Mobile Device Authentication via IMSI Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device authentication methods require user interaction, which is time-sensitive and can be circumvented, lacking integrity and efficiency.
Innovation Solution
A method that automatically authenticates mobile devices with minimal to no end-user input by retrieving the IMSI value from a SIM card or integrated circuitry, using a RESTful API to communicate with a remote authentication mediator, which queries the mobile network operator to validate the MSISDN, thereby enhancing the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If automated authentication is implemented, then user interaction time is reduced, but system complexity increases
Solution Approach 1:
The patent introduces an authentication mediator as an intermediary component that sits between the mobile device application and the mobile network operator. This mediator handles the complex authentication logic, IMSI extraction, and network communication, thereby automating the authentication process while isolating the complexity from the end user. The mediator receives authentication requests, extracts IMSI values, communicates with the HLR via MAP protocols, and returns verification results, all without requiring user interaction.
2Reliability
If manual SMS code verification is used, then authentication integrity is maintained, but authentication time increases
Solution Approach 1:
The system performs preliminary actions by pre-configuring the authentication mediator with the necessary network infrastructure and authorization credentials before authentication is needed. The mediator is pre-equipped to make MAP, SS7, or Diameter queries to mobile network operators. When authentication is required, the pre-configured mediator can immediately proceed with IMSI extraction and HLR verification without requiring user setup or manual intervention, thus maintaining integrity while reducing time.
3Reliability
If SMS-based two-factor authentication is implemented, then security is provided, but user convenience deteriorates
Solution Approach 1:
The authentication system is designed to be self-service oriented, where the mobile device application automatically performs authentication without requiring user action. The system extracts the IMSI value from the device's operating system, communicates it through the authentication mediator to the mobile network operator, and completes verification automatically. This eliminates the need for users to manually retrieve SMS codes, copy them, and enter them into forms, thereby maintaining security through operator verification while dramatically improving convenience.
4Productivity
If automatic IMSI retrieval is implemented, then authentication speed improves, but security risk increases
Solution Approach 1:
The authentication mediator serves as a secure intermediary that handles the sensitive IMSI retrieval and transmission process. Rather than allowing direct access to IMSI data or establishing direct connections between applications and network operators, the mediator acts as a controlled gateway that verifies credentials, manages communication protocols (MAP, SS7, Diameter), and filters data exchange. This architecture enables fast automatic authentication while mitigating security risks through layered verification and controlled access to sensitive information.
Data Source
AI summary
Authentication of a mobile device by its subscription is automatically performed by extracting the IMSI value from the mobile device's operating system via a locally installed mobile app. The IMSI value is passed onto an authentication system that has the necessary authentication and authorization infrastructure to query a mobile operator's database for a MSISDN associated with the IMSI value. If a valid MSISDN is found, the MSISDN is returned from the mobile operator to the authentication system and finally to the mobile app on the mobile device.