MEx. E Mobile Execution Environment …making the multimedia internet mobile… mcatald 1@motorola. com +44 (0) 777 55 8 22 88 louisf@labs. mot. com +1 847 576 4441 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 1
Agenda MEx. E timetable 2 G and 3 G Services MEx. E overview MEx. E functionality MEx. E domains and security MEx. E Release 4 issues MEx. E Release 5 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 2
MEx. E Timetable MEx. E Ÿ MEx. E (Release 98) Ÿ WAP and Personal. Java classmarks Ÿ approved 2 Q 99 Ÿ MEx. E (Release 99) Ÿ SIM security enhancements Ÿ Quality of Service management Ÿ approved 4 Q 99 Ÿ MEx. E (Release 4) Ÿ Java CLDC/MIDP classmark Ÿ other updates/additions Ÿ approved 4 Q 00 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 3
Agenda MEx. E timetable 2 G and 3 G Services MEx. E overview MEx. E functionality MEx. E domains and security MEx. E Release 4 issues MEx. E Release 5 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 4
2 G mobile services MEx. E • Service creation before Release 99 • Supplementary services • limited, expensive to develop, difficult to deploy, limited use • isolated from 3 rd party services developers, no internet • offered operators same bland services and no differentiation • Service creation since Release 99 • services as a general principle not standardised • instead toolkits standardised, and services created using the toolkits • Seamless internet and intranet access • compatibility with internet multimedia communications Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 5
3 G mobile multimedia services MEx. E • mobile phones fully internet integrated • new operator/3 rd party IP multimedia services • new personalised IP multimedia services rapidly developed to differentiate operators, reduce “churn” • generally no services standardised, but enabled using 3 GPP services toolkits (MEx. E, OSA, CAMEL, (U)SAT) and IP/IT toolkits • consistent “look’n’feel” of services within the VHE Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 6
Agenda MEx. E timetable 2 G and 3 G Services MEx. E overview MEx. E functionality MEx. E domains and security MEx. E Release 4 issues MEx. E Release 5 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 7
MEx. E Overview MEx. E Ÿ standardised execution environments in mobile phone Ÿ WAP Ÿ Personal. Java Ÿ CLDC/MIDP Java Ÿ applicable to 3 G, non-3 G, cordless and fixed environments Ÿ IT/IP multimedia services on mobile phones/servers Ÿ write once, execute on many mobile phones Ÿ transfer of multimedia services Ÿ up/downloading, network/3 rd party, MEx. E-to-MEx. E services Ÿ standardised negotiation of capabilities with servers Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 8
MEx. E Overview MEx. E The MEx. E framework sits in mobile phone architecture… HTTP/WSP (with capability exchange) MEx. E Data. Content. Data MEx. E executables, data and content Data. App App Content APIs Telecomms OS Firmware Mark Cataldo / Louis Finkelstein 1 st March, 2001 MEx. E framework (MEx. E classmark 1, 2, 3) APIs: manufacturer, MEx. E classmark GMS/UMTS software Mobile phone OS Manufacturer’s firmware Manufacturer’s mobile phone unit Slide 9
Agenda MEx. E timetable 2 G and 3 G Services MEx. E overview MEx. E functionality MEx. E domains and security MEx. E Release 4 issues MEx. E Release 5 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 10
MEx. E functionality MEx. E Ÿ standardised set of MEx. E classmarks Ÿ WAP, WAP/Personal. Java, CLDC/MIDP Ÿ multimedia services supported by all devices of a given classmark (CM) Ÿ CM 1 devices support CM 1 applications, CM 2 devices support CM 2 applications, CM 3 devices support CM 3 applications Ÿ wide variety of multimedia services Ÿ with no standardised 3 G services, MEx. E enables operator/3 rd party multimedia service delivery to users Ÿ sophisticated user interface Ÿ advanced services presentation Ÿ Graphical User Interface (GUI) Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 11
MEx. E functionality MEx. E Ÿ customisation and personalisation Ÿ services “look and feel” (user interface and services personalisation) Ÿ services communication with network/non-network nodes Ÿ operator branding and differentiation Ÿ enables the Virtual Home Environment Ÿ user services management Ÿ services download Ÿ services/data management Ÿ determine active services Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 12
MEx. E functionality MEx. E Ÿ re-use of existing technologies Ÿ software industry expertise, development tools Ÿ WAP, Internet and Intranet Ÿ existing APIs, (i. e. WAP, Personal. Java, Java MIDP/CLDC. . . ) Ÿ capability negotiation Ÿ allows servers and MEx. E mobiles to determine the most suitable content format for the device (e. g. depending on screen size, memory, colour capabilities etc. ) Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 13
