Secure File Portability Between Mobile Applications

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The Android operating system's default mechanisms for passing data between applications are insecure, exposing data to all applications on the mobile device, rather than just the intended ones, leading to potential data breaches and unauthorized access.

Innovation Solution

Implementing a server-based key generation service that provides unique encryption keys for each file transfer transaction between mobile applications, ensuring that even if one transaction is compromised, subsequent transactions remain secure, and using a background service to maintain user session validity and revalidate user credentials for secure file portability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If default data passing mechanisms are used between applications, then ease of operation is improved, but security is worsened

Engineering Contradiction:
Improveease of data passingVSAvoiddata security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces an intermediary component that mediates data passing between applications. Instead of direct data sharing through default mechanisms, an intermediate layer validates and controls the data transfer process, ensuring security while maintaining operational ease. This intermediary acts as a gatekeeper that prevents unauthorized access while allowing legitimate data sharing.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If encryption keys are generated for each transaction, then security is improved, but device complexity is worsened

Engineering Contradiction:
Improvetransaction securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements self-service key generation where the encryption keys are automatically created and managed by the system itself without requiring manual intervention. The key management process is automated, with the system generating unique keys for each transaction on-demand and handling their lifecycle automatically, thus reducing the perceived complexity for users while maintaining high security standards.

Inventive Principle:
Principle #25Self-service

3Reliability

If user session revalidation is implemented, then security is improved, but loss of time is worsened

Engineering Contradiction:
Improveuser session securityVSAvoidsession maintenance time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements periodic session revalidation at predetermined intervals rather than continuously. This periodic action maintains security by regularly verifying user credentials while minimizing time loss by not requiring constant validation. The system balances security needs with user convenience by revalidating sessions at appropriate intervals without interrupting normal operations excessively.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS9027108B2Systems and methods for secure file portability between mobile applications on a mobile device
Publication Date: 2015.05.05 BOX INC
  • US9027108B2 patent drawing
  • US9027108B2 patent drawing
  • US9027108B2 patent drawing

AI summary

Systems and methods for secure file portability between mobile applications in a cloud-based environment or cloud-based collaboration and file sharing environment. In one embodiment, a server-based key generation service generates an encryption key that is unique to each file transfer transaction between mobile applications accessed via a mobile device. Data packages leaving a mobile application are then encrypted using the encryption key to provide secure file portability between mobile applications. In another embodiment, a background service triggered by a mobile application detects when a user is logged out of the mobile application and revalidates the user session with the mobile application to maintain portability of files between mobile applications. The background service presents a minimal user interface to get the user's credentials for the mobile application, without the user having to switch to the mobile application, and obtains an authentication token from a remote server using the user's credentials.