Implementation of web service on SMS gateway for security enhancement

Abstract

Short message service (SMS) will play a very vital role in the future business areas whose are popularly known as mobile banking, organizational marketing system etc. For this future, SMS could make a mobile device in a business tool as it has the availability and the effectiveness. In the following text, proposed system is to provide multi level local authentication to the SMS gateway service. This service can be implementing in any multi departmental organization where Short Message Service (SMS) service is used for notification system and marketing purpose.

Full text

National Conference on “Emerging Trends in Electronics Engineering & Computing” (E3C 2010)
Implementation of web service on SMS gateway for
security enhancement
Ms. V.K.Katankar, Dr.V.M.Thakare, Dr.R.V.Dharaskar
Student, ME(WCC) IV Sem ,H.O.D.SGB University,H.O.D.G.H.Raisoni college of Engg.
Department of Computer Science & Engineering
Nagpur ,India
Katankar_veena@yahoo.com,vilthakare@rediffmail.com,rvdharaskar@gmail.com
Abstract— Short message service (SMS) will play a very
vital role in the future business areas whose are popularly
known as mobile banking, organizational marketing system
etc. For this future, SMS could make a mobile device in a
business tool as it has the availability and the effectiveness. In
the following text, proposed system is to provide multi level
local authentication to the SMS gateway service. This service
can be implementing in any multi departmental organization
where Short Message Service (SMS) service is used for
notification system and marketing purpose.
Keywords— web service, SMS, SMS gateway, SMPP
(Short Message Peer-Peer) Protocol
I. INTRODUCTION
Nowadays, mobile SMS application has become
an important and growing current technology. It is a system
that integrates mobile technology with information
management system. This system used a Short Messaging
Services (SMS) to enhance the performance of the system
conducted. Towards the rapid development in e-business,
mobile SMS application has taken an advantage to introduce
the easy, fast and cost saving tools by using SMS as a medium
for communication. By reducing the time consuming and
human intervention, all processes are converted to SMS.
However, there are several mobile SMS application has due to
face the uncertainties circumstances when an extensive
processes occurred . The performance of system became
unreliable during hectic time when users used the SMS
application at the same time. Consequently, system has
become unstable and unreachability to errors.
A Web Service (also Webservice) is defined by the W3C as
"a software system designed to support interoperable
machine-to-machine interaction over a network. It has an
interface described in a machine-processable format
(specifically WSDL). Other systems interact with the Web
service in a manner prescribed by its description using Simple
Object Access Protocol (SOAP) messages, typically conveyed
using Hypertext Transfer Protocol (HTTP) with an XML
serialization in conjunction with other Web-related standards."
Other approaches with nearly the same functionality as web
services are Object Management Group's (OMG), Common
Object Request Broker Architecture (CORBA), Microsoft's
Distributed Component Object Model (DCOM) or Sun
Microsystems's Java/Remote Method Invocation (RMI). In
common usage the term refers to clients and servers that
communicate over the HTTP protocol used on the Web. Such
services tend to fall into one of two camps: Big Web Services
and RESTful Web Services[1].
II. SMS GATEWAY
SMS gateway is a device or service offering SMS transit,
transforming messages to mobile network traffic from other
media, or vice versa, allowing transmission or receipt of SMS
messages with or without the use of a mobile phone. Typical
use of a gateway would be to forward simple e-mail to a
mobile phone recipient[2,3].
Some SMS gateway providers can be classified as
aggregators or Signaling system No.7 (SS7) providers. The
aggregator model is based on multiple agreements with
mobile carriers to exchange 2-way SMS traffic into and out of
the operator's Short Message Service Centre (SMS-C), also
known as 'local termination model. Aggregators lack direct
access into the Signaling system No.7 (SS7) protocol, which
is the protocol where the SMS messages are exchanged. These
providers have no visibility and control over the message
delivery, being unable to offer delivery guarantees. SMS
messages are delivered in the operator's Short Message
Service Centre (SMS-C), but not the subscriber's handset.
III. REASON FOR SELECTION
A Direct To Short Message Service Centre (SMSC)
Gateway is a device which allows SMS text messages to be
sent and/or received by email, from web pages or from other
software applications. The Gateway connects directly to a
Mobile Operator's Short Message Service Centre (SMSC) via
the Internet or direct leased line connections. It converts the
message format into a format understood by the SMSC,
typically this is the Short Message Peer-to-Peer (SMPP)
protocol. Direct To Short Message Service Centre (SMSC)
Gateways are used by SMS Aggregators to provide SMS
services to their clients. Typically Direct To Short Message
Service Centre (SMSC) Gateways are used for high volume
J D College of Engineering, Nagpur(M.S.) 974

