Mobile Terminal Data Encryption Using Identification-Based Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for protecting data on mobile terminals are either expensive and require hardware protection or can only function with a network connection, limiting their use in offline scenarios.
Innovation Solution
A method and apparatus that generate and manage a service key using a key pair, encrypting and decrypting it with identification information to enable secure data encryption and decryption on mobile terminals without hardware protection, allowing operation in offline states.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware protection (encryption card or mobile phone shield) is used to protect private data on mobile terminal, then data security is improved, but cost increases significantly
Solution Approach 1:
The patent uses software-based encryption algorithms to replicate the security function of hardware protection mechanisms. By implementing encryption and decryption operations through software code rather than physical security modules, the system achieves comparable data protection without the high costs associated with hardware security devices.
Solution Approach 2:
The patent replaces the mechanical/hardware-based protection system (encryption cards, shields) with a software-based cryptographic system. The encryption and decryption operations are performed through software algorithms running on the mobile terminal, eliminating the need for physical security hardware while maintaining security effectiveness.
2Reliability
If public and private key protection is used to encrypt data on mobile terminal, then data security is improved, but network connection is required for key exchange which limits offline usage
Solution Approach 1:
The patent performs encryption operations in advance using pre-established cryptographic keys and algorithms. The mobile terminal is configured with necessary encryption capabilities before offline operation is needed, allowing it to encrypt and decrypt data autonomously without requiring real-time network connection for key exchange or authentication.
Solution Approach 2:
The mobile terminal implements self-contained encryption and decryption functionality using locally stored cryptographic algorithms and keys. The system serves itself by performing all security operations internally without external assistance, enabling fully offline operation while maintaining data security.
3Reliability
If hardware protection is used to protect data on mobile terminal, then data security is improved, but device complexity and cost increase
Solution Approach 1:
The patent extracts the security functionality from dedicated hardware components and implements it as software. By separating the encryption/decryption operations from physical security modules and implementing them through software algorithms, the system reduces hardware complexity while maintaining security functions.
Solution Approach 2:
The software-based encryption system can be universally applied across different mobile terminal models and configurations without requiring specialized hardware components. The same cryptographic algorithms and software implementation can protect data on various devices, reducing the need for device-specific security hardware and thereby reducing overall complexity.
Data Source
AI summary
A method includes: pre-generating a key pair including a first public key and a first private key; acquiring identification information about a mobile terminal; encrypting the key pair including the first public key and the first private key using the identification information to obtain a first encrypted public key and a first encrypted private key and saving same; when a service key is encrypted, encrypting the service key using the first private key to obtain an encrypted service key; when the service key is decrypted, decrypting the encrypted service key using the first public key to obtain the service key; acquiring data needing to be encrypted/decrypted of the mobile terminal; and encrypting/decrypting the data using the service key. The security of the data can be protected off-line with low cost and without hardware protection, so that the data cannot be intercepted and tampered with.