基于CLDC的无线JAVA安全研究

RESEARCH ON SECURITY OF WIRELESS JAVA BASED ON CLDC

系统探讨了基于CLDC的无线Java的安全并得出有关结论,指出了基于CLDC的无线Java安全中的不足之处,并以一个Java游戏为例给出了一种解决基于M IDP 1.0的无线Java在基于客户机/服务器的应用中的安全问题的方案:利用第三方加密包加密通信内容,密钥从用户密码和一个会话参数中产生;采用与HTTP摘要验证相似的方法验证用户身份。对给出的解决方案进行了讨论并指出其实用性。

The security of Wireless Java based on CLDC is discussed deeply and carefully, and the study result of which is given, the security shortcomings of Wireless Java based on CLDC is pointed out and a solutlon to resolve the security of Wireless Java based on MIDP 1.0 used in client/server environment is given in an example of java game ：encrypting the network communication using the third-party cryptography package ,the secret key is computed from the user＇s password and a session parameter; authenticating client using a method similar to HT- TP digest authentication. The solution is discussed and its practicability is pointed out.