Mobile Device Circuitry Authentication via Hardware-Bound Applet
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cybersecurity systems face challenges in securely authenticating unique identifiers of circuitry installed in mobile devices for accessing network-based services without requiring users to enter sensitive data.
Innovation Solution
A system comprising an authentication server and an applet on the mobile device that validates a unique identifier of circuitry by sending a message to activate the applet, which then sends the validation outcome to the application server using a callback network address, without extracting the unique identifier from the communication session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, OTPs) are used, then users can access network services, but security is compromised and users must remember sensitive data
Solution Approach 1:
The system enables self-service authentication where the mobile device automatically performs validation of its own unique identifier through an applet executed on-device. The device autonomously validates its identity without requiring user input of passwords or OTPs, eliminating the need for users to remember sensitive data while maintaining strong security through hardware-bound unique identifiers.
Solution Approach 2:
An authentication server acts as an intermediary between the application server and the mobile device. It receives authentication requests, validates the unique identifier through the device's applet, and returns authentication outcomes. This intermediary approach enables secure automated authentication without exposing sensitive data to users or application servers.
2Ease of operation
If unique identifier is extracted from communication session, then authentication can be performed, but security is weakened and sensitive data may be stolen
Solution Approach 1:
The unique identifier is extracted from the mobile device's hardware and bound to an applet that executes locally. This extracted identifier is then validated by the authentication server without being transmitted through or stored in communication sessions. By taking the identifier out of the communication flow and validating it through a separate authentication channel, the system enables authentication while eliminating the risk of session-based data theft.
3Ease of operation
If automated authentication without user input is implemented, then login process is simplified, but security validation may be insufficient
Solution Approach 1:
The manual authentication process (user typing passwords or OTPs) is replaced with an automated electronic validation system. An applet executed on the mobile device automatically validates the unique identifier against the authentication server, which verifies it against stored records. This mechanical-to-electronic substitution maintains strong security validation through cryptographic verification while completely eliminating the need for user input, achieving both simplicity and reliability.
Data Source
AI summary
There is provided a system for authentication of a subscriber for accessing a service hosted by an application server using a mobile device, comprising: a processor of an authentication server executing a code for: obtaining an authentication request for authenticating a unique identifier of circuitry installed in a mobile device from an application server hosting a service, sending a message including the unique identifier of circuitry of the mobile device to a mobile network server, receiving a unique identifier of hardware of the mobile device from the mobile network server, wherein the unique identifier of hardware of the mobile device comprises a self-generated unique identifier generated based on unique data that is hard-wired into the mobile device, validating that the unique identifier of hardware of the mobile device corresponds to the unique identifier of circuitry of the mobile device, and sending an outcome of the validation to the application server.