Mobile Application Registration via SIM-Linked UUID
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for registering applications on mobile devices are insecure, allowing unauthorized use when a user loses their device, as they often rely on weak registration processes and require separate registration with the home mobile network, which can be compromised by SIM card swapping.
Innovation Solution
A method involving a unique identifier (UUID) is generated and associated with the mobile device's telephone number, stored on the device, and used for authentication, preventing unauthorized use by ensuring the identifier matches the SIM card and device upon subsequent access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a separate registration process is implemented for third-party applications, then authentication and billing control are improved, but device complexity and user inconvenience increase
Solution Approach 1:
The patent combines the third-party application registration process with the mobile network's existing authentication infrastructure. The application server communicates with the mobile network operator's authentication system, allowing user details to be shared securely without requiring a separate standalone registration process. This merging reduces complexity while maintaining security.
Solution Approach 2:
The patent creates a universal registration mechanism that works across multiple third-party applications and services. By establishing a standardized interface between application servers and the mobile network operator's authentication system, the same registration process can serve multiple different applications, reducing overall system complexity.
2Adaptability or versatility
If application registration is tied to device serial number, then application licensing control is improved, but security against unauthorized use deteriorates
Solution Approach 1:
The patent transitions from static device serial number binding to dynamic SIM card-based authentication. The registration system now uses the SIM card identifier, which can change when users switch devices, making the authentication system dynamic and more secure against unauthorized use while maintaining licensing control.
Solution Approach 2:
The patent changes the authentication parameter from device serial number to SIM card identifier. This parameter change fundamentally improves security because the SIM card is under the user's control and can be easily replaced or deactivated, whereas the device serial number remains fixed and cannot prevent unauthorized access to lost devices.
3Ease of operation
If weak registration process is used, then ease of operation is improved, but data loss risk increases
Solution Approach 1:
The patent implements a self-service registration process where users automatically authenticate using their existing mobile phone number and SIM card. The system automatically retrieves user details from the mobile network operator's database, eliminating the need for manual registration steps while maintaining strong security through SIM-based authentication.
Data Source
AI summary
An application on a mobile terminal in a mobile network is registered with an application server. The mobile terminal includes an identity module. At the application server, a first message is received for registering the application, the first message including a telephone number associated with the identity module. The application server generates a unique identifier and associates the unique identifier with the telephone number. A second message is sent from the application server to the mobile terminal, the second message including the unique identifier. The mobile terminal generates and stores a data block including the unique identifier, a subscriber identity associated with the identity module and a terminal identifier associated with the mobile terminal.