Application Authentication via Digital Signature Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices lack an effective method to reliably identify and authenticate applications requesting functions from other applications, particularly those requiring specific permissions, which can lead to security vulnerabilities and unauthorized access.
Innovation Solution
A method and device configuration that involves storing a first authentication value in a storage area accessible by an application with a specified digital signature, transmitting a function execution request and second authentication value to another application, and performing authentication based on matching digital signatures to allow or deny access to the storage area, ensuring only authorized applications can execute requested functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If applications can freely request functions from other applications, then interoperability and service functionality are improved, but security and reliability deteriorate due to unauthorized access and unreliable applications
Solution Approach 1:
The system performs preliminary authentication by verifying digital signatures of applications before allowing function requests. The first application's digital signature is verified against a stored reference signature, and authentication values are pre-stored in secure storage areas, ensuring that only verified applications can access functions.
Solution Approach 2:
The system introduces an intermediary authentication mechanism that mediates between applications. Instead of direct function access, applications must go through the authentication protocol involving digital signature verification, authentication value comparison, and permission checks by the operating system or platform.
2Reliability
If digital signature verification and authentication protocols are implemented, then security and reliability are improved, but system complexity increases
Solution Approach 1:
The system uses universal digital signature verification mechanisms that can authenticate multiple applications through a common protocol. The same authentication framework handles different applications and function types, reducing the need for application-specific security code and simplifying the overall system architecture.
Solution Approach 2:
Applications perform self-authentication by providing their own digital signatures and authentication values. The system automatically verifies these credentials without requiring manual intervention or complex external verification processes, reducing system complexity while maintaining security.
3Productivity
If authentication values are stored in accessible storage areas, then authentication speed and efficiency are improved, but security risks increase from potential unauthorized access
Solution Approach 1:
The system implements local quality control by creating distinct storage areas with different access permissions. Authentication values are stored in specific storage areas that are only accessible to applications with verified digital signatures, while other areas remain protected. This localized access control enables efficient authentication for authorized applications while maintaining security through restricted access.
Data Source
AI summary
A method for operating an electronic device is disclosed. A method for operating an electronic device according to an embodiment of the disclosure may comprise: storing a first authentication value of a first application in a storage area accessible by an application having a specified digital signature, by the first application having a first digital signature capable of accessing the storage area, transmitting a function execution request and a second authentication value to a second application, by the first application, identifying a second digital signature of the second application based on identifying a request for access to the storage area of the second application, based on the second digital signature corresponding to the specified digital signature, allowing access to the storage area of the second application, performing authentication on the first application based on the first authentication value identified in the storage area and the second authentication value received from the first application, by the second application, and based on performing the authentication, performing a function corresponding to the function execution request, by the second application.