[roneypatel]

Hi All,

I have a serious problem here. My application uses PIN based authentication. I store the pin retrival no encrypted in RMS. Now initially my application is unlocked. So its a possiblity that some one can copy my freash RMS, lets say using FExplorer, and apply brute force mechanisam to crack the password. If he/she fails then replace the freash db again and try one more time. So this is the big threat to my application. I want my database protect of being copied or some invisible store in mobile where I can store pin retrival count safely. Plz help me. Thanks in advance

[dcrocha]

Use some encryption package such as Bouncy Castle's before writing your data to the RMS. This will keep your application from being cracked as you said.

Daniel

[lmtang]

You can't make the RMS "invisible" to anyone. Dcrocha's solution is as good as any, though it's still crackable.

Gluck.

[roneypatel]

yes, lmtang is right. Its still crackable coz someone can access or modified my database coz its visible. Any other suggestion plz ?

[lmtang]

.... that's the point. You can't make it "invisible" to the File Explorer. Like any system, you will always be able to view what's on it with the appropriate software, and afaik, you can't make RMSes of a "hidden" filetype either. You can make it inaccessible to other midlets in MIDP 2.0 (by setting the privacy flag), but that isn't saying much.

If it's that important, have the PINS reside on an online database elsewhere and implement your own security measures with that. That's all I can think off...