Mobile Terminal GBA Security via Smart Card Key Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Generic Bootstrapping Architecture (GBA) for mobile terminals relies on trusted mobile terminals, which can lead to security vulnerabilities at the terminal or in the interface between the terminal and the smart card, potentially allowing unauthorized access to applications.
Innovation Solution
Implementing a Public Key Cryptography Standard (PKCS) #15 file structure on mobile terminals to store information and rules for accessing applications that require GBA, with a Bootstrapping Server Function (BSF) providing authorization based on the terminal's ability to handle GBA, ensuring only authorized users access these applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If GBA relies on a shared secret key between the mobile terminal and application server with mutual authentication through BSF, then authentication and security are improved, but security vulnerabilities arise at the mobile terminal or in the interface between the mobile terminal and smart card
Solution Approach 1:
The patent extracts the secret key from the mobile terminal and stores it in the smart card instead. The terminal only holds public keys and certificates, while the smart card securely stores the secret key. This separation removes the vulnerability of having secret keys in the terminal while maintaining authentication functionality.
Solution Approach 2:
The smart card acts as an intermediary between the mobile terminal and the application server for key management. It securely stores the secret key and manages cryptographic operations, mediating the security relationship between the terminal and external systems without exposing the secret key to the terminal's vulnerable environment.
2Ease of operation
If the mobile terminal is assumed to be trusted for GBA authentication, then the authentication process is simplified, but security vulnerabilities are introduced that allow unauthorized access to applications
Solution Approach 1:
The system segments the trust model by distinguishing between the terminal's authentication capabilities and the actual secret key storage. The terminal can perform authentication operations without holding the secret key, which is segmented and stored separately in the smart card. This maintains operational simplicity while eliminating the security vulnerability of trusting the terminal with secret keys.
Solution Approach 2:
The smart card serves as an intermediary that enables the terminal to perform authenticated operations without the terminal needing to be fully trusted. The smart card mediates by holding the secret key and performing cryptographic operations on behalf of the terminal, allowing simplified terminal operation while maintaining security.
Data Source
AI summary
A mobile terminal is configured to store information associated with accessing an application that requires bootstrapping; recognize an invocation of the application; identify a rule, included in the information, associated with accessing the application; determine whether the rule indicates that a user of the mobile terminal is allowed to access the application; determine whether the mobile terminal supports the bootstrapping; and provide access to the application when the rule indicates that the user of the mobile terminal is allowed to access the application and when the mobile terminal supports the bootstrapping.