Secure Memory Authentication for Mobile Unit Smartphone Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure communication between mobile units and smartphones face challenges in balancing security and user-friendliness, particularly due to differences in interfaces and computing power, especially when using devices like smartwatches that are poorly suited for password entry.
Innovation Solution
A method that stores login data, PIN, and secret in a secure memory on the smartphone, allowing simplified PIN entry on the mobile unit, which is then transmitted to the smartphone for verification, ensuring secure communication by maintaining all sensitive data within the secure memory, avoiding storage in apps or mobile units.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password entry is used on mobile units like smartwatches, then security is maintained, but ease of operation deteriorates due to poor interface suitability for password entry
Solution Approach 1:
The smartphone acts as an intermediary device that stores sensitive authentication data (passwords, login credentials) in its secure memory. The mobile unit (smartwatch) only stores a PIN and secret, which are used to authenticate with the smartphone rather than directly with the server. This mediator approach allows the smartwatch to have simplified authentication without compromising security, as the smartphone's secure memory protects the actual credentials.
Solution Approach 2:
The authentication system is segmented into two parts: the mobile unit (smartwatch) and the smartphone. The smartphone handles sensitive data storage and server communication, while the mobile unit handles simplified user interaction. This segmentation allows each device to have optimized functionality - the smartwatch has a simple interface for PIN entry, while the smartphone provides secure credential management.
2Reliability
If sensitive data is stored in apps or mobile units, then ease of operation improves, but security deteriorates
Solution Approach 1:
Sensitive authentication data (passwords, login credentials) is extracted from the mobile unit (smartwatch) and stored exclusively in the smartphone's secure memory. The mobile unit only retains minimal authentication elements (PIN and secret) that are not considered highly sensitive. This extraction ensures that the most sensitive data is stored in the device with the highest security capabilities.
3Ease of operation
If simplified PIN entry is implemented on mobile units, then ease of operation improves, but security may deteriorate without proper safeguards
Solution Approach 1:
The system performs preliminary authentication by verifying the PIN and secret against stored values in the smartphone's secure memory before allowing access to credentials. This preliminary check ensures that even though the mobile unit has simplified input, security is maintained through pre-verified authentication mechanisms.
Solution Approach 2:
The smartphone provides feedback to the mobile unit about whether the entered PIN and secret are correct. This feedback mechanism ensures that simplified input on the mobile unit is accompanied by proper verification, maintaining security while enabling ease of operation.
Data Source
Figure 1~2
AI summary
The invention relates to a method for protected communication between a mobile unit (18) coupled to a smartphone (14) and a server (12), wherein it is possible to access a service (32) of the server (12) via the smartphone (14) by means of registration data. Steps are provided for the first-time input of a PIN number (28) in association with the registration data (26); definition of a secret (30) of the mobile unit (18); storage of the registration data (26), the PIN number (28) and the secret (30) in a secure memory (24) in the smartphone (14); input of the PIN number (28) on the mobile unit (18); transmission of the PIN number (28) and the secret (30) from the mobile unit (18) to the secure memory (24); reading of at least a portion of the registration data (26) from the secure memory (24) if the transmitted PIN number (28) and the transmitted secret (30) match the stored PIN number (28) and the stored secret (30); and transmission of at least the portion of the registration data (26) from the smartphone (14) to the server (12). The invention is based on the object of providing security for and simplifying the communication between a mobile unit coupled to a smartphone and a server.