Mobile Device Update via Connected Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices lack the necessary hardware and software to communicate directly with application systems for receiving secure firmware updates and applets, necessitating an indirect connection through another device while ensuring the integrity of the updates.
Innovation Solution
A method and system that enable a mobile device to securely receive applications by establishing a local connection with a connected device, which retrieves updates from an application system, using a key provisioning system to authenticate and verify the integrity of the updates before installation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile devices connect indirectly through another device to receive applications, then hardware limitations are overcome, but security and integrity verification become more complex
Solution Approach 1:
The connected device serves as an intermediary between the application system and the mobile device. It retrieves applications from the application system and securely transfers them to the mobile device through local connection, enabling the mobile device to receive applications without direct connectivity to the application system.
Solution Approach 2:
Token verification is performed before the application is installed on the mobile device. The connected device or mobile device generates and verifies tokens that cryptographically prove the application's integrity and authenticity before installation occurs, preventing unauthorized or modified applications from being installed.
2Ease of operation
If mobile devices establish local connections to receive updates, then direct connectivity requirements are eliminated, but authentication and authorization processes are extended
Solution Approach 1:
User authorization is obtained before the connected device retrieves applications from the application system or before transferring them to the mobile device. This preliminary authorization step ensures user consent while automating the subsequent technical authentication processes through token verification.
Solution Approach 2:
The system provides feedback to the user through authorization prompts and status notifications. The user is informed about application updates and must explicitly authorize the download and installation process, creating a feedback loop that maintains user control while automating security verification.
Data Source
AI summary
Systems and methods are provided for managing mobile device updates. In some embodiments, the disclosed systems can include a key provisioning system, a key system, and mobile devices. The key provisioning system can provide keys to the mobile devices and the key system. The key system can receive a key from the key provisioning system, receive a request from an application system, calculate a first token, and provide the first token to the application system for transmission to a mobile device. The mobile device can receive a key from the key provisioning system, establish a local connection with a connected device, receive an application and the first token from the connected device, generate a second token using the application and the key, compare the first token and the second token, and update the mobile device according to the application based on a result of the comparison.