Secure Resource Module for Mobile App Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device systems lack effective protection and management for accessing sensitive resources such as location data and personal information, making them vulnerable to unauthorized access.
Innovation Solution
A computer-implemented method and system that manages application program access to protected resources on a mobile device by using a secure resource module to receive authentication from a remote server and provide permission to access protected resources only after authorization, with features like cryptographically secure tokens and notifications to users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If application programs can access protected resources directly, then ease of operation is improved, but security and protection of sensitive resources deteriorates
Solution Approach 1:
The patent introduces a secure resource module as an intermediary between application programs and protected resources. This module receives authentication tokens from remote servers and mediates access requests, allowing applications to access resources securely without direct exposure to sensitive data. The intermediary layer maintains both ease of operation through token-based access and security through controlled authorization.
2Reliability
If authentication and authorization processes are implemented, then security protection is improved, but device complexity increases
Solution Approach 1:
The patent extracts the complex authentication and authorization logic into a separate secure resource module that operates independently from the main application layers. By taking out these security functions into a dedicated module, the system achieves improved security protection while managing complexity through modular architecture, where the security logic is isolated and can be managed separately from application-specific code.
3Reliability
If remote server authentication is used, then security protection is improved, but loss of time increases
Solution Approach 1:
The patent implements preliminary action by having the secure resource module pre-establish communication protocols and authentication mechanisms with remote servers before actual access is needed. Authentication tokens are obtained and validated in advance, allowing faster subsequent access operations. This preliminary setup reduces the time required for repeated authentication cycles while maintaining high security standards.
Data Source
AI summary
A computer-implemented method for managing application program access to a protected resource residing on a mobile device is provided. The method includes receiving from an application program a request for a permission to access the protected resource, and receiving from a source external to the mobile device an authentication of the application program. An authorization to provide the permission to access the protected resource is received and permission to access the protected resource is provided to the application program in response to receiving the authorization. Data produced by the protected resource is cryptographically signed, and a notification is generated in response to at least one of the application program requesting the permission to access the protected resource and the application program accessing the protected resource. A system for managing application program access to a protected resource residing on a mobile device is further provided.