Security of the runtime store

By default, only apps that Research In Motion digitally signs can access data in the runtime store.

Restrict access to runtime store data using code signing keys

Code signing keys can be used to control access to the runtime store. This is a way to restrict or share access with other apps on a BlackBerry® device.

  1. Import the required classes and interfaces.
    import java.util.Hashtable;
    import net.rim.device.api.system.RuntimeStore;
  2. Create a hash ID for the object you want to store in the runtime store.
    long MY_DATA_ID = 0x33abf322367f9018L;
    Hashtable myHashtable = new Hashtable();
  3. Store the object in the runtime store and protect the object with the CodeSigningKey object. Only applications signed with the key can read or change the object.
    RuntimeStore.put( MY_DATA_ID, new ControlledAccess( myHashtable, key ) );
  4. Make sure that the object is protected with a particular code signing key, and invoke RuntimeStore.get, providing as parameters the hash ID for the object and the CodeSigningKey object.

Was this information helpful? Send us your comments.