Specifications

The WAP Gateway provides services in the companyÕs Intranet, a banking or stock trading ser-

vice on the Internet, or access to other WAP applications on web addresses anywhere on the

Internet. A Gateway is identiÞed by an IP number or by a phone number, depending on access

type.

The R520 is based on the WAP June2000 (WAP 1.2.1) speciÞcations where security functional-

ity is speciÞed with a technology called Wireless Transport Layer Security (WTLS).

When using certain WAP services, the user may want more security than normal, for example

when using banking services. The user establishes a secure connection between the phone and

the WAP gateway. To use such connections, certiÞcates have to be saved in the phone. The cer-

tiÞcates are made available so that the users can download them from certain WAP sites.

There are two types of WAP security locks (PIN codes) in the phone. The locks protect the sub-

scription from unauthorized use when browsing. The locks should typically be supplied from

the operator.

Access lock An access lock is needed when accessing certain WAP sites or when

reviewing the certiÞcates. The user is asked to enter it before a secure

WAP connection is established.

Signature lock A signature lock is used for conÞrming transactions - like a digital sig-

nature.

In the R520, the user can check which transactions have been made with the phone when brows-

ing. Each time the user conÞrms a transaction with a signature lock code, a contract, or receipt,

is saved in the phone. The contract contains details about the transaction.

These are useful for sending updated WAP site contents or WAP links to mobile users. Exam-

ples of services that can be implemented using push services:

¥ NotiÞcations about new e-mails, voice mails, etc

¥ Instant messaging

¥ News, sport results, weather forecasts, etc.

¥ Financial information (stock quotes etc.)

¥ Personal Information Manager (PIM) - delivery of contacts, meeting requests etc.

¥ Fill up a smart card with e-cash

¥ Interactive games, e.g. play poker with a friend

In the R520, the user selects if push messages are allowed to be received or not. There are two

different forms of Push services:

Service Indication (SI) This is basically a text message to the user containing a link to a URL

carried by the SI. If the user decides to load the suggested URL, nor-

mal WAP browsing commences.

Service Loading (SL) This means that the WAP site content is immediately loaded and exe-