Android Secret Communication Platform Key Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile terminals lack the capability for end-to-end secret communication, with existing solutions being costly and insecure, as they require hardware modifications and rely on unreliable software applications that can be easily compromised, limiting their ability to provide secure communication services for large data transfers like VoIP and video calls.
Innovation Solution
A method is introduced to establish a universal secret communication platform at the bottom layers of the Android operating system, enabling the intelligent mobile terminal to interact with a secret communication support network to receive and use service keys for secure communication services, including VoIP, secret messages, and file encryption, by modifying the Java and C/C++ framework layers and providing APIs for communication software to invoke secret communication functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware is reconstructed by adding encryption-decryption modules and key storage modules to form a special mobile terminal, then secret communication function is achieved, but the cost is high and the terminal cannot be popularized
Solution Approach 1:
The patent replaces the mechanical hardware approach (adding physical encryption modules and key storage modules) with a software-based solution. The secret communication function is implemented through software modules running on the Android operating system, including a secret communication support network, key management modules, and encryption/decryption software, eliminating the need for hardware reconstruction.
Solution Approach 2:
The patent makes the Android mobile terminal universal by integrating secret communication functionality into the existing operating system. The modified Android system can serve both as a general-purpose mobile terminal and as a secure communication device, allowing the same hardware platform to fulfill multiple functions without requiring specialized hardware for each purpose.
2Reliability
If hardware is reconstructed by adding encryption-decryption modules and key storage modules to form a new mobile terminal, then secret communication function is achieved, but users cannot use their current mobile terminals for secret communication
Solution Approach 1:
The patent replaces the hardware modification approach with software-based secret communication capabilities that can be deployed on existing Android terminals. The solution uses software modules including a secret communication support network, key management systems, and encryption/decryption software that run on the Android operating system, allowing users to maintain their current devices while gaining secure communication functionality.
Solution Approach 2:
The patent implements a dynamic key management system where encryption keys are not statically stored in hardware but are dynamically generated, distributed, and managed through software. The key management module can dynamically allocate keys to different users and applications, and the system can adapt to different communication scenarios by loading appropriate keys from the secret communication support network.
3Ease of manufacture
If simple communication encryption tools are used with mathematical algorithms or reused keys, then encryption is achieved, but keys are easy to be broken or exported and security is compromised
Solution Approach 1:
The patent introduces a secret communication support network as an intermediary between key generation and key usage. Instead of keys being generated and stored locally on the device where they could be easily extracted, the support network acts as a secure intermediary that generates keys, distributes them to authorized applications, and manages their lifecycle. This externalizes the key management function to a more secure environment.
Solution Approach 2:
The patent segments the key management functionality into separate modular components: a key generation module, a key distribution module, a key storage module, and a key usage module. This segmentation allows each component to be optimized for its specific function and secured independently. The key management module can selectively allocate different keys to different applications and users, providing fine-grained security control.
4Ease of operation
If encryption software is installed in Android operating system, then secret communication is achieved, but the software can be maliciously uninstalled by attackers and security is poor
Solution Approach 1:
The patent merges the secret communication functionality with the Android operating system itself rather than implementing it as a separate installable application. The secret communication support network, key management modules, and encryption/decryption functions are integrated into the system layer of Android, making them part of the core operating system infrastructure. This integration ensures that the security functionality cannot be easily removed or disabled by users or attackers.
Solution Approach 2:
The patent implements preliminary actions by pre-configuring the secret communication support network and key management infrastructure before any communication occurs. The system establishes secure key management mechanisms in advance, pre-allocates key storage spaces, and configures encryption/decryption modules before they are needed, ensuring that security functionality is already in place and cannot be retroactively removed or compromised.
Data Source
AI summary
Disclosed is a method for allocating a communication key based on an Android intelligent mobile terminal. By establishing a universal secret communication platform on the bottom layer of an Android operating system, an intelligent mobile terminal is equipped with the functions of being able to interact with a secret communication support network, receiving a two-level key and using a received service key after decrypting same, thereby being able to provide universal bottom-layer support for a VoIP secret call, a secret short message, a secret video call, file encryption transmission, secure mobile payment and other communication services which require secrecy support. The secret communication support network provides the service keys required for various communication services for a reformed intelligent mobile terminal, and after obtaining the service keys, the intelligent mobile terminal uses same to conduct the secret communication.