Android AutoFiller System for Secure Credential Automation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Android applications require users to manually input credentials and data for access, which is inefficient and insecure, especially with changing login methods and increased security measures.
Innovation Solution
The implementation of an AutoFiller system that filters Accessibility Events on Android devices, generates action sequences, and securely stores and retrieves user data to automatically fill in credentials and data fields, ensuring seamless and secure access to multiple applications and services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual credential input is required for each application, then security is maintained through user control, but user efficiency and productivity deteriorate due to repetitive manual entry
Solution Approach 1:
The system performs preliminary actions by capturing and storing credential data from accessibility events before they are needed again. The AutoFiller service pre-processes accessibility events, extracts credential information, and stores it in encrypted form in the data store, so that when a user needs to access an application, the credentials are already prepared and available for automatic filling.
Solution Approach 2:
The system enables self-service by allowing the device to automatically fill credential fields without requiring user intervention. The AutoFiller service autonomously monitors accessibility events, retrieves stored credentials, and fills them into the appropriate fields, making the system serve itself rather than requiring continuous manual input from the user.
2Productivity
If automatic data filling is implemented, then user efficiency improves, but security risks increase due to potential data exposure
Solution Approach 1:
The system applies local quality by encrypting credentials with application-specific keys and storing them in a secure, isolated data store. Each credential is protected with appropriate encryption based on its sensitivity and the specific application context, rather than using a single uniform security approach. The encrypted credentials are stored locally on the device rather than in a centralized vulnerable database.
Solution Approach 2:
The system introduces an intermediary layer between the stored credentials and the application fields. The AutoFiller service acts as a mediator that retrieves encrypted credentials, decrypts them in a secure environment, and fills them into the appropriate fields. This intermediary layer prevents direct exposure of credentials and adds security through the decryption process control.
3Extent of automation
If accessibility events are monitored and stored, then automatic filling capability is enhanced, but device complexity and data management burden increase
Solution Approach 1:
The system achieves universality by designing the AutoFiller service to handle multiple types of accessibility events from multiple applications through a single unified interface. The service can process credential data from various sources (login forms, registration pages, profile updates) and store them in a standardized encrypted format, making the system versatile without requiring separate implementations for each application or event type.
Data Source
AI summary
The present invention gives the methods and processes for automatically servicing user driven requests to find place-holder fields, fill them in with relevant data in a secure manner and securely communicating the data related thereto to the appropriate Android™ device and/or application. More particularly, it relates to the methods and processes for authenticated users to automatically obtain and use the correct filled-in data that allows them to access or use any of a multiple number of Android™ applications and/or services at any time.