Dual Security Elements for Mobile Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices face challenges in meeting uniformly high security standards across different manufacturers for secure user authentication, especially in high-security scenarios, as existing methods lack a secure connection between the device and application programs.
Innovation Solution
A method utilizing two independent security elements on a mobile device, where the first security element, integrated with the operating system, performs a challenge-response procedure using cryptographic keys, and the second security element, assigned to the application program, verifies the response to authenticate the user securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single security element is used for authentication, then the device complexity is reduced, but the security reliability is insufficient for high-security scenarios
Solution Approach 1:
The authentication system is divided into two independent security elements: a first security element (e.g., in the operating system) and a second security element (e.g., in the application program). Each security element performs partial authentication functions, and their combined verification provides enhanced security. This segmentation allows the system to achieve higher reliability without requiring a single complex security element.
2Reliability
If security standards are made uniformly high across different manufacturers, then the authentication security is improved, but the ease of manufacture decreases
Solution Approach 1:
The authentication mechanism uses standardized cryptographic protocols (challenge-response methods) that can be implemented across different manufacturers' devices. The first and second security elements interact through a universal interface, allowing the same authentication flow to work regardless of the specific hardware or operating system vendor. This universality enables uniformly high security standards while maintaining ease of manufacture through standardized implementations.
3Reliability
If cryptographic keys are stored in a protected memory area, then the security against unauthorized access is improved, but the access time increases
Solution Approach 1:
The cryptographic keys are pre-loaded into the security elements during device initialization or manufacturing. The first security element stores its key pair in a protected memory area, and the second security element stores the public key beforehand. When authentication is needed, the pre-positioned keys can be quickly accessed without requiring time-consuming loading or generation operations, thus reducing authentication time while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a process for authenticating a user to an application program (108) installed on a mobile terminal (100). The terminal (100) comprises a first security element (110), which is associated with an operating system (106), and a second security element (112), which is independent of the first security element (110) and is associated with the application program (108). The process comprises the following: • upon an authentication request of the application program (108), the operating system (106) authenticates the user by means of an authentication sensor (118) of the terminal (100) and the first security element (110), • a challenge-response process between the first security element (110) and the second security element (112) is executed, a successful execution of the challenge-response process confirming a successful authentication of the user by the operating system (106), • upon a successful execution of the challenge-response process, the successful authentication of the user to the application program (108) is confirmed by the second security element (112).