Technical information

MIDlet Security
3-8 G24 KJAVA User’s Guide July 15, 2008
MIDlet Security
This paragraph describes the MIDP 2.0 Security Model for the Motorola G24 KJAVA product.
Two types of MIDlets can be downloaded into the G24: “Untrusted” (Unsigned) or “Trusted”
(Signed).
Security modes
:
MIDlet may run in one of two security modes:
• Normal mode (Trusted domain) - Full access is granted to all APIs
• Safe mode (Untrusted domain) - Limited access to API.
Any access to a protected API will be blocked and an exception will be thrown
(java.lang.SecurityException).
Mode is determined according to MIDlet JAD during the download process. Signed MIDlet will
run at Normal mode, Unsigned will run in Safe mode.
G24 uses x.509 PKI for signing and verifying trusted MIDlets.
The JAD file of a signed MIDlet contains additional attributes:
• MIDlet-JAR-RSA-SHA1
• MIDlet-Permissions
• MIDlet-Certificate-1-1
The protected APIs are:
• javax.microedition.io.HttpConnection
• javax.microedition.io.HttpsConnection
• javax.microedition.io.DatagramConnection
• javax.microedition.io.SocketConnection
• javax.microedition.io.SecureConnection
• javax.microedition.io.ServerSocketConnection
• javax.wireless.messaging.*
• com.motorola.oem.OTADownload
• com.motorola.oem.call.*
Note: Download process will fail in case of signature error.
See “MIDlet Signing” for additional information.