Dynamic VPN Channel for Mobile Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Public Wi-Fi networks are insecure, making sensitive transactions vulnerable to eavesdropping and data theft due to their open nature, as users share the same connection, posing a risk for sensitive information like passwords and account numbers.

Innovation Solution

A system and method for secure wireless network connections using a VPN to establish a secure communication channel between a mobile device and a server when a security-sensitive app is activated, ensuring that sensitive information is encrypted and protected from malicious users on public Wi-Fi networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a VPN secure communication channel is established continuously, then security of sensitive transactions is improved, but system load and network resource consumption increase

Engineering Contradiction:
Improvesecurity of sensitive transactionsVSAvoidsystem load and network resource consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The system dynamically adjusts the security mode based on real-time detection of whether a security-sensitive application is running. When a sensitive app is detected, the system establishes a VPN secure communication channel; when no sensitive app is running, the system uses normal communication mode. This dynamic adaptation resolves the contradiction by providing high security only when necessary, thereby reducing unnecessary system load and network resource consumption.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system periodically detects whether a security-sensitive application is currently running on the terminal device. Based on this periodic detection, the system alternates between secure communication mode (VPN enabled) and normal communication mode. This periodic assessment ensures that the expensive VPN connection is established only during periods when sensitive transactions are being performed, balancing security requirements with resource efficiency.

Inventive Principle:
Principle #19Periodic action

2Object-affected harmful factors

If a VPN secure communication channel is established, then protection against eavesdropping and data theft is improved, but device complexity and connection establishment time increase

Engineering Contradiction:
Improveprotection against eavesdropping and data theftVSAvoidconnection establishment complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The system pre-configures VPN connection parameters and security policies in advance. When a security-sensitive application is detected, the system can quickly establish the VPN connection using pre-configured settings, reducing the complexity and time of connection establishment. The preliminary preparation of security configurations ensures that when needed, the secure channel can be established rapidly without requiring complex real-time decision-making or configuration.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If network type detection and monitoring of security-sensitive apps is continuously performed, then security monitoring capability is improved, but processing overhead increases

Engineering Contradiction:
Improvesecurity monitoring capabilityVSAvoidprocessing overhead
Core Design Contradiction:
ReliabilityVSPower

Solution Approach 1:

The system leverages existing operating system mechanisms and application metadata to detect security-sensitive applications without requiring complex custom monitoring software. By utilizing built-in system capabilities such as package name matching and application type classification, the system achieves effective security monitoring with minimal additional processing overhead. The terminal device itself performs the detection using its own resources, reducing the need for external monitoring infrastructure.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3500925B1System and method for wireless network security
Publication Date: 2024.10.09 ALIBABA GROUP HOLDING LTD
  • EP3500925B1 patent drawingFigure 1
  • EP3500925B1 patent drawingFigure 2A
  • EP3500925B1 patent drawingFigure 2B

AI summary

A wireless network connection security method is disclosed, including: acquiring a type of a wireless network to which a mobile device is connected; determining that the type of the wireless network is insecure; monitoring an application, the application being installed on the mobile device; determining that the application is to be activated; and in response to the determination that the application is to be activated, establishing a secure communication channel between the mobile device and a first server.