Servis-Rhino 4211B Betriebsanweisung PDF herunterladen (Seite 94)

Secure on-device stored data

The nature of a mobile device is that … it is mobile. This means it can be carried around with you

and, as such, can be lost by you. Since mobile devices are frequently lost, we have the concept that

any data kept on that device may be accessed by unwanted parties. To solve that problem, we have

the option to encrypt sensitive data. This means that the data is converted into an unintelligible

form and if it became known in that state, wouldn't be of any use to receiver.

Worklight provides the ability to encrypt and decrypt data and have that data stored in either

HTML5 local storage or in the Worklight JSONStore.

See also:

• Off-line Storage

Offline Authentication

If a mobile device is not network connected a user may still have to prove that they are who they

claim to be before using an app. This is actually quite easy to do. If information is saved encrypted

to local storage when a user's identity is proved then when disconnected, the keys to decrypt the

data will only be known by the actual user.

Preventing tampered apps

A concern that needs to be addressed is the notion that an app can be tampered with by a malicious

programmer. This could happen in a number of ways. Perhaps the app was replaced on the device

while it was out of your direct control. Perhaps the app that you downloaded was from a fake

repository. Either way, you could be tricked into thinking you are running a legitimate app when in

fact it is a trap.

Worklight can detect a tampered app by signing the original app. When an app tries to contact

Worklight Server through an adapter, it sends knowledge of whether or not it was modified and

Worklight can disallow modified apps.

Direct Update

For Web and Hybrid Worklight applications, we have the ability to push updates to an app to the

device transparently. This feature is called "Direct Update".

Remote Disable

If a version of an app is known to contain a security flaw, access to Worklight server by apps of that

version can be disabled. Effectively disabling that version of the app.

Worklight protected resources

Worklight can protect the following types of resources:

• Application

• Adapter Procedure

• Event Source – A request to subscribe to a push notification

• Static Resource

Page 94

1 2 ... 89 90 91 92 93 94 95 96 97 98 99 ... 297 298

Keine Kommentare

Servis-Rhino 4211B Betriebsanweisung Seite 94