Mobile Notification Layering for Sensitive Message Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device notification systems fail to adequately secure sensitive information, such as one-time passcodes, leading to potential security breaches when a user's device is unlocked, making it vulnerable to scams and unauthorized access.
Innovation Solution
Implement a notification security system that employs an API to differentiate between sensitive and non-sensitive messages, requiring additional authentication, such as biometrics or passcodes, before revealing the content of notifications containing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If push notifications are displayed on the mobile device screen, then users can quickly receive and view authentication codes, but sensitive information becomes vulnerable to unauthorized access when the device is unlocked
Solution Approach 1:
The notification system is segmented into multiple layers: a visible notification layer that provides user awareness and a hidden content layer that contains the actual sensitive information. The OTP code is segmented from the notification display, allowing the notification to be visible while the code itself remains protected until authentication occurs.
Solution Approach 2:
Biometric authentication serves as an intermediary mechanism between the notification display and the revelation of sensitive content. The authentication system acts as a mediator that controls when and how the OTP becomes visible, preventing direct access to sensitive information while maintaining notification functionality.
2Reliability
If additional authentication layers are implemented for sensitive notifications, then security is improved, but user operation complexity increases
Solution Approach 1:
The system leverages the device's existing biometric authentication capabilities (fingerprint, face recognition) that users already have configured for general device access. This self-service approach allows the notification system to reuse established authentication mechanisms rather than requiring users to set up new security protocols, maintaining ease of operation while improving security.
Solution Approach 2:
Biometric authentication is performed preliminarily before the OTP content is revealed in the notification. This preliminary authentication step ensures security is established in advance, and once authenticated, the user can access the OTP without further delays, balancing security requirements with operational ease.
Data Source
AI summary
The technology relates to secure management of notifications on mobile devices. The method involves receiving messages over a telecommunications network. In instances where the mobile device is in an unlocked state, the user interface of the mobile device displays the message content through notifications on the user interface. The process includes determining the unlocked state of the mobile device and assessing whether the message contains sensitive content. Upon such determination, the mobile device performs a security process, which includes preventing showing the sensitive content in the notification until the user is authenticated. Upon successful authentication, the mobile device presents the content of the notification on the user interface.