B2B Integration : A Practical Guide to Collaborative E-commerce

358 B2B Integration — A Practical Guide to Collaborative E-commerce
WAP gateway security considerations
Suppliers of the WAP gateway and network operators take every possible
measure to keep the WAP gateway secure by:
• Ensuring that the WAP gateway never stores decrypted content on
secondary media;
• Ensuring the removal of unencrypted content from the memory in the
WAP gateway as fast as possible;
• Securing the WAP gateway physically so that only authorized
administrators have access to the system console;
• Limiting the access to the WAP gateway so that it is not accessible
from a remote site outside the carrier firewall; and
• Applying all other security precautions used to protect billing systems
and the home location register to the WAP gateway.
12.4.3. Generic mobile solutions
There are two main solutions, which will be based on whether or not a
mobile operator is used.
Mobile operator solution
In this solution the WAP gateway will be located at the operator's
end. The operator will connect the mobile world and the Internet
world by placing a WAP gateway in as a node into the GSM system.
The origin server will be at the customer's site that will have to take
the necessary security action to secure the environment. Figure 12.3
outlines the architecture of the WAP gateway at the mobile operator's
site.
Company solution
Company solution is narrowed down to two possible infrastructures: the
use of a WAP server or a WAP gateway.