Mobile Terminal Privacy Data Protection via IMSI Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to adequately protect user privacy data on mobile terminals, as the optional nature of phone numbers in subscriber identity module cards leads to insecure data storage and easy misappropriation, especially when users switch SIM cards or phones.
Innovation Solution
A method and device that utilize IMSI information from subscriber identity module cards to match and bind user privacy data with password information, ensuring secure display and storage only when card and password data match, thereby enhancing security and user privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If phone number in subscriber identity module card is used to bind user privacy data, then security of user privacy data is enhanced, but reliability is reduced because phone number is optional and cannot guarantee encryption of all cards
Solution Approach 1:
The patent changes the binding parameter from phone number (MSISDN) to IMSI information. IMSI is a mandatory parameter in all subscriber identity module cards according to 3GPP standards, ensuring universal compatibility. This parameter change maintains security enhancement while resolving the compatibility issue with optional phone numbers.
Solution Approach 2:
The patent segments the security mechanism into two independent binding options: IMSI binding and password binding. This segmentation allows the system to work with all subscriber identity module cards regardless of whether they have optional phone numbers, while maintaining strong security through the mandatory IMSI parameter.
2Reliability
If card information is bound with user privacy data, then unauthorized access is prevented, but ease of operation is reduced when users need to replace cards or phones
Solution Approach 1:
The patent creates a universal binding mechanism that works across multiple cards and devices. By binding to IMSI (a universal identifier in all subscriber identity module cards) and supporting password-based binding, the system enables users to access their privacy data regardless of which card or device they use, facilitating seamless replacement scenarios.
Solution Approach 2:
The patent enables data portability by allowing the same privacy data to be accessed through different cards. The binding mechanism creates a logical copy of access rights across multiple subscriber identity module cards, so users can replace physical cards without losing access to their data.
3Ease of operation
If simple card insertion is used to access data, then ease of operation is improved, but security is reduced as phone numbers can be easily obtained through writing card mode
Solution Approach 1:
The patent introduces IMSI information as an intermediary between card insertion and data access. Instead of directly accessing data upon card insertion, the system uses IMSI as a mandatory verification layer. This intermediary provides strong security since IMSI is difficult to obtain through writing card mode, while maintaining ease of operation through automated verification.
Solution Approach 2:
The patent applies preliminary anti-action by binding to IMSI before data access is granted. Since IMSI is a sensitive parameter that cannot be easily obtained through writing card mode (unlike optional phone numbers), this preliminary binding prevents unauthorized access while allowing legitimate users convenient access through their own cards.
Data Source
AI summary
Disclosed are a method and device for protecting user privacy data of a mobile terminal in the embodiment of the present invention, related to a wireless terminal, wherein the method includes: when a subscriber identity module card is inserted into a mobile terminal, obtaining card information of the subscriber identity module card, and judging whether there are user privacy data in the mobile terminal or not; if the judgment result is yes, matching the card information with card information stored in the mobile terminal, and displaying the user privacy data for the user to use according to the matching result; and if the judgment result is no, performing security processing on the mobile terminal.