I would like to create a system for taking orders from customers at home to pizzerias
The app used by the individual customer runs on a smartphone or tablet and uses a jRdc2-type system for reading/writing information on the 'orders' database
The 'orders' database physically resides on a computer inside the pizzeria offices
And therefore, to allow the sending of smartphone and tablet orders, the pizzeria's computer network must espose a service on which the device can connect
I would like to protect this software service (the jRdc2 program) from unauthorized use, and prevent any malicious people from sending commands to the jRdc2 server
The question is: how to make the connection between mobile device and jRdc2 server only after authorization, such as user and password or other similar means?