Mobile Station Security Level Determination Module
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile stations cannot guarantee a defined security level for applications, as the security resources can change, and existing systems assume known terminal configurations, which may not match the actual security resources.
Innovation Solution
A mobile station with a determination module that dynamically assesses and outputs the actual security resources and levels, ensuring a guaranteed security level for applications by deriving and outputting the current security status, and controlling application execution based on these levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the security resources of a mobile station are assumed to be known (e.g., according to terminal model), then the system can simplify configuration management, but the actual security resources may change (e.g., SIM card removal, TEE addition) causing a mismatch between assumed and actual security levels
Solution Approach 1:
The determination module performs preliminary detection of security resources before application execution. It proactively identifies available security resources (SIM card, TEE, SE) and determines the current security level in advance, ensuring the application can be configured appropriately based on actual rather than assumed resources
Solution Approach 2:
The system implements feedback by continuously monitoring and detecting actual security resources, comparing them against assumed configurations, and adjusting the security level determination accordingly. This feedback loop ensures the mobile station always operates with accurate security resource awareness
2Ease of operation
If the mobile station uses a single security level assumption, then configuration is simplified, but it cannot adapt when security resources change (e.g., adding TEE or removing SIM card)
Solution Approach 1:
The determination module dynamically detects security resources and adjusts the determined security level based on current conditions. When security resources change (addition or removal), the module automatically re-evaluates and updates the security level, enabling the system to adapt to different security configurations without manual intervention
Solution Approach 2:
The system changes the security level parameter based on detected security resources. Different combinations of security resources (SIM card, TEE, SE) result in different determined security levels, allowing the application to adapt its behavior and functionality according to the available security resources
3Productivity
If applications are executed without verifying security resources, then execution speed is maximized, but the security level cannot be guaranteed and insecure applications may run
Solution Approach 1:
The determination module performs security resource detection and security level determination before application execution. This preliminary action ensures that only applications appropriate for the current security level are executed, preventing insecure applications from running while maintaining efficient execution of validated applications
Data Source
Figure 1~3
Figure 4~6
AI summary
The invention relates to a mobile station comprising a mobile terminal, security resources and a detection module implemented in the mobile station, by way of which module the security resources of the mobile station can be detected, at least one security level of the mobile station obtainable using the security resources can be derived, and derived security levels of the mobile station can be issued. The invention further specifies an application charging system having a mobile station of this kind, and a risk-assessment system for mobile stations.