A Quantitative Analysis into the Economics of Correcting Software Bugs - Computational Intelligence in Security for Information Systems - page 222

On Secure JAVA Application in SOA-Based PKI Mobile
Government Systems

Milan Marković 1 and Goran Đorđević 2

1 Banca Intesa ad Beograd
Bulevar Milutina Milankovića 1c, 11070 Novi Beograd, Serbia
[e-mail]
2 Institute for Manufacturing banknotes and coins NBS,
Pionirska 2, 11000 Beograd, Serbia
[e-mail]

Abstract. In this paper, we describe a possible model of secure m-government
system based on secure JAVA mobile application and SOA-Based m-
government platform. The proposed model consists of additional external
entities/servers, such as: PKI, XKMS, STS, UDDI and TSA. The main parts of
the proposed model are secure JAVA mobile application and secure Web
Service implemented on the SOA-based platform. One example of the possible
mobile government online services is particularly emphasized: sending m-
residence certificate request and obtaining the m-residence electronic document
(m-residence certificate) as a government's response. This scenario could serve
as a model of any m-government online services consisting of sending some
requests to the m-government platforms and obtaining responses as
corresponding governmental electronic messages or documents.

Keywords: Java based mobile phone application, m-government platform, Web
Service, SOAP protocol, XML-Security, WS-Security, XKMS protocol,
SAML, Timestamp.

1 Introduction

This work is related to the consideration of some possible SOA-based m-government
online systems, i.e. about secure communication between citizens and companies with
the small and medium governmental organizations, such as municipalities, or other
governmental organizations and/or agencies. We have considered a general model of
such systems consisting of three main parts:

Secure JAVA mobile client application,

SOA-Based m-government platform, and

External entities: PKI (Public Key Infrastructure), STS (Security Token
Service), XKMS (XML Key Management Service), TSA (Time Stamping
Authority), and UDDI (Universal Description Discovery and Integration).

Although the generic m-government model is proposed and considered, and although
the model supports the usage of desktop JAVA web service application too, a main