Distributed Mobile App Security via Key Fragment Concatenation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile device computing faces vulnerabilities in data security, as electronic data is susceptible to unauthorized access and distribution, especially when using cloud computing and e-commerce applications.
Innovation Solution
The implementation of a method that uses distributed security keys, where a first key fragment is received from the user and a second fragment from a network-connected storage entity, concatenated to generate a third key, which is then used to encrypt and decrypt data, with the option to update the key upon reaching a threshold number of decryption events.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is stored on mobile devices for cloud computing and e-commerce operations, then productivity and service capability are improved, but data security and protection from unauthorized access deteriorate
Solution Approach 1:
The encryption key is divided into multiple fragments and distributed across different storage locations (mobile device and remote server). This segmentation ensures that no single location holds the complete key, preventing unauthorized access even if one storage point is compromised. The system reconstructs the full key only when authorized users provide their respective fragments.
Solution Approach 2:
A remote server acts as an intermediary in the key management process. The server stores key fragments and facilitates key reconstruction without directly holding the complete encryption key. This intermediary mechanism enables secure data encryption/decryption operations while maintaining distributed control over the encryption credentials.
2Reliability
If strong encryption keys are used to protect data, then data security is improved, but device complexity and key management burden increase
Solution Approach 1:
The system extracts the burden of complete key management from the mobile device by distributing key fragments to a remote server. The device only needs to store and manage a portion of the key, reducing its security burden. The server handles the complementary fragments and participates in key reconstruction, simplifying device-side key management while maintaining strong encryption.
Solution Approach 2:
The key management problem is solved by adding a spatial dimension to key storage - distributing key fragments across different locations (device and remote server) rather than concentrating them in one place. This dimensional distribution reduces the management complexity at any single location while maintaining overall security.
3Reliability
If users must remember multiple security credentials for enhanced security, then data protection is improved, but ease of operation deteriorates
Solution Approach 1:
The system merges the key fragment storage and key reconstruction processes into a unified automated workflow. Users simply need to provide their password or authentication credentials, and the system automatically retrieves and combines the necessary key fragments from both the device and remote server. This combining of operations maintains strong security while preserving user convenience.
Solution Approach 2:
The system provides self-service key management by automatically handling key fragment retrieval, concatenation, and encryption key generation without requiring manual user intervention. The automated processes reduce the operational burden on users while maintaining robust security through distributed key management.
Data Source
AI summary
Aspects of the present disclosure are directed to methods and systems for securing mobile computing applications with distributed keys. In one aspect, a computer implemented method or computer readable media include steps electronically receiving, at a computer processor of a computing device, a first security key fragment based on a user input to the computing device; electronically receiving, at the computer processor, a second security key fragment from a network connected storage entity; and electronically concatenating, at the computer processor, the first security key fragment and the second security key fragment to generate a third security key.