies to handle SOAP messages.