Secure Mobile App Connection Bus via Encrypted Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device management systems face challenges in securely managing and transferring configuration, policy, and data between multiple applications on a mobile device while maintaining user experience, as they lack a seamless and secure inter-application communication mechanism.
Innovation Solution
A secure mobile application connection bus is established using encrypted data transfer through a storage location accessible by authorized applications, with encryption information and identifiers exchanged to ensure secure communication between managed and non-managed applications, mediated by a management agent and security enforcement node.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure inter-application communication mechanism is implemented, then data security and policy compliance are improved, but system complexity and implementation difficulty increase
Solution Approach 1:
The patent introduces a management agent as an intermediary component that mediates all communication between applications and the management server. This agent handles encryption, decryption, and policy enforcement, isolating the complexity from individual applications while ensuring secure data transfer. The agent acts as a trusted intermediary that manages cryptographic keys and enforces enterprise policies without requiring each application to implement its own security mechanism.
Solution Approach 2:
The system segments security functions into separate modular components: the management agent handles cryptographic operations, the secure tunnel manages encrypted communication channels, and individual applications focus on their core functionality. This segmentation allows each component to be optimized independently and reduces the overall system complexity by distributing security responsibilities across specialized modules rather than requiring every application to implement complete security stacks.
2Reliability
If encrypted data transfer is implemented between applications, then data integrity is improved, but communication overhead and processing time increase
Solution Approach 1:
The system performs preliminary actions by establishing secure tunnels and exchanging cryptographic keys before actual data transfer begins. The management agent pre-configures encrypted communication channels and validates application credentials in advance, so that when data needs to be transferred, the secure pathway is already in place. This eliminates the need for time-consuming security negotiations during data transfer operations.
Solution Approach 2:
Once secure tunnels are established, the system maintains continuous encrypted communication channels that remain active for the duration of the application's operational needs. This allows multiple data transfers to occur over the same secured connection without repeatedly establishing new encrypted channels, thereby maintaining data integrity while minimizing the time overhead associated with repeated encryption handshakes.
3Reliability
If a management agent mediates all application communication, then policy compliance is improved, but ease of operation and implementation difficulty increase
Solution Approach 1:
The management agent implements self-service capabilities by automatically discovering applications on the device, dynamically generating cryptographic key pairs, and autonomously establishing secure tunnels without requiring manual configuration. The agent can independently negotiate security parameters with the management server and automatically enforce policies, reducing the operational burden on users and administrators while ensuring consistent policy compliance across all managed applications.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A secure mobile application connection bus is disclosed. First encryption information and an identifier associated with a data storage location on a mobile device are provided from a first application to a second application. Second encryption information associated with the second mobile application is retrieved from the data storage location. The second mobile application is configured to provide data to the data storage location. Data is transferred securely between the first mobile application and the second mobile application via the data storage location.