Win a copy of The Little Book of Impediments (e-book only) this week in the Agile and Other Processes forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

JAD/JAR copy from phone

 
urarom sogard
Greenhorn
Posts: 21
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I want to sign my application thus it can be used only by the device from where it have been downloaded. The WAP Gateway is providing to my server a cookie with the phone number connected to my site and i use this number to generate the JAD file with a custom attribute.
But if the phone software permits copying the JAD file on PC , it can be modified. Nokia PC Suite doesn't allow this, but i don't know anything about other phone makers.
 
Ben Hui
Greenhorn
Posts: 28
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
not sure if I understand your question completely, because signing is a server side activity (I assume you are talking about dynamic signing because you takes the phone number as an input). why do you need to copy the JAd to a PC?
but to answer your question, from what I know, only Nokia Series60 has the ability to copy installed JAD file into a PC. e.g. 3650. Siemens "may" have this ability as well because they operate a file system in their phones, but I don't have a siemens phone to confirm.
ben
 
urarom sogard
Greenhorn
Posts: 21
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thanks Ben.
By "signing" i mean a way to identify the user who downloaded the application.
My idea was to generate with a servlet the .jad file thus adding the phone number like a User Defined KEY-VALUE paire. The application will read this and send a email2SMS charging the user for using the application.
I can't ask the user to input the number because he can input anything else but the real one.
If you say that the 60 series or siemens models can save the jad on pc (and edit later) means this is not a very good sollution.
But i will try to encode the phone number with a custom algorithm to prevent free editing of jad.
 
Pearlo Muthukumaran
Ranch Hand
Posts: 79
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,
Some makes of phones actually ROMize the Java Midlets once they are downloaded. Typically the OTA Download results in the invocation of some component called Java Application Manager and Installer in the phone. This fellow actually installs the Midlets from the JAR file downloaded and discards the Jar file.
But not all phones follow this model. Some phones may even retain the JAR file and run the midlet everytime only from Jar file.
So if your phone simply uses the jar file and also the data cable drivers allow the access and download the MIdlet jars stored in the phone, then you may have to resort to other mechanisms to prevent miuse of midlets
Regards
Muthu
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic