Mobile App Configuration via Server Challenge Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Configuring business mobile apps on devices for remote access to backend systems is cumbersome and error-prone for non-technical users, posing security risks due to the need for manual entry of configuration details such as server information and security settings.
Innovation Solution
A system where an application server generates a challenge code and verification value, allowing users to securely configure apps by verifying configuration data through a separate communication channel, ensuring authenticity and integrity, and simplifying the configuration process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual configuration of business apps is performed by users, then configuration flexibility is achieved, but configuration complexity and error rates increase significantly
Solution Approach 1:
The patent introduces a server as an intermediary between the mobile device and the configuration process. The server automatically generates configuration data, challenge codes, and verification values, eliminating the need for users to manually input complex configuration details. This intermediary handles the complexity while providing simple user interaction through automated configuration deployment.
Solution Approach 2:
The mobile device performs self-configuration through automated processes. The device receives configuration data from the server, automatically stores it, and uses it to connect to backend systems without requiring manual user input. The challenge code and verification value mechanism enables the device to autonomously verify configuration authenticity, reducing the burden on users while maintaining security.
2Reliability
If manual entry of configuration information is required, then configuration customization is possible, but security risks increase due to user error and phishing vulnerabilities
Solution Approach 1:
The server performs preliminary actions by pre-generating and validating configuration data, challenge codes, and verification values before they are needed. The configuration data is prepared in advance with embedded security mechanisms, and the challenge code is generated beforehand to verify authenticity. This preliminary preparation ensures security is built-in rather than added later, eliminating user error risks.
Solution Approach 2:
The patent implements a feedback mechanism where the mobile device receives a challenge code from the server and must provide it back during configuration. The server then verifies the configuration data using this challenge code and verification value. This feedback loop ensures that only authenticated, server-validated configuration data can be deployed, preventing phishing attacks and user errors while maintaining ease of use.
3Reliability
If configuration verification mechanisms are added, then configuration authenticity is improved, but system complexity increases
Solution Approach 1:
The challenge code and verification value mechanism serves multiple functions simultaneously: it authenticates configuration data, prevents phishing attacks, ensures data integrity, and enables secure communication between the mobile device and server. By making the verification mechanism multi-functional, the patent achieves high reliability without proportionally increasing system complexity, as a single mechanism handles multiple security requirements.
Data Source
AI summary
Secure configuration of a mobile application (“app”) includes sending the required configuration data for the app to the user's mobile computing device in a communication, for example an email with an attachment. A verification value is included in the attachment to protect the authenticity and integrity of the configuration data. A challenge code is issued to the user (or group of users). The challenge code is used to verify the configuration data.