Mobile Device Secure Software Execution via SIM Key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for downloading software to mobile devices lack security, leading to potential malicious attacks and increased network traffic, and validation issues that compromise confidential data.
Innovation Solution
A system that uses a Subscriber Identification Module (SIM) or other device-specific features to securely store a unique code and generate a secret key, allowing software to be authenticated and encrypted, ensuring only authorized software can be executed on the device without an active network connection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If software is downloaded from network to mobile device, then software functionality is provided, but security is compromised and malicious attacks can occur
Solution Approach 1:
The patent implements preliminary action by having the mobile device generate and store a unique identifier and cryptographic key pair before software download. The device creates a digital signature capability in advance, allowing it to verify software authenticity locally without requiring continuous network connection to security servers. This preliminary setup enables secure software execution while maintaining security integrity.
Solution Approach 2:
The patent introduces an intermediary mechanism where the mobile device's locally stored unique identifier and cryptographic keys act as mediators between the software and the execution environment. Instead of relying on network-based validation, the device uses its own cryptographic infrastructure to verify and execute software, eliminating the need for continuous network monitoring and reducing security vulnerabilities associated with network-dependent validation.
2Adaptability or versatility
If network monitors mobile device to determine software to transmit, then software distribution is controlled, but network traffic increases and connection speed decreases
Solution Approach 1:
The patent implements self-service by enabling the mobile device to autonomously generate unique identifiers, create cryptographic key pairs, and validate software locally without requiring continuous network monitoring. The device can determine and execute appropriate software independently based on its local cryptographic credentials, eliminating the need for network to continuously monitor and control software transmission decisions.
Solution Approach 2:
The patent extracts the security validation function from the network environment and relocates it to the mobile device. By taking out the cryptographic verification capability and embedding it locally in the device through stored unique identifiers and keys, the system eliminates dependency on network monitoring for software control, thereby reducing network traffic and improving connection speed.
3Reliability
If network validates software by verifying confidential data, then software authenticity is confirmed, but confidential data security is compromised
Solution Approach 1:
The patent uses the mobile device's locally stored unique identifier and cryptographic keys as intermediaries to verify software authenticity. Instead of transmitting confidential data over the network for validation, the device uses its own cryptographic infrastructure to locally verify software signatures. This intermediary approach confirms software authenticity while keeping confidential data securely stored on the device without network exposure.
Solution Approach 2:
The patent implements preliminary action by pre-generating and securely storing cryptographic key pairs and unique identifiers on the mobile device before any software validation occurs. This preliminary setup enables the device to perform local cryptographic verification of software authenticity without needing to transmit confidential data to the network, thereby maintaining security while confirming software legitimacy.
Data Source
AI summary
A method and system for securely executing software or securely loading data generates a secret value at a destination device based on a value transmitted to the destination device, which is algorithmically combined with a secure value stored at the destination device. The destination device, such as a cell phone, remotely accesses an entity or otherwise receives the software or data, where the software or data is encrypted or digitally signed based on the secret value. The cell phone then selectively employs the software or data.