SIM Identity Policy Enforcement for Unmanaged Mobile Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices, particularly unmanaged ones, pose a significant threat to corporate data security due to inadequate security measures, and existing zero trust solutions are difficult to install and manage, especially for SIM devices that lack robust identity-based policy enforcement.
Innovation Solution
Implementing a distributed cloud computing network that enforces identity-based policies through a SIM (Subscriber Identification Module) by associating it with unique identities, allowing for DNS, network, and HTTP traffic management, and application access control, using a secure web gateway, application access enforcer, and browser isolation to manage traffic and secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software-based zero trust solutions are implemented for mobile devices, then security is improved, but installation and management complexity increases significantly
Solution Approach 1:
The patent introduces a cloud-based policy enforcement point that acts as an intermediary between mobile devices and corporate resources. This intermediary handles security policy enforcement centrally, eliminating the need for complex software installation and management on individual mobile devices while maintaining strong security controls.
Solution Approach 2:
The patent replaces software-based security mechanisms on mobile devices with network-based policy enforcement. Instead of installing and managing security software on each device, the system uses network traffic inspection and SIM identifier-based authentication to enforce security policies centrally in the cloud.
2Reliability
If comprehensive security policies are enforced on unmanaged mobile devices, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent enables unmanaged mobile devices to automatically authenticate and receive security policy enforcement without user intervention. The SIM identifier is used for automatic authentication, and security policies are applied transparently in the background, maintaining ease of operation while improving security.
3Reliability
If identity-based policy enforcement is implemented at the network level, then security is improved, but device complexity increases
Solution Approach 1:
The patent uses the SIM identifier, which already exists for mobile network authentication, as a universal identity for policy enforcement across multiple functions including DNS filtering, application access control, and network traffic management. This multi-functional approach improves security without adding complexity to the device.
Data Source
AI summary
Traffic is received at a distributed cloud computing network. The traffic originates from a computing device using a mobile data connection. The traffic is associated with an identifier that identifies a SIM of the computing device. Using the SIM identifier, an identity for identity-based policy enforcement at the distributed cloud computing network is determined. The identity is uniquely associated with the SIM identifier. An identity-based policy that is applicable for the received traffic for the determined identity is determined. The identity-based policy is enforced.