Application Registration and Verification System for Device Trust

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

It is challenging to verify the source and trustworthiness of applications downloaded to user devices and hosted by service provider networks, as well as to distinguish between legitimate and imposter devices, due to risks of viruses, unauthorized access, and cyber attacks.

Innovation Solution

The implementation of a Registration, Authorization, and Verification (RAV) application that registers, verifies, and authorizes user device-hosted applications using credentials, context information, and data integrity algorithms to ensure the trustworthiness of applications and prevent unauthorized use.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If applications are downloaded from various sources to improve service variety, then application functionality is enhanced, but security risks increase due to potential viruses and unauthorized access

Engineering Contradiction:

Improveapplication service varietyVSAvoidsecurity risks

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary registration and verification of applications before they are allowed to access services. The RAV application verifies device applications against registered credentials and context information in advance, preventing malicious applications from causing harm while allowing legitimate applications to function.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The RAV application acts as an intermediary between service provider applications and device applications. It verifies credentials and context information, and provides authorization tokens that mediate the interaction, ensuring that only authenticated applications can access services while maintaining service variety.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If application verification mechanisms are implemented to improve security, then trustworthiness is enhanced, but system complexity increases

Engineering Contradiction:

Improveapplication trustworthinessVSAvoidverification system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The verification system is segmented into distinct components: credential verification, context information verification, and token generation. The RAV application handles verification while service provider applications handle service delivery, dividing complexity across multiple specialized components rather than one monolithic system.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system uses cryptographic credentials and context information that can be copied and verified without requiring the original physical presence. Device applications present credentials that are verified against registered copies, and authorization tokens are generated as verifiable copies that prove authenticity without exposing sensitive information.

Inventive Principle:

Principle #26Copying

3Object-affected harmful factors

If strict authorization protocols are enforced to prevent unauthorized access, then network security is improved, but service access speed decreases

Engineering Contradiction:

Improveunauthorized access preventionVSAvoidservice access speed

Core Design Contradiction:

Object-affected harmful factorsVSSpeed

Solution Approach 1:

Authorization is performed in advance when applications are registered and verified. The RAV application generates and stores authorization tokens during the registration process, so that when applications need to access services, the verification has already been completed and only token validation is required, significantly speeding up access while maintaining security.

Inventive Principle:

Principle #10Preliminary action

4Measurement precision

If device applications are registered and verified to distinguish legitimate from imposter devices, then authentication accuracy is improved, but processing time increases

Engineering Contradiction:

Improveauthentication accuracyVSAvoidregistration and verification time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

Device applications are registered and verified in advance before they need to access services. The RAV application stores credentials and context information during registration, performing the time-consuming verification processes beforehand. When applications need to access services, the pre-performed verification enables rapid authentication while maintaining high accuracy.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS8898759B2Application registration, authorization, and verification

Publication Date: 2014.11.25 VERIZON PATENT & LICENSING INC

AI summary

A system that includes a memory to store registration information for a particular application hosted by a particular user device, where the registration information includes context information regarding the particular user device and an integrity code based on credentials associated with the particular application. The system also includes a first server to receive, from a second server, a request to receive a service on behalf of a user device that hosts an application, the request including other credentials associated with the application; generate, using a data integrity algorithm, another integrity code based on the other credentials; determine that the application is trusted when the integrity code matches the other integrity code; compare other context information associated with the user device with the context information when the application is trusted; and send an instruction to the user device to re-register the application when the context information does not match the other context information.