National Conference on “Emerging Trends in Electronics Engineering & Computing” (E3C 2010)
messaging and require a contact directly with the Mobile
Operator.
IV. SMS GATEWAY USER INTERFACE
This SMS Gateway connects to our proposed system for
sending SMS to different mobile.In this ,SMS can be compose.
on what time and on what date messages have to be sent. .We
can see queued messages.
We can add contacts,edit contacts..We can add
templates,view templates.We can manage group.
V. PROPOSED PLAN OF ACTION
Figure 1. Overall Structure
Figure 1 describe the overall structure of the project it has
three main level of execution. First level where user will
access web based application and assemble SMS with basic
header like receiver mobile number and message to send to
the receiver. This message has been send to second level that
is at web server level where it will modify message by
applying some security header to SMS and pass it to the SMS
gateway now SMS gateway will send this message to receiver
mobile phone. Here whenever user send message he don’t
need to give security header[4] which protect password from
user. Major advantage of this system is protection of security
header and providing service to the clients along with this
service will let the administrator track the service utilization
of every user if the service is free to client[5].
VI. RESEARCH METHODOLOGY TO BE EMPLOYEE
Figure 2. Software Level Execution Flow
SMS Client User Interface: This module is web page
based user interface where user need to login using user
specific authentication details. After successful login user can
manage SMS sent, saved by that specific user and can
compose new SMS using web user interface. Now this
interface ask user receivers mobile number and message to
send it won’t require SMS gateway authentication security
headers those are applied at last level of execution. Once user
press sent option system will first encrypt the user message
using some encryption algorithm[6] and then generate web
POST data and transfer it to web application. Web application
then process further[7].
J D College of Engineering, Nagpur(M.S.) 975

National Conference on “Emerging Trends in Electronics Engineering & Computing” (E3C 2010)
SMS Verification & Management: This is first level of
verification. As proposed system giving free access to SMS
gateway resource to the user then it’s systems responsibility to
manage local user with their resource usage. This level will
manage all transactions by local user[8].
Web Application: web application is mainly divided in to
different sub module from decryption to authentic SMS
generation.
POST Data Decryption: As client web interface send data
using web POST method and encrypted then web application
will first read web data from POST method using server
request object then it will decrypt SMS in to text because
SMS gateway cant understand encrypted message it need
ASCII code SMS.
Security Header Adder: This module will simply add
security header to the decrypted message. These headers are
provided by the SMS gateway service. To local user system is
providing it’s own password for client security[9,10,11].
Authentic SMS Generation: This module will generate
authentic message this is for SMS gateway. After message
generation it will transfer message to SMS gateway web
service this is implemented by some mobile service operator
they also provide some unique sender ID to each client[12,13].
VII. SCOPE
a. SMS is a cheap payment method.
b. Efficient
c. Secure
d. Anytime/Anywhere.
e. No wastage of time
VIII. CONCLUSION
The short message service unifies Internet and mobile
network is on a rapid development stage, and every short
message business emerged one after another.In this paper,we
have proposed a system that can be useful for
multidepartmental organization where Short Message Service
(SMS) service is used for notification system and marketing
purpose.
.
IX. REFERENCES
[1] S.Subramanian, P. thiran,Z.Maamar,and D.
Benslimane,”EngineeringCommunities of Web services”,In
Proceedings of International Conference on Information Integration
and Web based Applications and Services
(iiWAS),Jakarta,Indonesia,2007.
[2] Benting Wan,2008,“Business-Based SMS Mobile Search”,22nd
International Conference on Advanced Information Networking and
Applications – Workshops,pp. 692-695.
[3] M. Hassan Shirali-Shahreza, Mohammad Shirali-Shahreza ,2008,“An
Anti-SMS-Spam Using CAPTCHA”, 2008 ISECS International
Colloquium on Computing, Communication, Control, and
Management,pp. 318-321.
[4] Quratulain Aziz,13-14 November 2006,Payments through Mobile
Phone”, IEEEICET 2006, 2nd International Conference on Emerging
Technologies, Peshawar, Pakistan 13-14 November 2006,,pp. 50-53.
[5] Ningning Wu, Ming guang Wu, Siguo Chen, 2008,“Real-time
Monitoring and Filtering System for Mobile SMS,”pp. 1319-1324.
[6] David Lisoněk,Martin Drahanský, 2008,“SMS Encryption for Mobile
Communication” 2008 International Conference on Security
Technology,pp. 198-201.
[7] ]Peizhou He, Xiangming Wen, Wei Zheng, 2008,”A Novel Method for
Filtering Group Sending Short Message Spam”, International
Conference on Convergence and Hybrid Information Technology
2008,pp. 60-65.
[8] Siti Dianah Abdul Bujang , Ali Selamat,2008,“Verification of Mobile
SMS Application with Model Checking Agent”,Eighth International
Conference on Intelligent Systems Design and Applications,pp. 217-
222.
[9] Juan Jos´e Garza-Salda˜na, Arturo D´ıaz-P´erez, 2008, “State of
Security for SMS on Mobile Devices”, Electronics, Robotics and
Automotive Mechanics Conference 2008,pp. 110-115.
[10] Hany Harb, Hassan Farahat, Mohamed Ezz ,2008,“SecureSMSPay:
Secure SMS Mobile Payment Model”
[11] MD. Asif Hossain1, Sarwar Jahan, M. M. Hussain, M.R. Amin, S. H.
Shah Newaz,2008,”A Proposal for Enhancing The Security System of
Short Message Service in GSM”, pp235-240.
[12] Shushan Zhao, Akshai Aggarwal, 2008, “Building Secure User-to-user
Messaging in Mobile Telecommunication Networks”,pp 151-157.
[13] Webpage:http://www.smsspoofing.com/
J D College of Engineering, Nagpur(M.S.) 976