Secure Inter-App Channel via Intent Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Android operating system's Intent-based messaging system is vulnerable to attacks, allowing malicious applications to sniff, steal, or modify data, compromising user privacy and security, especially for applications handling file transfers, where the existing sandbox solution is overly complex and not necessary.
Innovation Solution
Implementing a secure inter-application communication system that issues Intents in two phases: first to detect capable applications, then establishing a secure channel only with the chosen application, using encryption and a staging area for secure data transfer, ensuring only authorized applications can access the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sandbox solution is used to secure applications, then security is improved, but device complexity increases
Solution Approach 1:
The patent segments the security model by creating individual secure channels between specific application pairs rather than using a comprehensive sandbox. Each channel is established independently with its own encryption keys, allowing security to be applied selectively only where needed for inter-application communication.
Solution Approach 2:
The patent introduces an intermediary secure channel mechanism that mediates data transfer between applications. This channel acts as a controlled intermediary that encrypts and protects data in transit, replacing the need for comprehensive sandboxing while maintaining security.
2Ease of operation
If Intent messaging is used for inter-application communication, then ease of operation is improved, but security deteriorates
Solution Approach 1:
The patent applies preliminary action by establishing secure channels and encryption mechanisms before any data transfer occurs. The secure channel is set up in advance with proper authentication and key exchange, ensuring that when Intent messaging occurs, the data is already protected without requiring changes to the communication workflow.
Solution Approach 2:
The patent changes the security parameters of the Intent messaging system by introducing encryption layers and authentication mechanisms. The data is transformed through encryption before transmission, and the communication parameters include security credentials that verify the identity of receiving applications.
Data Source
AI summary
System and method for creating a secure channel for inter-application communication based on the messaging system called Intents in the Android OS are disclosed. In one embodiment, an application for accessing a cloud-based storage platform triggers the broadcast of a custom Intent to all applications on a mobile device to detect an authorized application that is capable of interacting with the application. Once an authorized application is chosen, the application opens a secure channel for communication with the authorized application and passes encrypted data stream to the to the secure channel for access by the authorized application.