Trusted Midlet Suites - Motorola MOTORAZR maxx V6 Developer's Manual

Java ME Developer Guide
Chapter 8 - MIDP 2.0 Security Model
suites access to the following protected APIs or functions:
javax.microedition.io.HttpConnection - HTTP protocol
javax.microedition.io.HttpsConnection - HTTPS protocol

8.3 Trusted MIDlet Suites

Trusted MIDlet suites are MIDlet suites in which the integrity of the JAR file can be
authenticated and trusted by the device, and bound to a protection domain. The MO-
TORAZR maxx V6 will use x.509PKI for signing and verifying trusted MIDlet suites.
Security for trusted MIDlet suites will utilize protection domains. Protection domains
define permissions that will be granted to the MIDlet suite in that particular domain.
A MIDlet suite will belong to one protection domain and its defined permissible ac-
tions. For implementation on the MOTORAZR maxx V6, the following protection do-
mains should exist:
Manufacturer - permissions will be marked as "Allowed" (Full Access).
Downloaded and authenticated manufacturer MIDlet suites will perform
consistently with MIDlet suites pre-installed by the manufacturer.
Operator - permissions will be marked as "Allowed" (Full Access).
Downloaded and authenticated operator MIDlet suites will perform
consistently with other MIDlet suites installed by the operator.
3rd Party - permissions will be marked as "User". User interaction is
required for permission to be granted. MIDlets do not need to be aware
of the security policy except for security exceptions that will occur when
accessing APIs.
Untrusted - all MIDlet suites that are unsigned will belong to this
domain.
Permissions within the above domains will authorize access to the protected APIs or
functions. These domains will consist of a set of "Allowed" and "User" permissions
that will be granted to the MIDlet suite.
DRAFT - Subject to Change
[51/201]