Search code examples
wcfsecuritywindows-mobilewcf-securityhandheld

Web Services only connecting to Trusted Devices

I am on a project that uses web services to communicate with hand held devices (Symbol MC70s running windows mobile 5).

We need to make sure that others on the internet can't connect to the web services and start sending info.

I have made a certificate so that the hand held will only connect to my services, but I don't know how to make sure that my services will only connect to my hand held devices.

My app is coded in the .NET Compact Framework and I am using Visual Studio 2008 SP1. My services are hosted in IIS and are coded with WCF in C# (.NET 3.5 sp1).

Any ideas?

Solution

  • Password-protect the services. Alternatively, authenticate the client by the client SSL certificate and issue those to your users.

    No way to lock access down to a specific device. A device can be spoofed fairly easily.