OTA Interworking Function for Secure Protocol Conversion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing over-the-air programming technologies lack secure and efficient methods for delivering programming data to communication devices, particularly in ensuring the integrity and security of transactions and exchanges of information.
Innovation Solution
The use of a Network OTA Interworking Function (N-OIF) and User OTA Interworking Function (U-OIF) in conjunction with a Secure Device Processor (SDP) and Universal Integrated Circuit Card (UICC) to securely convert and deliver over-the-air programming messages between SMS and HTTP protocols, providing an additional layer of security and remote management capabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing over-the-air programming technologies are used to deliver programming data to communication devices, then the delivery process is simple, but the security and integrity of transactions and information exchange are insufficient
Solution Approach 1:
The patent introduces an Over-The-Air Interworking Function (OAIWF) as an intermediary component that mediates between the programming source and the communication device. This OAIWF provides secure authentication, encryption, and protocol conversion capabilities, thereby enhancing the security and reliability of programming data delivery without requiring complex security implementations in the end devices themselves.
Solution Approach 2:
The patent segments the programming delivery system into distinct functional components: the OAIWF server component, the OAIWF client component in the communication device, and the baseband proxy. This segmentation allows each component to specialize in specific security functions, improving overall system security while maintaining manageable complexity through modular design.
2Reliability
If secure authentication and encryption mechanisms are implemented for over-the-air programming, then the security of information exchange is improved, but the complexity of the programming system increases
Solution Approach 1:
The OAIWF acts as a security intermediary that handles complex authentication and encryption operations centrally rather than distributing these complex functions across all devices. The OAIWF manages key storage, authentication verification, and encrypted communication channels, thereby providing strong security without burdening the communication device with excessive complexity.
Solution Approach 2:
The system implements mutual authentication where the OAIWF and the communication device verify each other's credentials automatically during the programming process. This self-service authentication mechanism enhances security through verified identity exchange while reducing the need for manual security configuration and intervention.
3Adaptability or versatility
If protocol conversion between SMS and HTTP is implemented through OAIWF, then the compatibility and versatility of programming delivery are improved, but the processing time and system complexity increase
Solution Approach 1:
The OAIWF pre-establishes encrypted communication channels and authentication contexts before actual programming data transfer begins. By preparing security infrastructure in advance, the system minimizes the time required for security handshakes and protocol conversions during the actual programming operation, thereby reducing overall processing delays.
Solution Approach 2:
The OAIWF is designed as a universal protocol conversion platform that can handle multiple protocol types (SMS, HTTP, and future protocols) through a standardized interface. This multi-functionality allows the same infrastructure to serve diverse programming delivery scenarios without requiring separate specialized systems for each protocol, improving versatility while maintaining efficient processing through reuse of established conversion routines.
Data Source
AI summary
A system that incorporates the subject disclosure may perform, for example, receiving an over-the-air programming message that is utilizing a hypertext transfer protocol where the over-the-air programming message including programming data for use by the mobile communication device, converting the over-the-air programming message to a short message service transport protocol to generate an adjusted message that includes the programming data, and providing the adjusted message to a universal integrated circuit card of the mobile communication device via a baseband proxy operating in a device processor of the mobile communication device. Other embodiments are disclosed.