Mobile Trusted Module Application Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software security schemes for mobile devices are vulnerable to data leaks and key exposure, failing to provide effective protection against hacking, and the existing hardware-based TPM solutions face complexity and performance issues with key management as the number of applications and keys increases.
Innovation Solution
A method and apparatus using a mobile trusted module (MTM) to authenticate applications by generating and managing independent root keys for each application, storing hash values and secret key values, and providing a trusted software stack to manage authentication and key generation processes, ensuring secure storage and management of data and key values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If software security schemes are used for mobile devices, then implementation is simple, but data leaks and key exposure occur making the system vulnerable to hacking
Solution Approach 1:
The system divides the security architecture into two independent parts: a software layer for implementation and a hardware-based Mobile Trusted Module (MTM) for secure key storage and cryptographic operations. This segmentation allows the software to remain simple while the hardware module provides robust security protection against data leaks and hacking.
2Reliability
If hardware-based TPM solutions are used, then security protection capability is improved, but device complexity increases
Solution Approach 1:
The Mobile Trusted Module operates autonomously to generate, store, and manage cryptographic keys without requiring complex external key management infrastructure. The MTM self-services the security functions including key generation, storage, and cryptographic operations, thereby improving security while keeping the overall system complexity manageable.
3Reliability
If independent key management systems are generated for each application, then security protection capability is improved, but key management complexity increases
Solution Approach 1:
The Mobile Trusted Module serves as a universal security platform that handles key management for multiple applications simultaneously. Instead of requiring separate key management systems for each application, the MTM provides multi-functional support for generating and managing independent key pairs for each application, thereby achieving application-specific security isolation while maintaining manageable complexity through centralized hardware management.
Data Source
AI summary
Disclosed herein are authentication and management of an application using a mobile trusted module (MTM).According to an exemplary embodiment of the present invention, there is provided an apparatus for authenticating and managing an application, including: a mobile trusted module configured to store a hash value of an authentication data for at least one application and a secret key value of an authentication data which are installed in a mobile device, authenticate the application using the stored hash value and secret key value of the authentication data, and generate a storage root key (SRK) for the application; and a trusted software stack (TSS) middleware configured to generate a message requesting authentication for the application and generation of the storage root key (SRK) and transmit the generated message to the mobile trusted module and manage result information received from the mobile trusted module in response to the transmitted message.