OMA Provisioning Authentication requirement?

OMA Provisioning Authentication requirement? SearchSearch
Author Message
GSM TEST
New member
Username: Gsmtest

Post Number: 6
Registered: 04-2006
Posted on Saturday, May 16, 2009 - 06:13 am:   

I spent some time digging through the OMA specs for the answer to this , but finally decided to consult the experts.

With NOWSMS you can send OMA CP settings without applying the User PIN or Network PIN. Is the authentication process voluntary? Is it in line with the OMA requirements to be able to send these messages in the clear? Should the device accept OMA CP messages for all application settings that lack an authentication parameter?
Des - NowSMS Support
Board Administrator
Username: Desosms

Post Number: 807
Registered: 08-2008
Posted on Monday, May 18, 2009 - 03:02 pm:   

Hi,

Sending the settings without a PIN is within spec ... but the device doesn't have to accept it.

It depends on whatever security policies are imposed by the software on the device.

The concern is that they don't want to make it too easy for a rogue application to reconfigure user devices.

--
Des
NowSMS Support