Mobile Device Alert System for Weak Hash Function Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing hash functions used in cryptographic applications can be vulnerable to attacks, leading to potential security breaches if weak hash functions are used to generate hash digests, which may compromise the authentication of data processed by mobile devices.

Innovation Solution

A method is implemented where a server identifies weak hash functions and transmits this information to a mobile device, which then determines if the hash functions used to generate hash digests are weak, and outputs an alert if a weak hash function is detected, ensuring the security of data processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a hash function is used to generate hash digests for cryptographic authentication, then data authentication is enabled, but security breaches may occur if a weak hash function is used

Engineering Contradiction:

Improvedata authenticationVSAvoidsecurity breach risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by proactively identifying weak hash functions and storing them in a database before they can be exploited. The system pre-generates alerts for applications that may use these weak hash functions, preventing security breaches before they occur rather than reacting after an attack succeeds

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback by continuously monitoring hash function usage in applications and providing real-time alerts when weak hash functions are detected. The system feeds back security information to applications, allowing them to adjust their hash function selection and maintain secure operations

Inventive Principle:

Principle #23Feedback

2Object-affected harmful factors

If hash function security is continuously monitored and alerts are generated, then security risks are reduced, but system complexity increases

Engineering Contradiction:

Improvesecurity riskVSAvoidsystem complexity

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent uses an intermediary approach by introducing a separate hash function monitoring system that acts as a mediator between the cryptographic operations and the applications. This monitoring system independently identifies weak hash functions and generates alerts without interfering with the core cryptographic functionality, thereby reducing system complexity while maintaining security

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent applies segmentation by dividing the security monitoring function into distinct modular components: a database for storing weak hash functions, a monitoring module for detecting their use, and an alert generation system. This modular architecture allows each component to be developed and maintained independently, reducing overall system complexity

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS9015486B2Systems, devices, and methods for outputting alerts to indicate the use of a weak hash function

Publication Date: 2015.04.21 MALIKIE INNOVATIONS LTD

AI summary

Systems, devices, and methods for outputting an alert on a mobile device to indicate the use of a weak hash function are disclosed herein. In one example embodiment, the method comprises receiving data (e.g. from a server) that identifies at least one first hash function, identifying a hash digest generated using a second hash function, determining if the second hash function is weak using the received data, and outputting an alert indicating that the second hash function is weak if it is determined that the second hash function is weak.