Secure Binary Download via Unique ID Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices, particularly those with open-source platforms like Android, are vulnerable to external attacks and malicious applications, leading to increased security risks and information leakage, especially in high-security applications such as electronic payments, due to insecure booting processes.
Innovation Solution
A secure download and function execution method that authenticates unique identifiers and boot loader information to ensure only authorized binaries are downloaded and executed, preventing information leakage and malfunction by matching stored unique IDs and boot loader information during the binary update process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If open-source platform like Android is used to increase adaptability and ease of operation, then device versatility is improved, but security vulnerability increases making the device susceptible to external attacks and malicious applications
Solution Approach 1:
The patent segments the binary file into multiple parts and processes authentication for each segment separately. This allows comprehensive security verification while maintaining the ability to handle diverse binary types, thus preserving versatility while enhancing security against malicious code.
Solution Approach 2:
The patent performs authentication and verification actions before executing the binary function. By pre-authenticating the binary file and its segments, and verifying integrity before execution, the system prevents malicious code from running, thereby addressing security vulnerabilities while maintaining platform versatility.
2Reliability
If digital certificate and digital signature based security booting is implemented to improve security, then security level is improved, but device complexity increases
Solution Approach 1:
The patent implements self-service authentication where the binary file contains its own authentication information and integrity verification data. The system authenticates the binary using information embedded within the binary itself, reducing the need for complex external verification infrastructure while maintaining high security levels.
Solution Approach 2:
The patent merges the authentication information and integrity verification data directly into the binary file structure. By combining security verification elements with the binary itself, the system reduces external complexity while maintaining robust security authentication during the booting process.
3Reliability
If unique ID authentication is performed during binary download to prevent information leakage, then security is improved, but download process time increases
Solution Approach 1:
The patent performs partial authentication by verifying only critical segments of the binary file during download. By authenticating key portions rather than the entire binary sequentially, the system maintains information security while reducing the time penalty associated with comprehensive verification.
Solution Approach 2:
The patent implements feedback mechanisms where authentication results from previous segments inform subsequent verification steps. This allows the system to optimize the download process by adjusting verification intensity based on earlier authentication outcomes, balancing security requirements with time efficiency.
4Reliability
If boot loader information verification is performed to prevent malfunctioning, then system reliability is improved, but execution time increases
Solution Approach 1:
The patent performs boot loader information verification as a preliminary action before binary execution. By completing authentication and integrity checks before the binary is executed, the system ensures reliability and prevents malfunctioning while minimizing impact on execution time through efficient pre-verification processes.
Data Source
AI summary
A method and electronic device for executing secure download and security function is provided. The method includes storing a unique identifier (ID) of the electronic device, receiving a binary update request, determining whether the stored unique ID matches a unique ID signed to the binary, and downloading the binary depending on whether the unique IDs match.