Server-Based Authorization for Mobile Device Reset Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device protection mechanisms are vulnerable to unauthorized factory resets, as they can be bypassed through OS hacks, allowing stolen devices to be reauthorized for unauthorized users.
Innovation Solution
A server-based authorization schema that verifies the status of a mobile device by comparing its identifier to databases, transmitting an authorization token to the device to either allow or prevent a factory reset, thereby ensuring only authorized users can perform a master reset.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a locally-stored or application-based protection algorithm is used to prevent factory reset, then the device can be protected without requiring network connectivity, but the protection mechanism can be bypassed through OS hacks and other nefarious removal mechanisms
Solution Approach 1:
The patent introduces a server as an intermediary between the device and the factory reset operation. The server receives a request from the device, verifies authorization credentials, and returns an authorization token. This mediator approach transfers the trust anchor from local storage to a remote server, preventing local bypass attempts while maintaining protection reliability.
Solution Approach 2:
The patent moves the authorization verification from the local device dimension to a remote server dimension. By implementing the authorization server on a different device (remote server) rather than locally on the mobile device, the system creates a new dimensional layer of security that cannot be accessed or manipulated through local OS hacks.
2Object-affected harmful factors
If an OS-based protection algorithm with a token is used to prevent unauthorized resets, then the device can be authorized to a communications network, but the token can be removed via OS hacks and other nefarious removal mechanisms
Solution Approach 1:
The server acts as a trusted intermediary that holds the ultimate authorization authority. Instead of relying on a local token that can be removed via OS hacks, the system requires server verification. The server mediates the authorization process by validating credentials and issuing tokens that are tied to server-verified identity, making unauthorized token removal ineffective.
Solution Approach 2:
The system implements a feedback loop where the device periodically communicates with the server to verify authorization status. The server can revoke or update authorization tokens based on current security policies, providing continuous feedback to maintain token security even if local copies are compromised.
3Ease of operation
If authorization credentials are stored locally on the device, then the device can be quickly authorized without network connectivity, but the stored credentials can be accessed and used to bypass protection mechanisms
Solution Approach 1:
The server serves as a secure intermediary that stores and manages authorization credentials remotely. The device does not store sensitive credentials locally but instead communicates with the server during the authorization process. This eliminates local credential exposure while maintaining authorization functionality through network-based verification.
Data Source
AI summary
Systems and methods are described herein for authorizing master resets (e.g., factory resets) of mobile devices, such as smart phones, tablets, and so on. In some embodiments, the systems and methods employ a server-based authorization schema or mechanism, where at least one step or operation is performed, or caused to be performed, by a server or other system that is remote from the mobile device being reset.