Mobile Terminal Application Settings Security Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile devices lack a flexible and secure method for user applications to change system settings, as only system-signed apps can modify settings, restricting functionality and user experience, especially in scenarios like switching off Internet connections.
Innovation Solution
Implementing a security check mechanism where a requesting app verifies the identity of another app using its name and certificate, allowing only trusted apps to access and change system settings, with a whitelist of authorized apps stored centrally or locally, enabling indirect access and finer control over access rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If system settings can only be changed by system-signed applications, then security is maintained, but functionality and flexibility are restricted
Solution Approach 1:
The patent segments the authentication mechanism by introducing a separate authentication application that operates independently from the system-signed applications. This authentication app can verify other applications and grant them temporary access to system settings without requiring system-level signing, thus maintaining security while enabling functionality for third-party apps.
Solution Approach 2:
The authentication application serves as an intermediary between requesting applications and the system settings. It verifies the identity and permissions of requesting apps through certificate validation and mediates access to system settings by temporarily granting permissions through a permission manager, eliminating the need for direct system-level access.
2Reliability
If user applications are prevented from accessing system settings, then security is protected, but user experience and app functionality are limited
Solution Approach 1:
The system performs preliminary authentication and permission verification through the authentication application before allowing any access to system settings. User permissions are pre-configured in the authentication app, and the system validates these permissions in advance through certificate checking, enabling seamless user experience without compromising security.
Solution Approach 2:
The patent implements dynamic permission management where access rights to system settings are not static but temporarily granted based on authentication results. The permission manager dynamically adjusts access levels by adding or removing permission flags based on the verified credentials of the requesting application, allowing flexible user experience while maintaining security boundaries.
3Device complexity
If applications require system certificates to change settings, then access control is enforced, but flexibility and adaptability are reduced
Solution Approach 1:
The patent implements local quality by allowing different authentication mechanisms for different applications. Instead of requiring all apps to use system certificates, the authentication application can verify local credentials, certificates, or other authentication methods specific to each requesting application, providing tailored access control that maintains security while enabling diverse app functionalities.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Method for setting settings (5) within a mobile electronic terminal (3), in particular a mobile phone or a tablet PC, wherein a first and a second application (1, 2) run on the terminal, the second application being a user application (2) which does not have the capability to directly modify system settings (5) of the terminal (3) and/or settings (5) of the first application (1), comprising the following steps: - the user application (2) sends a request (14) to the first application (1) to modify settings (5) of the first application (1) and/or system settings (5) of the terminal;- the first application (1) initiates a check (15) of an authorization (22) of the user application (2) to initiate the requested changes to the settings (5), - if the check (15) produces a positive result, a change (16) to the settings (5) is carried out in accordance with the request (14).;