Secure Data Transfer; Figure 40: Mode 1 - Java Security Not Activated; Figure 42: Mode 2 - Java Security Activated (Server Certificate And Self Signed Root Certificate In Module Form A Chain) - Siemens Java TC65 User Manual

TC65 JAVA User's Guide
Strictly confidential / Released
11.1

Secure Data Transfer

This feature makes it possible for MIDlets to use safe data links to external communications
partners. The specification IMP 2.0 defines two java classes with this characteristic -
HTTPSConnection and SecureConnection.
The Siemens implementation follows the recommendations in IMP 2.0:
HTTPSConnection
• HTTP over TLS as documented in
specified in RFC 2246.
SecureConnection
• TLS Protocol Version 1.0 as specified in
Two Java Security modes exist for safe data links.
Mode 1:
• Java Security not activated
• No examination of the server certificate takes place when setting up the connection. The
authenticity of the server certificate is not verified. (Figure 40: Mode 1 - Java Security not
activated)
Mode 2 (see 11.2.1 Change to Secured Mode):
• The server certificate is examined when setting up a connection. Two configurations are
valid. The server certificate is identical to the certificate in the module (both certificates are
self signed root certificates) or the server certificate forms a chain with the certificate of
the module. Thus the authenticity of the server certificate can be examined with the help
of the certificate of the module. (Figure 41: Mode 2 - Java Security activated and
• Figure 42: Mode 2 - Java Security activated)
Server
Certificate
(X.509)
public key from
private key
owner of the
from owner of
certificate
the certificate
HTTPS Server
TC65 JAVA User's Guide_V05
RFC 2818
RFC 2246
TCP/IP Connection

Figure 40: Mode 1 - Java Security not activated

Page 70 of 90
s
and TLS Protocol Version 1.0 as
no check of
the certificate
by the module
Module
26.09.2005