Skip to main content

Challenges in Implementing an End-to-End Secure Protocol for Java ME-Based Mobile Data Collection in Low-Budget Settings

  • Conference paper

Part of the Lecture Notes in Computer Science book series (LNSC,volume 7159)

Abstract

Mobile devices are having a profound impact on how services can be delivered and how information can be shared. Sensitive information collected in remote communities can be relayed to local health care centers and from there to the decision makers who are thus empowered to make timely decisions. However, many of these systems do not systematically address very important security issues which are critical when dealing with such sensitive and private information.

In this paper we analyze implementation challenges of a proposed security protocol based on the Java ME platform. The protocol presents a flexible secure solution that encapsulates data for storage and transmission without requiring significant changes in the existing mobile client application. The secure solution offers a cost-effective way for ensuring data confidentiality, both when stored on the mobile device and when transmitted to the server. In addition, it offers data integrity, off-line and on-line authentication, account and data recovery mechanisms, multi-user management and flexible secure configuration. A prototype of our secure solution has been integrated with openXdata.

Keywords

  • Mobile Data Collection Systems
  • Mobile Security
  • secure communication protocols
  • secure mobile data storage
  • secure mobile data transmission
  • Java ME
  • openXdata
  • HTTPS
  • JAD

This is a preview of subscription content, access via your institution.

Buying options

Chapter
USD   29.95
Price excludes VAT (Canada)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   39.99
Price excludes VAT (Canada)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   54.99
Price excludes VAT (Canada)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Crocker, S., Schiller, J.: RFC 4086 - randomness requirements for security (2005), http://www.ietf.org/rfc/rfc4086.txt

  2. Egeberg, T.: Storage of sensitive data in a Java enabled cell phone. Master’s thesis, Høgskolen i Gjøvik (2006)

    Google Scholar 

  3. Itani, W., Kayssi, A.: J2ME application-layer end-to-end security for m-commerce. Journal of Network and Computer Applications 27(1), 13–32 (2004)

    CrossRef  Google Scholar 

  4. T. Legion Of the Bouncy Castle, http://www.bouncycastle.org/ (accessed March 2011)

  5. Mancini, F., Mughal, K., Gejibo, S., Klungsoyr, J.: Adding security to mobile data collection. In: Proceedings of Healthcom 2011 - 13th IEEE International Conference on e-Health Networking Applications and Services, pp. 86–89 (June 2011)

    Google Scholar 

  6. openXdata, http://www.openxdata.org (accessed March 2011)

  7. Oracle. Java ME, http://www.oracle.com/technetwork/java/javame/index.html (accessed March 2011)

  8. Shah, S.M.A., Gul, N., Ahmad, H.F., Bahsoon, R.: Secure Storage and Communication in J2ME Based Lightweight Multi-Agent Systems. In: Nguyen, N.T., Jo, G.-S., Howlett, R.J., Jain, L.C. (eds.) KES-AMSTA 2008. LNCS (LNAI), vol. 4953, pp. 887–896. Springer, Heidelberg (2008)

    CrossRef  Google Scholar 

  9. Wang, Z., Guo, Z., Wang, Y.: Security research on j2me-based mobile payment. IEEE Communication Society 2(2), 644–648 (2008)

    Google Scholar 

  10. Whitaker, B.: Problems with mobile security #1 (July 2007), http://www.masabi.com/2007/07/13/problems-with-mobile-security-1/ (accessed March 2011)

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and Permissions

Copyright information

© 2012 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Gejibo, S., Mancini, F., Mughal, K.A., Valvik, R., Klungsøyr, J. (2012). Challenges in Implementing an End-to-End Secure Protocol for Java ME-Based Mobile Data Collection in Low-Budget Settings. In: Barthe, G., Livshits, B., Scandariato, R. (eds) Engineering Secure Software and Systems. ESSoS 2012. Lecture Notes in Computer Science, vol 7159. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-28166-2_5

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-28166-2_5

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-28165-5

  • Online ISBN: 978-3-642-28166-2

  • eBook Packages: Computer ScienceComputer Science (R0)