Push Notification Encoded Data Access via Temporary Alternate Route
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current push notification systems for system management applications are limited in size and format, making it difficult for users to access detailed information from high-security environments, especially when outside secure networks or without proper security clearance, and require multiple steps to establish VPN connections.
Innovation Solution
Incorporating encoded data in push notifications that allows users to reconstruct graphical images or access secured data via a temporary alternate route, using one-time passwords to bypass normal communication routes and security restrictions, enabling quick visual representation and secure data access without full system management software authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If push notification size is limited to 2 KB for security and system performance, then system security and performance are maintained, but detailed information cannot be conveyed to users
Solution Approach 1:
The solution segments information delivery into two parts: a compact push notification (within 2 KB limit) that triggers the event, and a separate web portal that hosts the detailed information. The notification contains only essential alert data and a link to the portal, while comprehensive details including graphical images and event logs are served from the web portal, eliminating the need to embed all details in the notification itself.
Solution Approach 2:
A web portal is introduced as an intermediary between the push notification system and the SMA. The portal receives requests from mobile applications triggered by notifications, establishes secure connections to the SMA using stored credentials, and retrieves detailed information. This intermediary handles the complexity of secure data access, allowing notifications to remain simple while enabling comprehensive information delivery.
2Ease of operation
If direct connection to SMA is required to obtain detailed information, then complete information access is possible, but multiple security steps including VPN establishment and credential entry are required
Solution Approach 1:
The mobile application performs preliminary actions by storing credentials for accessing the SMA and establishing the security context in advance. When a push notification is received, the application already has the necessary authentication data ready, eliminating the need for users to enter credentials or establish VPN connections at the moment of information retrieval.
Solution Approach 2:
The mobile application automatically establishes the secure connection to the SMA using its stored credentials without requiring user intervention. The application self-manages the authentication process, VPN connection establishment, and credential validation, allowing users to access detailed information with a single tap on the notification without performing any security setup steps.
3Loss of information
If users are granted access to SMA detailed information, then complete event data is available, but security risks increase especially when users are outside secure networks or lack proper clearance
Solution Approach 1:
The solution implements local quality by providing different levels of information access to different users based on their security clearance. The web portal and mobile application verify user credentials and grant access to SMA data at the appropriate level of detail. Users with higher clearance can access comprehensive information, while those with lower clearance receive only summary information, allowing detailed information delivery while maintaining security through differentiated access control.
Data Source
AI summary
A method that includes providing a push notification from a system management appliance (SMA) to a user device. The push notification includes a one-time password for access to the SMA on a temporary alternate route to a normal route between the SMA and the user device to permit the user device to obtain additional information pertaining to the push notification.