Table of Contents
Advertisement
To use such secure connections, certificates have
to be saved in the phone. The Z200/Z208 comes
with a number of pre-installed WAP certificates, so
called trusted certificates.
WTLS class 2 includes the following security fea-
tures:
Configuration of WAP settings
An easy way to perform the WAP configuration of a
single phone is by using the Sony Ericsson step-
by-step WAP configurator. The configurator utilizes
OTA provisioning, and is available on
www.SonyEricsson.com; no login required.
A manual configuration is made using the menu
system in the phone. This is described in the user
guide.
To simplify configuration of WAP settings in a
number of phones, all settings can be sent as an
SMS message to each phone. This makes it easy
for an operator, a service provider or a company to
distribute settings for Internet/intranet, and WAP,
without having to configure each phone manually.
• The OTA configuration message is distributed
via SMS point-to-point.
Push services
These are useful for sending updated WAP site
contents or WAP links to mobile users. Examples
of services that can be implemented using push
services:
• Notification of new voice mails. Instant messag-
ing and chat.
• News, sport results, weather forecasts, financial
information (such as stock quotes).
• Personal Information Manager (PIM) - delivery
of contacts, meeting requests.
• Fill up a smart card with e-cash.
• Interactive games, for example, play poker with
a friend.
• Encryption of a message, ensuring that only the
sender and the recipient can read the contents
of a message.
• Server authentication, meaning that the mes-
sage is encrypted and users can verify that they
really are communicating with the WAP gateway
they believe they are connected to.
• The setup information is a binary encoded XML
message, according to WBXML. To receive
information about OTA specifications, please
contact your local Sony Ericsson representative
for consumer products.
• The user is not alerted about new settings until
the ongoing browsing session ends. Further-
more, settings are not changed during an ongo-
ing browsing session.
• The necessary user interaction is limited to
receiving and accepting/rejecting the configura-
tion message, and selecting the WAP profile to
allocate the settings to.
• Security can be handled using a keyword identi-
fier displayed on the screen as a shared secret
between the SMS sender and recipient. It is
important that the user can verify that the con-
figuration message is authentic.
In the Z200/Z208, the user selects whether to allow
push messages or not. There are two different
forms of Push services:
Service Indication (SI)
This is basically a text message to the user con-
taining a link to a URL carried by the SI. If the user
decides to load the suggested URL, normal WAP
browsing commences.
15
Z200/Z208
White Paper
February 2004
Advertisement
Table of Contents
