Secure Messaging Token for SMS Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices require users to subscribe to additional data services for secure communications, posing a barrier for third-party application providers seeking to implement secure transactions and messaging, as users must incur extra costs for data services to utilize secure data capabilities.
Innovation Solution
A token card with tamper-evident capabilities, capable of communicating via standard I/O protocols like USB or memory card interfaces, is used to enable secure access and transactions using text/SMS messaging, incorporating encryption/decryption functions and synchronized cryptography for secure messaging protocols, allowing secure authentication and data exchange without the need for additional data services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure data exchange is implemented using standard secure protocols over the traffic channel, then communication security is improved, but device complexity and service subscription requirements increase
Solution Approach 1:
The patent introduces an intermediary device (secure messaging device or server) that handles the complexity of secure protocol implementation, encryption key management, and authentication. This intermediary mediates between the mobile device and the communication network, allowing secure messaging without requiring the mobile device itself to implement complex security protocols or require additional data service subscriptions. The intermediary manages the cryptographic operations and protocol complexity centrally.
Solution Approach 2:
The patent uses SMS text messaging as a copy or alternative channel for secure communication. Instead of relying on the complex data channel (traffic channel) that requires service subscriptions, the system copies the secure communication function to the simpler control channel (SMS channel), which does not require additional service subscriptions. This allows secure messaging to be delivered through a simpler, more accessible channel.
2Reliability
If third-party application providers implement secure communications, then communication security is improved, but ease of operation deteriorates due to additional service subscription requirements for users
Solution Approach 1:
The intermediary secure messaging device absorbs the complexity of service subscription management and authentication protocols. Users simply interact with the third-party application on their mobile device without needing to understand or configure security settings, subscribe to additional services, or manage cryptographic keys. The intermediary handles all these complexities behind the scenes, making secure communication as easy to use as regular messaging.
Solution Approach 2:
The system implements automatic authentication and key exchange mechanisms that occur without user intervention. The intermediary device automatically manages session establishment, encryption key generation and exchange, and authentication verification. Users do not need to manually subscribe to services or configure security settings - the system performs these actions automatically in the background.
Data Source
AI summary
Secure authentication and messaging for mobile online transactions are performed by a secure messaging platform. The secure messaging platform may include a token coupled to a mobile device, or a mobile device alone. The token enables secure access, and client and server protocols enable secure transactions using text/SMS messaging.