Mobile Platform Security Apparatus Using Three-Function Authentication Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The open service environment of mobile communication terminals is vulnerable to data leakage and system errors due to malicious applications that can access user data and APIs without authorization, leading to unintended operations.
Innovation Solution
A mobile platform security apparatus and method that generates and manages three authentication keys for each application function, storing and registering them to authenticate and authorize access to platform APIs, ensuring only authorized functions are executed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If an open service environment is provided allowing applications to call platform APIs freely, then user convenience and service accessibility are improved, but security vulnerabilities increase leading to data leakage and unauthorized access
Solution Approach 1:
The patent implements preliminary authentication by generating and storing authentication keys for each application function before the application executes. When an application calls a platform API, the system retrieves the corresponding authentication key and verifies it against the provided key, preventing unauthorized access before it can occur. This preliminary security check resolves the contradiction by enabling free service access while maintaining security through pre-established authentication mechanisms.
2Reliability
If authentication mechanisms are implemented for each application function, then security is improved preventing data leakage, but system complexity increases due to key management overhead
Solution Approach 1:
The patent segments the authentication system by creating separate authentication keys for each specific function within an application. Instead of a single complex authentication system, the platform generates individual keys for each function (e.g., separate keys for camera access, microphone access, file access). This segmentation simplifies key management and reduces overall system complexity while maintaining high security standards for each individual function.
Solution Approach 2:
The patent introduces an authentication key as an intermediary element between the application and the platform API. Rather than implementing complex direct authentication protocols between applications and platform functions, the system uses pre-generated authentication keys as mediators. This intermediary approach simplifies the authentication process by replacing complex verification procedures with simple key matching, thereby reducing system complexity while maintaining security.
3Measurement precision
If multiple authentication keys are generated and stored for each application, then access control precision is improved, but storage requirements and processing overhead increase
Solution Approach 1:
The patent applies local quality by storing authentication keys in a localized and organized manner within the platform's storage system. Each authentication key is associated with specific application identifiers and function identifiers, creating a localized storage structure that optimizes retrieval efficiency. This localized organization reduces overall storage overhead by eliminating redundant data and enabling targeted key retrieval, thereby maintaining high access control precision without excessive storage requirements.
Data Source
AI summary
A mobile platform security apparatus and method is provided. The apparatus may perform a security setting by generating a first authentication key, a second authentication key, and a third authentication key for each function called by an application program. The apparatus may store the first authentication key and an identifier for identifying the application program in a first storage unit, the second authentication key and the identifier in a secret domain of a second storage unit, and register the third authentication key and the identifier as a function parameter in the application program. Subsequently, if the function is called by the application program, the apparatus may determine values for the first authentication key, the second authentication key, and the third authentication key corresponding to the called function, and may perform authentication processing using the three authentication key values.