Secure File Portability Between Mobile Applications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Android operating system's default mechanisms for passing data between applications are insecure, exposing data to all applications on the mobile device, rather than just the intended ones, leading to potential data breaches and unauthorized access.
Innovation Solution
Implementing a server-based key generation service that provides unique encryption keys for each file transfer transaction between mobile applications, ensuring that even if one transaction is compromised, subsequent transactions remain secure, and using a background service to maintain user session validity and revalidate user credentials for secure file portability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If default data passing mechanisms are used between applications, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent introduces an intermediary component that mediates data passing between applications. Instead of direct data sharing through default mechanisms, an intermediate layer validates and controls the data transfer process, ensuring security while maintaining operational ease. This intermediary acts as a gatekeeper that prevents unauthorized access while allowing legitimate data sharing.
2Reliability
If encryption keys are generated for each transaction, then security is improved, but device complexity is worsened
Solution Approach 1:
The system implements self-service key generation where the encryption keys are automatically created and managed by the system itself without requiring manual intervention. The key management process is automated, with the system generating unique keys for each transaction on-demand and handling their lifecycle automatically, thus reducing the perceived complexity for users while maintaining high security standards.
3Reliability
If user session revalidation is implemented, then security is improved, but loss of time is worsened
Solution Approach 1:
The patent implements periodic session revalidation at predetermined intervals rather than continuously. This periodic action maintains security by regularly verifying user credentials while minimizing time loss by not requiring constant validation. The system balances security needs with user convenience by revalidating sessions at appropriate intervals without interrupting normal operations excessively.
Data Source
AI summary
Systems and methods for secure file portability between mobile applications in a cloud-based environment or cloud-based collaboration and file sharing environment. In one embodiment, a server-based key generation service generates an encryption key that is unique to each file transfer transaction between mobile applications accessed via a mobile device. Data packages leaving a mobile application are then encrypted using the encryption key to provide secure file portability between mobile applications. In another embodiment, a background service triggered by a mobile application detects when a user is logged out of the mobile application and revalidates the user session with the mobile application to maintain portability of files between mobile applications. The background service presents a minimal user interface to get the user's credentials for the mobile application, without the user having to switch to the mobile application, and obtains an authentication token from a remote server using the user's credentials.


