Dynamic Instruction Processing in Multi-OS Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing dynamic token generation methods in mobile intelligent terminals are insecure, as separate equipment can be lost and software-generated tokens are vulnerable to theft, while enterprise office equipment access via VPN poses security risks.
Innovation Solution
A dynamic instruction processing method and apparatus that automatically generates and acquires dynamic instructions for authentication within a terminal with multiple operating systems, using a hardware chip to ensure security by limiting access to only authorized operating systems and applications, eliminating reliance on user input and internal memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate dynamic token equipment is used, then dynamic tokens can be generated for various scenarios, but the equipment can be lost and operations cannot be performed
Solution Approach 1:
The patent merges the dynamic token generation function into the terminal device itself, combining multiple functions (dynamic token generation, VPN access, enterprise application access) into a single integrated device. This eliminates the need to carry separate dynamic token equipment while maintaining the ability to generate dynamic tokens for various scenarios through the terminal's processor and security module.
2Ease of operation
If software-generated dynamic tokens are used in intelligent terminals, then operations are simplified, but security is compromised due to vulnerabilities
Solution Approach 1:
The patent introduces a security module as an intermediary component between the processor and the external environment. This security module acts as a trusted intermediary that generates and protects dynamic tokens, preventing direct access to internal memory and input devices by malicious software, thereby maintaining security while enabling automated operations.
Solution Approach 2:
The patent replaces software-based dynamic token generation with hardware-based generation using a security module. This substitution of mechanical/hardware implementation for software implementation provides physical security boundaries that prevent theft of dynamic tokens through software vulnerabilities, while still maintaining operational simplicity through automated generation.
3Adaptability or versatility
If enterprise office equipment is accessed via VPN, then remote access is enabled, but security risks arise
Solution Approach 1:
The patent implements preliminary authentication actions before VPN connection is established. The terminal device performs dynamic token authentication and security verification in advance, ensuring that only authenticated users can establish VPN connections. This preliminary security check prevents unauthorized access while maintaining remote access capability.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
The present invention provides a dynamic instruction processing method used for a terminal. The terminal includes multiple operating systems. The dynamic instruction processing method includes: when a dynamic instruction acquisition request sent by a specified application program in a specified operating system among the multiple operating systems is received, generating a target dynamic instruction; and acquiring the generated target dynamic instruction, and performing a corresponding authentication operation by using the target dynamic instruction. Correspondingly, the present invention further provides a dynamic instruction processing apparatus and a terminal. By means of the technical solutions of the present invention, a hardware chip capable of generating a dynamic instruction is arranged in a multi-system terminal, and only a specified secure operating system is allowed to acquire a dynamic instruction from the hardware chip, so that the security of the dynamic instruction is ensured; in addition, the dynamic instruction can be automatically acquired, manual input by a user is not needed, therefore operations of the user are reduced, and the technical effects of security and convenience are achieved.