Mobile Device Access Control Unit for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional mobile devices lack robust built-in access control functionality, which hinders secure authentication and authorization processes, especially for sensitive operations like mobile payments.
Innovation Solution
A mobile device with an access control unit, memory unit, and processing unit, where the access control unit includes a storage module and control module that manage permissions and ID-password tables to authenticate and authorize user access, ensuring secure operations on a storage module with a hidden area for sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If conventional mobile devices use SD memory cards for storage, then storage capacity and flexibility are improved, but security and access control functionality deteriorate
Solution Approach 1:
The mobile device is segmented into distinct functional modules: a processing unit for general operations, a separate access control unit for security functions, and a storage module for data. This segmentation allows each component to specialize in its function, with the access control unit providing robust security without compromising the storage capacity of the storage module.
Solution Approach 2:
The access control unit acts as an intermediary between the processing unit and the storage module. It mediates all access requests by verifying credentials against stored reference data, allowing legitimate access while blocking unauthorized attempts. This intermediary layer enhances security without reducing storage capacity.
2Reliability
If access control functionality is added to mobile devices, then security is improved, but device complexity increases
Solution Approach 1:
The access control unit combines multiple security functions into a single integrated component: credential verification, authorization decisions, and access management. By merging these functions, the system achieves comprehensive security without proportionally increasing device complexity, as the combined unit operates as a cohesive security module rather than multiple separate components.
Solution Approach 2:
The access control unit is designed as a universal security module that can authenticate multiple users with different permission levels. It handles various authentication scenarios (different users, different credentials, different authorization levels) through a single multi-functional unit, reducing overall system complexity compared to having separate access control mechanisms for each user or scenario.
3Reliability
If credential verification is performed for each access attempt, then access control reliability is improved, but processing time increases
Solution Approach 1:
Reference credentials and authorization data are pre-loaded into the access control unit's storage module during system initialization or device setup. This preliminary action allows the access control unit to perform rapid verification by comparing incoming credentials against pre-stored reference data, significantly reducing verification time while maintaining high reliability through accurate comparison against authentic reference values.
Data Source
AI summary
A mobile device includes an access control unit including a storage module and a control module, a memory unit storing an application program, and a processing unit connected to the aforementioned components. The processing unit executes the application program so as to transmit credential information to the access control unit for verification. When the application program is verified as authentic, the control module allows the processing unit to transmit an asserted user ID and an asserted user password thereto, looks up in a permissions table a user authority based on the asserted user ID, and enables the processing unit to operate the storage module based on the user authority, the asserted user ID, the asserted user password and an ID-password table.