Secure Shell Device with Temporary Data Download

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Mobile devices often lack sufficient security features, making them vulnerable to misuse by unintended users, which can compromise both user data and service provider security.

Innovation Solution

Deployment of secure shell devices with minimal software and hardware resources, where a server downloads configuration information and user data temporarily to enable communication, using security features like passwords and biometric data, and then deletes the data after use to maintain minimal resource state.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If configuration information and user data are stored on the mobile device, then communication functionality is enabled, but security risk increases due to potential misuse by unintended users

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication functionality
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The server performs preliminary actions by validating user credentials and preparing configuration information before transferring it to the shell device. This ensures that only authorized users receive communication capabilities, resolving the contradiction by pre-establishing security checks before functionality is enabled.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The server acts as an intermediary between the authentication system and the shell device. It mediates the transfer of configuration information and user data, controlling what reaches the device based on validation results. This intermediary role enables communication functionality only when security requirements are met.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If configuration information and user data are downloaded to the shell device, then communication is enabled, but device resource consumption increases

Engineering Contradiction:
Improvecommunication capabilityVSAvoiddata residency
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The shell device dynamically adjusts its resource state by loading configuration information and user data only when communication is required, then deleting them afterward. This dynamic approach enables communication capability on demand while minimizing data residency, resolving the contradiction between adaptability and quantity of substance.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system implements a discard-and-recover pattern where configuration information and user data are downloaded, used for communication, then deleted from the device. The server retains these data and can re-download them when needed again. This approach enables communication capability while minimizing persistent data storage on the device.

Inventive Principle:
Principle #34Discarding and recovering

3Reliability

If the shell device maintains minimal software and hardware resources, then security is improved, but communication functionality is limited

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication functionality
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The server performs preliminary validation of user credentials before transferring configuration information to the minimal shell device. This pre-authentication approach enables the device to maintain minimal resources while still providing secure communication functionality when needed, resolving the contradiction between security and adaptability.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The server acts as an intermediary that provides communication functionality to the minimal shell device without requiring the device itself to have extensive resources. The server handles complex authentication and data management, while the device maintains a minimal secure footprint, resolving the contradiction between security and communication capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS9450935B1Systems and methods for deployment of secure shell devices
Publication Date: 2016.09.20 UNITED SERVICES AUTOMOBILE ASSOCIATION (USAA)
  • US9450935B1 patent drawing
  • US9450935B1 patent drawing
  • US9450935B1 patent drawing

AI summary

A shell device with minimal software and/or hardware resources can download from a server configuration information and/or user data in order to allow the shell device to communicate with other computing devices (whether cell phones, personal digital assistants, laptops, and the like). Various security features can also be used herein, including a shell device password and a server network access password. In another aspect, any time code and/or data is downloaded from the server to the shell device, such code and/or data resides on the shell device during the time of a communication between the server and the shell device; thereafter, it can be deleted, thereby returning the shell device to its minimalistic resource state. When the shell device contacts the server again and attempts to establish another communication, such code and/or data can be downloaded anew, and after the communication it can be deleted again.