Security

End-to-end security is an important component of the Unwired Platform solution architecture. Security comprises multiple components, including system security to control access to data and transactions, transport security for over-the-air and network level data protection, local data security for protecting enterprise data on the device, and device security to protect devices in case of loss or theft.

• System Security
  System security is built using a component-based extensible model of common security infrastructure that allows for pluggable mechanism to integrate Unwired Server with security providers including the most common LDAP providers— Active Directory, Windows OS, Remedy, and others—for authentication and authorization.
• Transport Security
  End-to-end data encryption support is based on Transport Layer Security (TLS) and Secure Sockets Layer (SSL), which secures client/server communication using digital certificates and public-key cryptography.
• Device Data Security
  Optionally you can encrypt device data so that data at rest is always encrypted and available only after users have been successfully authenticated. Unwired Client runtime APIs include an API to encrypt the device database.
• Application Security
  Application security is based mainly on the mapping of a mobile business object (MBO) package to a security configuration.
• Authentication
  Unwired Server authenticates users accessing packages using the security provider of the mapped security configuration.
• Role-Based Access Control
  Access to mobile business objects (MBOs) and operations that are mapped to logical roles is authorized by delegating authorization checks to mapped security provider for the package. The given user’s principal is checked for its membership in the corresponding physical role that is mapped to the logical role assigned to the MBO or operation.
• Client Credential Propagation
  Access to an enterprise information system (EIS) can be granted either by using a fixed set of credentials for all users, or by passing in the client user credentials.
• Device Security
  Unwired Platform supports Afaria device management and security functionality, which includes features such as remote device locking, remote data cleanup, data fading (a feature that enables the IT administrator to lock, wipe, or reset a device that has not communicated with the corporate network or Afaria server after a predetermined number of days), and password expiration management. Even without Afaria, the Unwired Server administrator can lock or unlock devices from accessing applications deployed to the server.