Agenda MEx. E timetable 2 G and 3 G Services MEx. E overview MEx. E functionality MEx. E domains and security MEx. E Release 4 issues MEx. E Release 5 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 14
MEx. E Security Domains secure environment for multimedia services 3 optional security domains (PKI certificates) multiple Third Party domains permitted 1 “untrusted” area MEx. E Security Domains Operator Manufacturer optional Mark Cataldo / Louis Finkelstein 1 st March, 2001 Third Party Untrusted mandatory Slide 15
Operator’s Domain MEx. E only operator PKI authenticated multimedia services permitted operators provide existing services and new multimedia services branded services franchised services customer support service personalisation defined set of mandatory security restrictions on downloaded applications Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 16
Handset Manufacturer’s Domain MEx. E only manufacturer’s PKI authenticated multimedia services permitted permits mobile phone upgrades “provisioned applications” upgrade user interface upgrades software updates manufacturer’s multimedia services defined set of mandatory security restrictions on downloaded applications Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 17
Third Party Domain MEx. E “Administrator” determines whether Third Party domain is controlled by the operator or user Operator controlled: operator decides which (if any) PKI authenticated third party services User controlled: user decides which PKI authenticated third party services defined set of mandatory security restrictions on downloaded applications Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 18
Untrusted Area MEx. E user in control of the untrusted area user downloads any multimedia service as desired downloaded multimedia services have limited permissions (only with explicit user authorisation) call origination screen access sending DTMF add phonebook entry defined set of mandatory security restrictions on downloaded applications Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 19
Agenda MEx. E timetable 2 G and 3 G Services MEx. E overview MEx. E functionality MEx. E domains and security MEx. E Release 4 issues MEx. E Release 5 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 20
Release 4 issues MEx. E explicitly defining the certificate verification process need to clearly identify the process need to define demotion of signed content to Untrusted Area only in specifically defined cases demoted content restricted to same basic functionality as untrusted applications pre-launch verification of executables applications require to be verified before being launched clarify rules on operator applications Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 21
Release 4 issues MEx. E administrator designation process tidying up terminology handling of operator applications on (U)SIM activity operator executables currently have special handling should operator executables be permitted to execute even if the (U)SIM is not available? should operator executables also require pre-launch verification? (U)SIM terminology Replace terminology of “(U)SIM removal/insertion” with “accessing valid (U)SIM application” Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 22
Agenda MEx. E timetable 2 G and 3 G Services MEx. E overview MEx. E functionality MEx. E domains and security MEx. E Release 4 issues MEx. E Release 5 Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 23
R 5 Enhancements and Improvements WID MEx. E General enhancements and improvements Investigate/identify VHE User Profile support Investigate/identify USAT/OSA/CAMEL interaction Investigate/identify new CLI classmark Investigate/identify terminal management support Investigate/identify AT commands support Investigate/identify Push services support Investigate/identify service provisioning support Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 24
R 5 Security Analysis Activity WID MEx. E Conduct a threat analysis of MEx. E to review the security features for effectiveness in countering those threats. Perform a security analysis for the different releases of MEx. E and the associated classmarks Identify issues in terms of security concepts and mechanisms for MEx. E Identify potential threats, weaknesses and security shortfalls Create policy as countermeasures for identifiable weaknesses To map policies to the requirements within the specification The output TR will be used as a basis to potentially agree CRs to S 1's 22. 057, T 2's 23. 057, and S 3's 21. 133 and 23. 102. Mark Cataldo / Louis Finkelstein 1 st March, 2001 Slide 25
Скачать презентацию MEx E Mobile Execution Environment making the multimedia
e7010d9c144925cab7440007391702cc.ppt