Application-Specific Data Encryption for Mobile Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Personal data on mobile wireless communications devices is vulnerable to unauthorized access when left unattended, as the data is decrypted and exposed, especially if no device password is set, leading to potential compromise.
Innovation Solution
A security mechanism that monitors the backlight of the device for inactivity, encrypts data after a set idle time, and prompts the user for authentication upon backlight activation, providing application-specific protection and locking down open applications to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is decrypted for easy access on the device, then ease of operation is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The system performs preliminary encryption of data before the device is left unattended or locked. By proactively encrypting data in advance rather than waiting for unauthorized access attempts, the system maintains ease of operation during authorized use while preventing unauthorized access when the device is inactive.
Solution Approach 2:
The encryption state of data dynamically changes based on device activity status. Data transitions from decrypted (accessible) state during active use to encrypted (protected) state when the device is locked or inactive, creating a dynamic security model that adapts to usage conditions.
2Measurement precision
If application-specific security is implemented, then security precision is improved, but device complexity increases
Solution Approach 1:
The security mechanism is segmented into distinct components: a security application layer that manages security policies, an encryption engine that performs cryptographic operations, and a monitoring system that tracks device state. This segmentation allows fine-grained control over different applications and data types while keeping each component relatively simple.
3Reliability
If data is automatically encrypted after idle time, then security is improved, but loss of time occurs during authentication resumption
Solution Approach 1:
The system maintains data in a pre-encrypted state during idle periods, so that when the device is unlocked, the data is already protected rather than requiring encryption at the moment of lock. This preliminary encryption action prevents the security gap that would exist during transition states.
Solution Approach 2:
The system changes the encryption parameter state based on device activity. During active use, data remains decrypted for fast access. When idle time exceeds a threshold, the encryption parameter changes to protect the data. This parameter change balances security needs with user convenience by not encrypting during active sessions.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Apparatus, systems, and methods provide a mechanism to enhance the management of data security in a system for users of the systems. Various embodiments include apparatus and methods to manage security of data in an electronic system on an application-by-application basis. Such application-by-application basis can be applied in addition to managing data security globally in the electronic system. Additional apparatus, systems, and methods are disclosed.