Carrier Network Data Interception for Mobile Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for managing access to enterprise data on mobile devices do not effectively utilize the carrier network to protect and secure data transmission, leaving vulnerabilities in data communication.
Innovation Solution
A Mobile Data Management Intelligent Processor (MDM-IP) is integrated into the carrier network to intercept and inspect data destined for mobile devices, comparing it with pre-defined patterns to block, quarantine, or modify data, and notify the sending entity using SMS or VoIP packets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device management solutions use software clients on mobile devices to manage and protect data, then data protection capability is improved, but the carrier network is not involved and data communication vulnerabilities remain
Solution Approach 1:
The patent introduces a carrier network-based intermediary system that intercepts data before it reaches the mobile device. This intermediary positioned in the carrier network (not on the device itself) inspects data packets and can block or modify them, thereby protecting data communication without requiring changes to device-based software clients.
2Reliability
If data is blocked from reaching the mobile device to prevent unauthorized access, then data security is improved, but data loss may occur for legitimate requests
Solution Approach 1:
The patent implements a feedback mechanism where the system that blocks data receives feedback about the blocking action and can adjust its behavior. This allows the system to learn from outcomes and refine its data blocking decisions, reducing false positives while maintaining security.
Solution Approach 2:
The data blocking system is made dynamic through pattern-based filtering that can adapt to different data types and communication scenarios. The system adjusts its blocking behavior based on the specific characteristics of the data and the communication context, allowing legitimate data to pass while blocking malicious content.
3Reliability
If the carrier network inspects all data packets to detect patterns, then data security monitoring is improved, but network processing complexity increases
Solution Approach 1:
The patent extracts only the relevant portions of data packets for inspection by focusing on specific data patterns and characteristics rather than analyzing every packet in detail. This selective extraction approach reduces processing complexity while maintaining effective security monitoring.
Solution Approach 2:
The system changes the parameters of data inspection by using pattern-matching algorithms that can efficiently identify malicious data characteristics. By transforming the inspection process into a pattern recognition problem rather than exhaustive analysis, the system achieves effective monitoring with reduced computational complexity.
Data Source
AI summary
A method includes intercepting, in a carrier network, data communicated from a sending entity and destined for a mobile device, comparing the data that has been intercepted with a data pattern to determine whether the data that has been intercepted matches the data pattern, and blocking the data that has been intercepted from reaching the mobile device when the data that has been intercepted matches the data pattern.