An Integrated Security Framework for Mobile Business Application

Proposes an integrated security framework based on the security demands of business applications on mobile network. Features of the framework includes: (1) supports various mobile communication protocols, and can automatically switch to the most appropriate security channel in according with link status and user demands, (2) provides multi-element authentication mechanism to reduce the risk of terminal stolen, (3) shares the computing load between smart card and the terminal device to fit in with the capability of PDA, (4) is independent of upper layer applications. The paper discusses the design of key components, and introduces the architecture of whole framework.