motorola手机的MIP2.0 安全机制

MIP2.0提供了一套安全机制以限制应用程序(Midlet)访问敏感函数，这套机制的基础是将Java API分级。motorola将提供的安全API分成受保护的API（protected API）和 限制访问的API(Restricted API)两大类。而Midlet又分成非信任应用(untrusted)和信任应用(trusted)两类，信任域又分成生产商域，运营商域和第三方域。对于受保护的API，所有应用都可以访问，但对于部分域的应用，会有警告弹出，只有用户同意继续了才可以使用。对于限制访问的API，则只有trusted应用才可以访问。具体参考下表：

	生产商域	运营商域	第三方域	非信任域
保护API	完全访问	完全访问	要求用户允许	要求用户允许
限制的API	完全访问	完全访问	完全访问	不允许

下面是详细的API分类：

[align=center]Table 1. API Access Matrix [/align]
Restricted/Sensitive API/Function	[align=center]Untrusted Access [/align]	[align=center]Trusted Access [/align]
Network: javax.microedition.io.Connector.http javax.microedition.io.Connector.https javax.microedition.io.Connector.datagram javax.microedition.io.Connector.datagramreceiver javax.microedition.io.Connector.socket javax.microedition.io.Connector.serversocket javax.microedition.io.Connector.ssl	[align=center]Yes [/align] [align=center](with consumer confirmation prompt) [/align]	[align=center]Yes [/align]
Messaging: javax.microedition.io.Connector.sms javax.wireless.messaging.sms.send javax.wireless.messaging.sms.receive javax.microedition.io.Connector.cbs javax.wireless.messaging.cbs.receive javax.microedition.io.Connector.mms javax.wireless.messaging.mms.send javax.wireless.messaging.mms.receive	[align=center]Yes [/align] [align=center](with consumer confirmation prompt) [/align]	[align=center]Yes [/align]
Push Registry: javax.microedition.io.PushRegistry	[align=center]Yes [/align] [align=center](with consumer confirmation prompt) [/align]	[align=center]Yes [/align]
Connectivity: javax.microedition.io.Connector.comm javax.microedition.io.Connector.bluetooth.client javax.microedition.io.Connector.bluetooth.server javax.microedition.io.Connector.obex.client javax.microedition.io.Connector.obex.server	[align=center]Yes [/align] [align=center](with consumer confirmation prompt) [/align]	[align=center]Yes [/align]
Multimedia Recording: javax.microedition.media.control.RecordControl javax.microedition.media.control.VideoControl.getSnapshot	Yes (with consumer confirmation prompt)	[align=center]Yes [/align]
User Data Read: javax.microedition.io.Connector.file.read javax.microedition.pim.ContactList.read javax.microedition.pim.EventList.read javax.microedition.pim.ToDoList.read	[align=center]No [/align]	[align=center]Yes [/align]
User Data Write: javax.microedition.io.Connector.file.write javax.microedition.pim.ContactList.write javax.microedition.pim.EventList.write javax.microedition.pim.ToDoList.write	[align=center]No [/align]	[align=center]Yes [/align]
Data Sharing: com.jblend.rms.share	[align=center]No [/align]	[align=center]Yes [/align]
Location: javax.microedition.io.Connector.location javax.microedition.location.LandmarkStore.read javax.microedition.location.LandmarkStore.write javax.microedition.location.LandmarkStore.category javax.microedition.location.LandmarkStore.management javax.microedition.location.Location javax.microedition.location.ProximityListener javax.microedition.location.Orientation	[align=center]No [/align]	[align=center]Yes [/align]