B2B Integration : A Practical Guide to Collaborative E-commerce

356 B2B Integration — A Practical Guide to Collaborative E-commerce
The following threats and protection methods are identified:
• The possibility for viruses and malicious services in the mobile
terminal. Virus protection is required.
• The wireless transmission on the radio interface is protected with
standard GSM security methods.
• Mobile networks can have unprotected radio links inside the network
(typically between the base station and base station controller). WAP
services could be protected by the Wireless Transport Layer Security
(WTLS) layer.
• The WAP gateway and the server where the services are stored
require similar protection as Internet-servers (firewalls, careful system
configuration, skillful administration and monitoring, etc.). This
protection is critical for the servers, which implement charging or
store sensitive user information.
• The data transmission between the WAP gateway and the server
needs to be protected by firewalls, IPsec tunneling, or other methods.
• The new security requirements are similar to the security requirements
of a company intranet and Web servers.
Terminal
The terminal uses WTLS to provide privacy, integrity and authentication
between itself and the WAP gateway. Phone.com incorporates RSA
Security encryption technology into the WAP-compliant UP.Browser®
terminal and Up.Link Server Suite products. Embedded into numerous
mobile phones, UP.Browser utilizes RSA Security technology to provide
secure wireless information access from wherever a consumer may be.
The UP.Browser v4.1 was designed as a WAP 1.1 Class C device,
which includes all required layers of the WAP stack. Phone.com
anticipates that the UP.Browser v4.1 will ship with 128-bit encryption
for US and international markets, based on recent US government
policy decisions and Phone.com's receipt of US exports authorization.
Ranging from smart phones like the Nokia Communicator 9000 to
large, enterprise WAP servers, Nokia incorporates RSA BSAFE security
components into its products to enable them to offer e-business services