Selective Encryption in Mobile Devices via PAC Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices face challenges in securing network traffic due to limited OS privileges, high power consumption, and poor granularity in existing VPN solutions, leading to scalability issues, performance degradation, and privacy concerns.
Innovation Solution
Implementing selective encryption of requests based on characteristics such as URL, app, location, and network, using a Proxy Auto Config (PAC) file to route requests through a VPN only when necessary, thereby encrypting specific traffic without depleting battery life or compromising user privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all traffic is encrypted through VPN, then security is improved, but power consumption increases and battery life decreases
Solution Approach 1:
The patent segments network traffic into different categories (secure and non-secure) and applies encryption selectively only to traffic that requires it, rather than encrypting all traffic. This is achieved through a proxy auto-config (PAC) file that routes specific URLs through VPN while allowing other traffic to proceed unencrypted, thereby reducing overall power consumption while maintaining security for critical communications.
Solution Approach 2:
The patent applies different security qualities to different parts of network traffic based on their specific requirements. Critical traffic such as email, contacts, and calendar data are encrypted through VPN, while non-critical traffic is transmitted without encryption. This localized application of encryption maintains security where needed while conserving battery life for non-sensitive communications.
2Reliability
If all traffic is routed through VPN, then security is improved, but network performance and speed deteriorate
Solution Approach 1:
The patent segments network traffic and routes only specific secure traffic through the VPN proxy, while allowing non-secure traffic to bypass the VPN and use direct network connections. This segmentation maintains security for sensitive communications without degrading the performance of non-sensitive traffic, thereby preserving overall network speed and user experience.
Solution Approach 2:
Different routing qualities are applied to different traffic types: secure traffic receives the protection and routing of VPN, while non-secure traffic receives direct, high-speed routing. This local differentiation ensures that security measures are applied only where necessary, preventing VPN overhead from impacting overall network performance.
3Use of energy by moving object
If selective encryption is implemented, then power consumption is reduced, but device complexity increases
Solution Approach 1:
The patent introduces a proxy auto-config (PAC) file as an intermediary that contains pre-defined routing rules for selective encryption. The PAC file acts as a mediator between the device and VPN service, automatically determining which traffic should be encrypted without requiring complex real-time analysis on the device. This approach reduces power consumption while managing complexity through a standardized, externally-maintained configuration file.
4Duration of action of moving object
If selective encryption is implemented, then battery life is improved, but encryption granularity must be precise to avoid privacy issues
Solution Approach 1:
The PAC file serves as an intermediary that precisely defines which traffic should be encrypted through URL-based rules. This intermediary layer ensures accurate granularity in encryption decisions without requiring complex device-side logic, thereby extending battery life through selective encryption while maintaining precise control over privacy-protected traffic.
Data Source
AI summary
A method, product and system for selective encryption in a mobile device. The method comprising: selectively encrypting requests issued by the mobile device, wherein said selectively encrypting comprises: obtaining a request issued by an application executed by the mobile device, the request having one or more characteristics, the request has a destination; determining, based on the one or more characteristics, whether to encrypt the request; and in response to a determination to encrypt the request, re-routing the request to be transmitted to the destination through a secure channel; whereby the request is encrypted regardless of the destination being a priori associated with the secure channel.