AT Command Module ID Verification for Mobile Terminal Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of AT commands in mobile terminals is inadequate, allowing unauthorized users to control the devices, as existing security protections focus less on AT commands which can manage GSM services and terminal functions.
Innovation Solution
Implementing an ID verification function for AT commands by requiring a username and password, with the AT command module entering a verification mode to authenticate users before processing commands, and hiding the password input to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ID verification function is added to AT command module, then security of mobile terminal is improved, but device complexity increases
Solution Approach 1:
The patent applies preliminary action by implementing ID verification before AT command processing. The system pre-establishes username and password credentials, and requires authentication before allowing any AT command execution. This prevents unauthorized access in advance, resolving the security vulnerability without requiring complex runtime security mechanisms.
Solution Approach 2:
The patent segments the AT command processing into distinct states: initial state, username input state, password input state, and command processing state. This state machine approach divides the verification process into manageable segments, making the security implementation systematic and easier to manage despite adding functionality.
2Reliability
If password input is hidden during verification, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent applies local quality by differentiating the display treatment based on input context. During password input state, characters are masked with '*' for security. During username input or normal AT command processing state, characters are displayed normally. This localized differentiation resolves the contradiction by providing security only where needed (password field) while maintaining ease of operation elsewhere.
Data Source
AI summary
A method of protecting AT commands during the interaction between the AT command module of a mobile terminal and the serial communication unit of an external device, comprising the steps of: receiving AT command from the serial communication unit to the AT command module at an initial state; putting the AT command module into an ID verification mode, wherein the AT command module receives a username and password from the serial communication unit in turn, and verifies said received username and password; and putting the AT command module into an AT command processing state, when the ID verification is successful. Therefore, it's impossible for an illegal user to take the control of the mobile terminal through AT command.