A Quantitative Analysis into the Economics of Correcting Software Bugs - Computational Intelligence in Security for Information Systems - page 226

functions could be too heavy for mobile users, the PKI services are exposed by
the XKMS server which could register users, as well as locate or validate
certificates on behalf of the mobile user. This is of particular interests in all
processes that request signature verification on mobile user side.

TSA server - is responsible for issuing time stamps for user's requests as well
as for platform's responses (signed m-documents).

4 Secure JAVA Mobile Web Service Application

In this Chapter, we give a functional description of the secure JAVA mobile Web
Service application for a purpose of secure communication with the described m-
government SOA-based platform [2].
The assumption is that the user already has the JAVA application on his mobile
phone/terminal and thus a procedure of downloading and activating the application is
beyond a scope of this document. Possible usages are described in [5].
This client application comprises of following functionalities objects:

Graphical User Interface (GUI) for presenting business functionalities to the
end user. The GUI object of the proposed JAVA mobile web service
application is responsible to show user interface that enable calling of function
for authentication of the end user and presenting the core functionalities to the
end user.

Business functionalities object is responsible for implementation of the core
SWEB client-base functionalities:
o Secure requesting and receiving the m-residence certificate from the
corresponding municipality SOA-based platform, receiving a notification
and delivering the obtained certificate to some interested party.
o Secure sending of other kind of predefined message (for example m-
invoice) to the corresponding municipality platform and receiving the
notification from the platform.

The Security object of the considered JAVA mobile application is responsible
for overall application-level security functionalities.

Communication object.

The Java mobile client used for communication with the platform is developed by
using J2ME CDC1.1 platform. There are forms (screens) on mobile phone application
used to perform communication with the platform.
The first form is 'Logon form'. The user should enter its username and password
after which verification will be passed to the next form. Also, the language that will
be used in the whole application can be chosen on this form. After successful
verification of username and password, 'Functions form' will be passed to the user
where a task that needs to be done can be chosen. The available tasks are:

1. Change Password - used for changing login password in order to access the

mobile application.

2. mResidence Certificate Request - used for sending request for mResidence

certificate to the municipality (to the Web service of the m-government
platform).