MVNO Mobile Authentication Platform SIM-Based Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing enterprise and cloud service security models struggle to authenticate and secure sessions with mobile devices effectively, especially when users access services outside the enterprise network, leading to increased inconvenience and vulnerabilities such as phishing and man-in-the-middle attacks.
Innovation Solution
A mobile authentication platform hosted by a mobile virtual network operator (MVNO) that registers mobile devices, assigns network identifiers, and authenticates requests for network resources using SIM numbers, MAC addresses, and location information, thereby providing a secure and convenient authentication method.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional enterprise security models use password challenges and two-factor authentication, then security is improved, but user convenience and authentication flow are worsened due to frequent interruptions and inconvenience
Solution Approach 1:
The system uses the mobile device's SIM card to automatically perform authentication without requiring user action. The SIM card inherently provides cryptographic capabilities that enable challenge-response authentication, eliminating the need for users to manually enter passwords or codes. The device itself serves its authentication function through the SIM card already present in the device.
Solution Approach 2:
The SIM card acts as an intermediary authentication mechanism between the user and the network. It provides cryptographic verification capabilities that mediate the authentication process, replacing direct password-based authentication with SIM-based challenge-response protocols that occur transparently in the background.
2Reliability
If cloud services are configured to allow authorized access from particular enterprise networks, then security is improved, but network latency is worsened due to traffic routing into and out of the enterprise network
Solution Approach 1:
The system transitions from network-based security (controlling access through enterprise network routing) to device-based security (authenticating the mobile device itself). This dimensional shift from network topology to device identity allows direct access to cloud services while maintaining security through SIM-based authentication, eliminating the latency caused by traffic routing through enterprise networks.
3Reliability
If SMS and voice-call second factor authentication is used, then security is improved, but vulnerabilities are worsened due to call and SMS forwarding services enabling attacks
Solution Approach 1:
The system uses the SIM card's inherent cryptographic capabilities instead of relying on SMS or voice calls that can be forwarded. The SIM card provides a secure, non-forwardable authentication channel through its embedded cryptographic modules, eliminating the vulnerability to forwarding attacks that plagues SMS and voice-based second factor authentication.
4Reliability
If SecurID physical devices are used for second factor authentication, then security is improved, but user convenience is worsened due to the need to carry and remember another physical device
Solution Approach 1:
The system merges the authentication function with the mobile device itself by utilizing the SIM card that is already present in the device. This eliminates the need to carry a separate physical authentication device like SecurID, as the SIM card provides the necessary cryptographic capabilities within the mobile device that users already carry.
Data Source
AI summary
Systems, methods, and non-transitory computer-readable storage media for using mobile network authentication factors to authenticate a mobile device.