| 摘要 |
A method and system for providing security of data transmitted between a first device and a second device over an unsecured network, comprising the steps of providing at least one device with encryption means and the other device with a complimentary decryption means for encrypting and decrypting data transmitted therebetween. The first device selectively identifying components of such data necessary for providing data security and selectively encrypting only those data components for transfer over the network to the second device, then transmitting the data, including encrypted data components, from said first device to said second device, wherein the second device identifies and decryptsthe encrypted data components The invention is particularly applicable to the MLP Protocol (Mobile Location Protocol) has been developed by the OMA (Open Mobile Alliance -www.openmobilealliance.com) to get position information from the related server when needed by applications in GSM networks. While requesting positioning information from the server through the MLP protocol, the client indicates the Client-ID defining itself to the server and the password parameters as well as the mobile number, with which the positioning information will be got. The invention enables secure transmission of the Client-ID and Password parameters in encrypted form between the client and server. In Context Element Definitions of the MLP protocol, the 'enc' attribute has been added under the 'id' (Client-ID) and 'pwd' (Password) parameters. When related parameters are requested to be sent in encrypted form, the 'CRP' option is used. The 'ASC' option is used for sending without encryption. |
