Secure Data Access via Remote Server Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security measures for electronic devices are inadequate in protecting authentication data from malware and unauthorized access, allowing criminals to misuse authentication information even when protected by passwords.
Innovation Solution
A method involving an electronic device and a server that authenticates the user and generates a first key for decrypting encrypted data, with the decrypted data including a second key for authentication and communication, ensuring secure communication by requiring both the device and server to verify user and device authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication data is protected by a password in the device, then ease of operation is improved, but reliability deteriorates because malware can still access the data
Solution Approach 1:
A server acts as an intermediary between the user and the authentication data. The server stores encryption keys and performs decryption operations remotely, so the authentication data never resides in plain text on the device. This mediator approach maintains user convenience while significantly improving security by removing the vulnerability to local malware attacks.
Solution Approach 2:
The critical security function of key storage and decryption is extracted from the device and relocated to a remote server. By taking out the decryption capability from the potentially compromised device environment and placing it in a secure remote location, the system maintains ease of operation while eliminating the security vulnerability of storing sensitive data locally.
2Productivity
If decryption keys are stored on the device for fast access, then productivity is improved, but reliability deteriorates due to potential unauthorized access
Solution Approach 1:
The server serves as a mediator that provides decryption keys on-demand without requiring them to be permanently stored on the device. This approach maintains fast access (productivity) by keeping the key retrieval process efficient, while improving reliability by eliminating the need to store sensitive decryption keys locally where they could be compromised.
Solution Approach 2:
Encryption is performed in advance and stored on the device, while the decryption operation is deferred to a remote server. This preliminary encryption action allows data to be stored securely in encrypted form locally, with decryption only occurring when needed and controlled by remote authentication, thus balancing fast access with security.
3Ease of operation
If authentication data is kept locally for quick authentication, then ease of operation is improved, but object-generated harmful factors worsen due to malware attacks
Solution Approach 1:
The server acts as a trusted intermediary that handles the vulnerable authentication operations remotely. By moving the authentication data processing from the device (which is vulnerable to malware) to a secure remote server, the system maintains fast authentication (ease of operation) while eliminating the malware vulnerability that arises from having authentication data on the device.
Solution Approach 2:
The authentication data and decryption operations are extracted from the device environment and relocated to a secure remote server. This extraction removes the harmful factor of malware vulnerability while preserving the ease of operation, as the user experience remains simple and fast despite the complex security operations occurring remotely.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The method involves establishing connection between an electronic device (2) and a smart security management server (SSMS) (3). The user of electronic device connected to server is authenticated. A user individual key is obtained from server when successful user authentication is determined, and is used for decryption of encrypted data stored in electronic device. The decrypted data is used for communication of electronic device. Independent claims are included for the following: (1) a computer program for performing secure access of data in electronic device; (2) a data carrier device storing program for performing secure access of data in electronic device; and (3) a system for performing secure access of data in electronic device.