SIM Module Authentication Security via Encrypted Verification Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current SIM module check programs in mobile equipment can be easily altered, allowing the device to be made operable with unauthorized SIM modules, compromising security and authenticity.
Innovation Solution
Protecting data necessary for SIM module checking with an encryption method key and storing a verification key in the operational unit, ensuring that only authorized SIM modules can be verified, thereby preventing unauthorized operation by encrypting and verifying data using a key and verification key respectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a SIM module check program is implemented in mobile equipment, then the device can be locked to a specific SIM module and prevent unauthorized use, but the check program can be easily altered to compromise security
Solution Approach 1:
The patent applies preliminary action by encrypting the check program data before it is stored in the mobile equipment. The encryption is performed in advance using a key stored in the SIM module, so that when the check program is executed, it is already in a protected state. This prevents unauthorized alteration during storage and transmission, directly addressing the security vulnerability while maintaining a manageable complexity level through automated encryption processes.
Solution Approach 2:
The patent introduces an intermediary encryption mechanism that acts as a mediator between the check program and the mobile equipment's memory system. The check program is encrypted using a key from the SIM module, creating a protected intermediate state. This intermediary layer prevents direct access and unauthorized modification of the check program data, resolving the contradiction between security and complexity by adding a controlled layer of protection rather than fundamental system redesign.
2Reliability
If the check program data is encrypted with a key, then unauthorized alteration becomes difficult, but the system requires additional key management infrastructure
Solution Approach 1:
The patent merges the key management functionality into the SIM module itself, which already exists in the system for authentication purposes. The SIM module's existing key is reused for encrypting the check program data, eliminating the need for a separate key management infrastructure. This combining approach maintains check program integrity while avoiding the complexity overhead of duplicating key management systems.
Solution Approach 2:
The SIM module performs self-service by using its own stored key to encrypt the check program data that it needs for authentication. The system leverages the SIM module's inherent security capabilities rather than requiring external key management infrastructure. This self-service approach ensures check program integrity while minimizing additional system complexity by utilizing existing resources.
Data Source
AI summary
The invention relates to an electronic device, which comprises an operational unit and a user-specific module. Data in the device, necessary for checking the user-specific module, is protected with a key of the encryption method employed by the device manufacturer. A verification key of the encryption method employed by the electronic device manufacturer is stored in the operational unit, by means of which verification key the data necessary for checking the user-specific module is verified.