Input Method Verification Code Extraction via Segmented SMS Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Android systems, applications with SMS message read permission can access and read all SMS messages, including verification codes, leading to user privacy leakage and increased risk in mobile payments and sensitive operations.
Innovation Solution
A method and apparatus that restricts SMS message read permission to only the input method application and SMS message application, allowing only these applications to read verification codes, while displaying or automatically filling the verification code in a secure manner to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If applications are granted SMS message read permission to automatically obtain verification codes, then user operation convenience is improved, but user privacy leakage and security risks increase
Solution Approach 1:
The patent segments the SMS message processing function by creating a dedicated verification code recognition module that operates independently within the SMS application. This module specifically targets and extracts verification codes from SMS messages without granting broad read permissions to other applications, thus segmenting the harmful access while preserving the useful automatic recognition function.
Solution Approach 2:
The patent introduces an intermediary verification code recognition module that acts as a mediator between the SMS message storage and application access. This intermediary component selectively processes SMS messages to extract verification codes and provides them to applications that need them, without allowing applications direct access to the entire SMS message content, thus protecting user privacy while enabling convenient verification code input.
2Adaptability or versatility
If all applications can read SMS messages to obtain verification codes, then verification code accessibility is improved, but service security such as mobile payment is compromised
Solution Approach 1:
The patent segments the verification code extraction function from general SMS reading functionality. The verification code recognition module is a specialized component that only extracts verification codes from SMS messages, while maintaining restricted access control. This segmentation allows verification codes to be accessible to applications that need them while preventing other applications from accessing sensitive SMS content, thus maintaining service security.
Solution Approach 2:
The patent applies local quality by giving different access rights to different applications. The verification code recognition module provides verification code data to applications that have established trust relationships or meet specific security criteria, while denying access to other applications. This localized access control ensures that verification code accessibility is maintained for legitimate uses while protecting service security.
Data Source
AI summary
A method includes sending, by an application that is to obtain a verification code, a verification code obtaining request to a server, where the application that is to obtain a verification code is installed on a terminal, and where applications installed on the terminal further include an input method application and a short message service (SMS) message application; receiving, by the SMS message application, an SMS message that includes a verification code and that is sent by the server; and reading, by the input method application, the verification code in the SMS message, where the terminal does not allow an application other than the input method application and the SMS message application to read an SMS message in the terminal.