Wireless Communications Security

The Wireless Application Protocol (WAP) is an open specification that enables mobile users to have access to the Internet. WAP specifies both communication protocols and application environment so that it can work regardless of the underlying wireless networks, such as CDPD, CDMA, GSM, PDC, PHS, DECT, and GPRS, and can be built over any operating system including PalmOS, Windows CE, JavaOS and so on.
The first generation of WAP is referred to as WAP 1.x (or WAP1). The initial version WAP 1.0 was released in 1998. The next generation is WAP 2.x (or WAP2). WAP 2.0 was released in January 2002. The main difference between WAP1 and WAP2 is summarized as follows: WAP2 assumes relatively high-performance mobile terminals and employs a lot of Internet standards. This enables WAP2 mobile terminals to interact with servers in the Internet directly and then to establish secure channels with them end-to-end. On the other hand, WAP1 employs optimized protocols for relatively inexpensive terminals and low-bandwidth wireless networks while sharing part of the tasks with WAP gateways. This enables mobile terminals to be simple, but secure connections must be severed by the WAP gateways to exchange WAP1 protocols with the Internet protocols. The details are described in this chapter.
The organization of this chapter is given as follows: In Section 7.2, the protocol stacks of WAP1 and 2 are explained. In Section 7.3, PKI (Public-Key Infrastructure) model for WAP is given. WTLS (Wireless TLS) and WAP profiled TLS are explained in Section 7.4...