| With the coming of Mobile Communications Age, all sorts of mobile applications develop rapidly in human's society. However, the interceptable nature of wireless signals leaves mobile applications easily facing the situation of attack, so that, how to secure mobile applications becomes a challenging problem. Currently, the main develop direction of mobile security technology is to combine J2ME technology and XML technology so that we can obtain more flexible security measure.The paper proposes a J2ME and XML based mobile applications security solution that named WXSec, and make a deep reserch on key management problem in this solution.Firstly, based on the deep study of interrelated security technology and current solution, the paper presents the main design idea of WXSec, and brings out its total framework.Secondly, the paper makes the module design for WXSec. In mobile client, the paper designs user application interface, network transmition interface and information transaction module in detial, and the key content of these is a XML data encapsulation protocol which used to convert the data format. In security service module, the paper designs the constitute and the work principle of communications interface module, XML transaction module, user management module and public key certificate transaction module, and implements communications interface module and XML transaction module. The paper also gives the total workflow of WXSec.Additional, the paper design the key management scheme, the key problem of WXSec, in detail which consists of the key management between mobile client and appliaction server, the key management between mobile client and security service module and moble client private key management.The paper analysis the performance of the whole system, illuminate the advantage of WXSec compare to the current solutions.The paper takes a simulation test of some functions of WXSec on PC, the result show that our system is feasible. |
PDF Full Text Request