User assigned security policy framework for m-commerce applications

M-Commerce is the ability to perform commercial transactions using mobile phones or other wireless devices on the move. It is a major application domain for mobile devices where applications require a high level of security. Generally, security policies are enforced by either Server Operating System or application authority for the specific user about its behavior to access the applications after authentication. In this proposed framework, users submit their policy through its mobile device to the Policy Server after preliminary authentication assigned by the application authority. The trust of user device is analyzed using authentication protocol in addition to the feasibility of user submitted policy to the application. The levels of security are also changed depending on the user type accessing the applications. User types are identified using the IP addresses that are stored in the database on the server side. User can change its policy any time from its location as well as increases its levels of security after mutual concern from the application authority. In this paper, user policy submission protocol is developed for the m-commerce applications.