title: how can I verify signed data coming for In-App Billing Android Market using Java (Servlet)
body: <p>While implementing the in-app billing for Android application, I came across a problem.  </p>
  
  <p>Let me explain the scenario first<br>
  We have a content server (data server) which has the list of products.<br>
  When user selects one from the list, he can be able to purchase it.<br>
  The purchase logic runs perfectly after I put my credit card detail using my test account.<br>
  In returns I am getting a signed data in Android device.  </p>
  
  <p>My Question is<br>
  1. Should I have to <strong>verify the signed data in Android device</strong> and then send some information or the data to Content server, which in return sends the product (I think this may not be good since there is no flow at server side to verify that the request is valid or not <strong>or more precisely; that the signature data is generated by google market or not</strong>)?<br>
  2. If I have to verify the data at server side, how can I do this? Should I have to send it to <strong>Google market</strong> (if yes, using which web service or API)?  </p>
  
  <p>Please help me to rectify this.<br>
  Thanks in advance.</p>