Project PDA

Find your PDA here

Home arrow Knowledge Base arrow W arrow WAP Identity Module (WIM)
WAP Identity Module (WIM)

The WIM is defined by the WAP Forum as a tamper-resistant device which is used to perform wireless transport layer and application level security functions, as well as the storage and processing of information needed for user ID and authentication. The WIM addresses two fundamental security issues. The first is the security of the wireless transport layer (WTLS) between the WAP Gateway server and the mobile client terminal. This can be considered as the same kind of function as the Secure Socket Layer (SSL) in today's Internet world, which provides mutual authentication and confidentiality.

State-of-the-art security is built in from the very start of the WAP market-allowing mobile commerce to sidestep the financial security issues that have troubled the conventional PC-based Internet e-commerce world. The new WAP Identity Module-or WIM-is probably the most secure smart card that has been designed to date for the wireless world, and its availability means that carriers and partners can proceed with pilots and commercial services with renewed confidence.

The WAP Identity Module (WIM) will allow network operators and service and content providers to provide secure mobile e-commerce services such as online banking. It is the first smartcard to implement the WAP identity module user security functions that are expected to be introduced by the WAP forum in December as part of the 1.2 specification.

WIM is the security module implemented in the SIM card for WAP applications. WIM provides security services for WAP applications, and allows you to use digital signature. SIM cards with security module are provided by the SIM card issuer.

WAP Version 1.2 was presented, featuring three important new developments: push technology, UAProf and WIM (WAP Identity Module). The push technology enables server-initiated transactions. UAProf identifies client-side applications, enabling service providers to use the full range of content types, such as Video, Audio and others. The WAP Identity Module enhances security of WAP transactions by improving user identification.

This new facility is expected to help WAP to leapfrog the wired Internet world. There are around a quarter of a billion digital cellphone subscribers worldwide and the proven utility of mobile phones, allied with the power of WAP terminals and the safe transactions that will be assured by the smart card, could see WAP penetration overtake that of the wired Internet as early as 2004. The 3GPP (Third Generation Partnership Project) has also recently adopted the smart card as its security device-providing a boost which can only help to increase the development efforts that will go into this branch of information technology.