Mobile OS Security Verification Module for Malicious Software
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices with open operating systems like Symbian™ lack a fine-grained security model, making them vulnerable to malicious software such as viruses and Trojan horses, which existing application-level solutions can bypass.
Innovation Solution
Implementing a security framework that associates software applications with permission records to verify their authenticity, integrity, and authority before allowing access to services, using a verification module to check these records and prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If an open operating system is used to enable third-party software installation, then adaptability and versatility are improved, but security and reliability deteriorate due to vulnerability to malicious software
Solution Approach 1:
The patent implements preliminary verification of software applications before they are installed or executed on the mobile terminal. The verification module checks the authenticity and integrity of applications using cryptographic methods (hash functions and digital signatures) prior to installation, preventing malicious software from being installed in the first place. This preliminary action resolves the contradiction by maintaining security while allowing legitimate third-party software installation.
Solution Approach 2:
The patent introduces a verification module as an intermediary between the application installation process and the operating system. This module acts as a mediator that verifies application authenticity and integrity before allowing installation, without preventing the open nature of the system. The intermediary resolves the contradiction by providing security checks while maintaining the ability to install third-party software.
2Reliability
If detailed security measures are implemented at the application level, then security is improved, but device complexity increases and solutions can be bypassed by sophisticated programmers
Solution Approach 1:
The patent replaces complex application-level security measures with cryptographic verification mechanisms. Instead of using complicated access control lists or permission management systems at the application level, the patent uses hash functions and digital signatures to verify application authenticity and integrity. This substitution resolves the contradiction by providing strong security through mathematical methods rather than complex mechanical security frameworks.
Solution Approach 2:
The patent changes the security verification parameter from application-level permission checking to system-level cryptographic verification. By verifying the integrity hash and digital signature of applications during installation, the system ensures security without requiring complex runtime permission management. This parameter change resolves the contradiction by simplifying the security framework while maintaining strong protection against malicious software.
3Reliability
If verification of application authenticity and integrity is performed, then security is improved, but processing time and operational complexity increase
Solution Approach 1:
The patent performs verification of application authenticity and integrity during the installation process rather than during runtime execution. By calculating the integrity hash and verifying digital signatures beforehand, the system ensures security without adding time loss during application execution. This preliminary action resolves the contradiction by front-loading the verification time into the installation phase.
Solution Approach 2:
The verification module uses self-service mechanisms where the application package itself contains the necessary verification information (integrity hash and digital signature). The system verifies these embedded credentials without requiring external verification services or continuous network connectivity, reducing verification time and operational complexity while maintaining strong security.
Data Source
AI summary
A terminal for validating a software application includes a processor capable of operating an operating system (OS) platform (e.g., Symbian™ OS platform), and capable of operating at least one software application above the OS platform. The software application(s) are associated with a permission record that includes permissions identifying services the software application is authorized to receive from the OS platform. The OS platform is capable of receiving a request, from a software application, for a service of the OS platform. The OS platform can determine if the software application is authorized to receive the requested service based upon the associated permission record. And if the software application is authorized, the OS platform is capable of providing the requested service to the software application.