Pre-packaged Command Wiping for Mobile Device Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securely wiping or disabling a mobile device are ineffective when the associated server ceases to be authoritative, as the server can no longer issue security commands, leaving sensitive data potentially accessible to unauthorized users.
Innovation Solution
A method and system that allow a server to generate and store an encrypted security command before losing authority, enabling the command to be transmitted to the mobile device for execution even after the server's authorization is revoked, using a command decryption key held by the device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the server deletes the user registration before issuing a wiping command, then the server can no longer be authoritative for the client device, but this prevents the server from being able to issue security commands to wipe the device
Solution Approach 1:
The server generates and stores the encrypted wiping command in advance, before deleting the user registration. This preliminary action ensures that the command exists and can be transmitted even after the server loses authoritative status, resolving the contradiction between maintaining server authority and enabling post-deletion security operations
2Adaptability or versatility
If the server retains the command encryption key, then the server can issue security commands, but the server remains authoritative when it should no longer be
Solution Approach 1:
The server extracts the essential security command functionality by storing the encrypted command and its transmission capability separately from the user registration and command encryption key. This allows the server to lose authoritative status (by deleting registration and keys) while retaining the ability to execute the pre-stored wiping command
3Object-affected harmful factors
If the server deletes user registration to revoke access, then unauthorized users cannot access data, but the server can no longer wipe the device if not returned
Solution Approach 1:
The server performs the device wiping action in advance by generating and storing the encrypted wiping command before deleting the user registration. This ensures that even though the server can no longer issue new commands after deletion, the pre-prepared wiping command can still be transmitted and executed, simultaneously achieving both unauthorized access prevention and device wiping capability
Data Source
Figure 1
Figure 2~4
Figure 5a~5b
AI summary
A system and method implemented at a server system, for securely wiping a remote mobile device after the device registration has been removed from the server system. Prior to removal of the device registration from the server system, a "prepackaged" command is created and stored at the server system. In the event that it is determined, after removal of the registration, that the device should be wiped or disabled, means are provided for an administrator to issue the previously stored command to the target mobile device.