Coordinating Client and Host Security Modules on Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conflicts between client and host security modules on mobile devices can lead to inadequate data security, as they often implement different security policies, causing compatibility issues and potential data breaches.
Innovation Solution
A system and method for coordinating the operations of client and host security modules through a platform abstraction layer using application programming interfaces (APIs), where the client security module instructs the host security module to unlock or lock the device, ensuring synchronized security activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If client and host security modules operate independently with different security policies, then each module can maintain its own security features, but conflicts arise leading to inadequate data security
Solution Approach 1:
The patent introduces an intermediary coordination mechanism between the client security module and host security module. This intermediary layer enables communication and coordination between the two modules, allowing them to exchange security policies and authenticate each other, thereby resolving conflicts while maintaining individual security features.
Solution Approach 2:
The patent creates a universal authentication framework that both security modules must adhere to. This framework provides a common language and set of rules for inter-module authentication, enabling both modules to maintain their specific security policies while operating within a unified security architecture.
2Reliability
If the client security module waits for the host security module to complete authentication before unlocking, then security coordination is ensured, but user access is delayed
Solution Approach 1:
The patent implements preliminary authentication actions where the client security module begins its authentication process in advance, parallel to the host security module's authentication. This allows both modules to work simultaneously rather than sequentially, reducing total authentication time while maintaining security coordination through ongoing communication.
Solution Approach 2:
The patent ensures continuous authentication processing by maintaining parallel authentication streams between client and host modules. Rather than halting one module until the other completes, both modules continue their authentication processes concurrently, with coordination messages exchanged throughout, thereby eliminating idle time while preserving security integrity.
Data Source
AI summary
A system and methods for coordinating the operation of a client security module and a host security module on a mobile electronic device. The modules communicate with each other through a platform abstraction layer using application programming interfaces to coordinate their activities. In particular, on start-up of the device, the host security module obtains user authorization input from a user and passes the input to a client operating system for validation. Once validated, the host security module unlocks the host-side of the device. At the same time, the client operating system sends a notice or request to the client-side virtual machine requesting that the client-side be unlocked. Once the virtual machine is initialized and available it launches the client security module and unlocks the client-side. During the delay while the virtual machine loads, the user is given access only to the host applications.