Categories: Java | Platform Security | Security and Trust Services API (JSR-177)

This page was last modified 13:56, 27 November 2007.

From Forum Nokia Wiki

Security and Trust Services API (SATSA) for Java ME defines a set of APIs that allows applications to communicate with and access functionality, secure storage and cryptographic operations provided by security elements.

The SATSA API contains four optional packages. Two for smart card communication:

• APDU (Application Programming Data Unit} optional package for high-level smart card communication
• JCRMI (JavaCard Remote Method Invocation) package for lower level access to smart cards (this API is not part the MSA specification, and hence it is unlikely to see this API on any device any time soon)

And two security related packages:

• The Public Key Infrastructure (PKI) optional package.
• The cryptographic (CRYPTO) optional package.

These APIs enable Java ME applications to:

• Work with public digital certificates, public and private keys, message digests and digital signatures.
• Create, store, and use user-credentials based on X.509 digital certificates.
• Encrypt data using asymmetric and symmetric cryptography.

Parts of this API are implemented on Nokia devices (Series 40 3rd Edition Feature Pack 2 devices, Series 40 5th Edition devices and on S60 3rd Edition and 3rd Edition Feature Pack 1 devices).