Motorola maxx V6 manual Trusted MIDlet Suites, Draft Subject to Change 51/201

Java ME Developer Guide

Chapter 8 - MIDP 2.0 Security Model

suites access to the following protected APIs or functions:

∙javax.microedition.io.HttpConnection - HTTP protocol

∙javax.microedition.io.HttpsConnection - HTTPS protocol

8.3Trusted MIDlet Suites

Trusted MIDlet suites are MIDlet suites in which the integrity of the JAR file can be authenticated and trusted by the device, and bound to a protection domain. The MO- TORAZR maxx V6 will use x.509PKI for signing and verifying trusted MIDlet suites.

Security for trusted MIDlet suites will utilize protection domains. Protection domains define permissions that will be granted to the MIDlet suite in that particular domain. A MIDlet suite will belong to one protection domain and its defined permissible ac- tions. For implementation on the MOTORAZR maxx V6, the following protection do- mains should exist:

∙Manufacturer - permissions will be marked as "Allowed" (Full Access). Downloaded and authenticated manufacturer MIDlet suites will perform consistently with MIDlet suites pre-installed by the manufacturer.

∙Operator - permissions will be marked as "Allowed" (Full Access). Downloaded and authenticated operator MIDlet suites will perform consistently with other MIDlet suites installed by the operator.

∙3rd Party - permissions will be marked as "User". User interaction is required for permission to be granted. MIDlets do not need to be aware of the security policy except for security exceptions that will occur when accessing APIs.

∙Untrusted - all MIDlet suites that are unsigned will belong to this domain.

Permissions within the above domains will authorize access to the protected APIs or functions. These domains will consist of a set of "Allowed" and "User" permissions that will be granted to the MIDlet suite.

DRAFT - Subject to Change [51/201]