Mobile Device Data Protection via Backup-Driven Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing mobile devices against theft or loss, such as password entry, encryption, and biometric techniques, are inconvenient, costly, or vulnerable to unauthorized access, and existing data deletion solutions are not effective in protecting sensitive information.
Innovation Solution
A method that involves storing data on a backup system, detecting device loss or theft, encrypting non-backed-up data using a large encryption key generated from backed-up data, and deleting both the data and key from the device, with options for periodic system contact or gait analysis to determine unauthorized use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to protect confidential data on mobile devices, then data security is improved, but user convenience deteriorates due to the need to enter an encryption key every time the device is used
Solution Approach 1:
The system performs preliminary encryption of data before the device is stolen or lost, using a key derived from biometric data stored on a removable memory device. This preliminary action ensures that even if the device is compromised, the data remains encrypted and inaccessible without the biometric authentication, thus maintaining security without requiring continuous key entry by the user.
2Reliability
If biometric techniques are used to secure mobile devices, then security is improved, but device cost increases
Solution Approach 1:
The patent introduces a removable memory device as an intermediary that stores biometric data and encryption keys. This intermediary component allows the system to implement biometric security without requiring expensive integrated biometric sensors in the main device, thereby reducing manufacturing costs while maintaining high security through optional biometric authentication.
3Reliability
If all data is deleted from the device upon detection of theft or loss, then data security is improved, but data loss increases for legitimate users
Solution Approach 1:
The system applies different security measures to different portions of data based on their sensitivity and backup status. Encrypted data stored on the removable memory device is protected with high security, while data on the main device can be selectively managed. This local differentiation allows the system to maintain security for critical data without necessarily deleting all data when theft is detected.
Solution Approach 2:
The system creates encrypted copies of sensitive data and stores them on removable memory devices. If the main device is stolen, the original data can be recovered from these encrypted copies after authentication, preventing permanent data loss while maintaining security. The copying mechanism ensures data redundancy and recoverability.
4Ease of operation
If short passwords or PINs are used for device access, then ease of operation is improved, but security deteriorates as they can be determined using automated systems
Solution Approach 1:
The patent replaces traditional mechanical password or PIN entry systems with biometric authentication mechanisms. Instead of relying on users to remember and enter complex passwords that are vulnerable to automated cracking, the system uses physiological characteristics (fingerprints, iris patterns, etc.) stored on removable memory devices. This substitution maintains ease of operation through automatic biometric recognition while dramatically improving security against automated attacks.
Data Source
AI summary
A method and apparatus protect data stored in a device by storing data from the device on a backup system upon the device being connected to the backup system; detecting that the device has been lost or stolen; encrypting a set of data stored on the device that has not been stored on the backup system using an encryption key based on another set of data stored on the device and also stored on the backup system; and deleting the other set of data and encryption key from the device.