Security and MIDlet Signing, Permissions | Sun Microsystems J2ME

CHAPTER 6

Security and MIDlet Signing

MIDP 2.0 includes a comprehensive security model based on protection domains. MIDlet suites are installed into a protection domain which determines access to protected functions. The MIDP 2.0 specification also includes a recommended practice for using public key cryptography to verify and authenticate MIDlet suites.

For definitive information, consult the MIDP 2.0 specification. For an overview of MIDlet signing using the J2ME Wireless Toolkit, read this article:

Understanding MIDP 2.0's Security Architecture

http://developers.sun.com/techtopics/mobility/midp/articles/

permissions/

If you need more background on public key cryptography, try this article:

MIDP Application Security 1: Design Concerns and Cryptography

http://developers.sun.com/techtopics/mobility/midp/articles/

security1/

This chapter describes support for protection domains, permissions, and MIDlet signing in the J2ME Wireless Toolkit.

6.1Permissions

MIDlets must have permission to perform sensitive operations, like connecting to the network. Permissions have specific names, and MIDlet suites can indicate their need for certain kinds of permissions through attributes in the MIDlet suite descriptor.

49

Image 61

Sun Microsystems J2ME manual Security and MIDlet Signing, Permissions

Contents

User’s Guide Please Recycle Contents Using the Emulator Security and MIDlet Signing Using the PIM and FileConnection APIs Command Line Reference 103 Index Who Should Use This Book PrefaceRelated Documentation How This Book Is Organized Preface Typographic Conventions Accessing Documentation OnlineWe Welcome Your Comments Quick Start Introduction KToolbar window Tools in the Toolkit Supported JCP APIs in the J2ME Wireless Toolkit Toolkit FeaturesSupported Technology Mmapi About Projects Developing MIDlet Suites Creating a new project Edit Source Code Simple Development Cycle Build Messages about building 3 Run List of project MIDlets Package Full Development Cycle Emulator AMS welcome screen Install URL prompt Application menu, again Launching the installed application Using an Obfuscator Obfuscate.script.name scriptfile Deploying Applications on a Web Server Using a Debugger From the command line, run Selecting APIs Working With Projects Project settings window Changing MIDlet Suite Attributes Editing MIDlet suite attributes List of MIDlets in a project Manipulating MIDlets Project push registry settings Using the Push Registry Project Directory Structure Using Third-Party LibrariesProject directory structure Third-Party Libraries for One Project Configuring KToolbarThird-Party Libraries for All Projects Setting the javac Encoding Property Setting the Application DirectoryWorking with Revision Control Systems 28 J2ME Wireless Toolkit User’s Guide October Emulator Skins Using the EmulatorEmulator skins Using the Emulator DefaultColorPhone emulator skin Network Proxies Setting Emulator PreferencesKeyboard shortcuts Heap Size Storage and Cleaning Choose Edit Preferences... and click on the Performance tab Adjusting Emulator Performance Adjusting the emulator’s performance Pausing and Resuming Running the Emulator Solo Using Third Party Emulators Emulators 38 J2ME Wireless Toolkit User’s Guide October Monitoring Applications Using the Profiler Turning on the profiler Execution Time and Number of Calls Call Graph Saving and Loading Profiler Information Using the Memory Monitor You’ll see a table with the following columns Saving and Loading Memory Monitor Information Using the Network Monitor Network monitor Filtering Messages Sorting Messages Network monitor filter settingsSaving and Loading Network Monitor Information Clearing the Message Tree 48 J2ME Wireless Toolkit User’s Guide October Permissions Security and MIDlet Signing MIDlet suite permissions Protection Domains Signing a MIDlet Suite Creating a New Key Pair Managing Keys Creating a new key pair Getting Real Keys Importing an Existing Key Pair Managing CertificatesRemoving a Key Pair Certificate manager Importing Certificates Removing Certificates Setting Emulator Phone Numbers Using the Wireless Messaging API Simulating an Unreliable Network Setting WMA preferences Sending a Text SMS Message Sending Messages With the WMA Console Sending a text message Sending a Binary SMS Message Sending a binary message Sending Text or Binary CBS Messages Sending CBS messages Sending MMS Messages Adding recipients for an MMS message Receiving Messages in the WMA Console Using the Network Monitor with WMA Supported Formats and Protocols Using the Mobile Media APISupported Mmapi media formats Media Capture Using MediaControlSkinWell-Behaved MIDlets Working With Mobile 3D Graphics Immediate ModeJSR 184 Overview Trading Quality for Speed Retained Mode Creating Mobile 3D Graphics Content 70 J2ME Wireless Toolkit User’s Guide October FileConnection API Using the PIM and FileConnection APIs Managing filesystem roots PIM API Bluetooth Simulation Environment Using the Bluetooth and Obex APIsObex Over Infrared Obex Preferences Setting Obex and Bluetooth Preferences Bluetooth System Properties Bluetooth Discovery TimeoutBluetooth BCC Properties BCC properties 76 J2ME Wireless Toolkit User’s Guide October Web services stub generator Using Web Services 78 J2ME Wireless Toolkit User’s Guide October Overview Application Demonstrations Application demonstrations \WTK22\apps\WMADemo\src\example\sms\SMSSend.java KToolbar General Instructions Opening a demonstration application project BluetoothDemo Running the Bluetooth Demo server Life3D Demo3D Controls for Life3D PogoRoo Bouncing kangaroo Retainedmode Mmademo JSR172Demo Simple Player Simple Tones Player commands Video PausingAudioTest Attributes for mmademo ObexDemoDescriptions of MMAPI-specific MIDlet attributes Waiting for an Obex connection Prompting to accept a connection Browsing Files PDAPDemo Contents of the root1 directory Choosing a list type PIM API To actually save the list item, choose Commit from the menu Saving an item WMADemo Sending a text message Push registry springs to life Addressing an MMS message WMADemo receives the image Prerequisites Command Line ReferenceDevelopment Cycle Preverify options files directories Jar cfm MyApp.jar MANIFEST.MF -C classes . -C res Run=storagename storagenumber Remove=storagename storagenumber all Debugging Launching Toolkit GUI Components Toolkit component commandsEmulator Preferences Properties List Monitor Enable memory monitor Changing the Emulator’s Default Protection Domain Using Security Features Signing MIDlet Suites Managing Certificates Options for the wscompile Command Using the Stub GeneratorOptions Example Command Supported Features -f for wscompile Internationalization Locale Setting Character Encodings Emulated Locale Java Compiler Encoding Setting Font Support in the Default Emulator 118 J2ME Wireless Toolkit User’s Guide October Index Ktools.properties, 27 ktools.properties ﬁle Index 122 J2ME Wireless Toolkit User’s Guide October