Anonymous Server User Settings Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software applications often modify user settings without user consent, potentially leading to malicious changes that can compromise device security, as described in the context of user settings, home page preferences, or search engine preferences in web browsers, where deceptive techniques can be used to gain control of computing devices.
Innovation Solution
A method is introduced that involves detecting modified application data in a computing device, determining if it originated from an automatic program, and using a challenge-response test, such as CAPTCHA, to verify the authenticity of changes, with a signing server encrypting and sending identifiers and data to the device for secure storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If software applications store user settings locally on the computing device, then ease of operation is improved, but reliability deteriorates because malicious software can alter the stored data
Solution Approach 1:
A signing server acts as an intermediary between the computing device and the user settings data. The server verifies modifications through challenge-response tests and provides digital signatures to authenticate legitimate changes, preventing malicious software from altering settings undetected while maintaining local storage benefits
2Reliability
If the system implements server-based verification with challenge-response tests, then reliability is improved, but device complexity increases
Solution Approach 1:
The complex verification logic, including challenge-response test generation and digital signature verification, is extracted from the computing device and relocated to a dedicated signing server. The device only needs to implement simple client-side code that communicates with the server, significantly reducing local complexity while maintaining strong security
3Reliability
If the system uses encrypted data storage for application data, then reliability is improved, but ease of operation deteriorates due to additional security protocols
Solution Approach 1:
The encryption and decryption operations are performed automatically by the system without requiring user intervention. The signing server handles all cryptographic operations including generating encrypted data packages and verifying signatures, making the security transparent to users while maintaining strong protection
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods for verifying an application data modification are described herein. In one example, a method includes detecting modified application data in a computing device and determining the modified application data did not originate from an automatic program. The method also includes sending an identifier and the modified application data to a signing server. Furthermore, the method includes receiving encrypted data comprising the identifier and the modified application data from the signing server. Additionally, the method includes storing the encrypted data in the computing device.