Buffer Server Architecture for Secure Mobile Corporate Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for secure access to corporate data on mobile devices while maintaining the required security level, ensuring that sensitive information is not exposed to unauthorized users, even if the device is stolen or compromised by malware.
Innovation Solution
A buffer server is introduced between mobile devices and corporate servers, using a two-part password system where the mobile device and buffer server each store one part of the password, ensuring that only authorized devices can access corporate data, and user authentication is required to view full email content, with data not stored on the device to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If corporate data is stored on mobile devices for easy access, then productivity and ease of operation improve, but security and protection of sensitive information deteriorate
Solution Approach 1:
The password is divided into two separate parts: a first part stored on the mobile device and a second part stored on the buffer server. Both parts are required to access corporate data, preventing unauthorized access even if the device is stolen. This segmentation resolves the contradiction by enabling convenient access while maintaining security through distributed password storage.
Solution Approach 2:
A buffer server is introduced as an intermediary between the mobile device and the corporate server. The buffer server receives requests from the mobile device, verifies the complete password by combining both parts, and then communicates with the corporate server. This intermediary layer enables easy access from the device while centralizing security verification on the buffer server.
2Ease of operation
If full corporate data is transmitted to mobile devices, then ease of operation improves, but security and exposure to unauthorized access worsens
Solution Approach 1:
The system transmits only a portion of the complete password (the first part) to the mobile device, while retaining the second part on the buffer server. This partial transmission enables the device to initiate access requests and receive data, but the complete authentication requires the second part from the buffer server, preventing full unauthorized access even if the device is compromised.
3Ease of operation
If a unified application displays data from multiple accounts, then ease of operation improves, but security management becomes more complex
Solution Approach 1:
The buffer server provides a universal authentication mechanism that handles multiple corporate accounts and data types through a single interface. The same two-part password system and buffer server architecture apply regardless of the number of accounts or types of corporate data, simplifying security management while enabling unified access to diverse data sources.
Data Source
AI summary
A computer-implemented communication method performed by a computerized device and a computerized communication apparatus, the method comprising: receiving by a buffer server a first communication request and a device key from a mobile device; verifying the device key and a buffer server key; sending a request with details associated with the device key and the buffer server key, to a corporate server; receiving a response from the corporate server; removing data from the response, and sending a reduced response to the mobile device; receiving a user identification and a second communication request from the mobile device, for the data that has been removed; and sending the data that has been removed to the mobile device, upon verifying the user identification.