SMS Reading Access Control via Time-Based Prohibition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malicious applications can read SMS verification codes due to their ability to access SMS content at the operating system level, allowing them to execute sensitive operations without proper authorization.
Innovation Solution
Implementing an access prohibition period for SMS content, where the system detects the time difference between the reading request and the SMS receipt time, and only allows access if the time difference exceeds a preset threshold, thereby preventing unauthorized access to sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If third party application is authorized to read SMS at operating system level, then SMS reading functionality is enabled, but malicious application can read verification code and execute sensitive operations
Solution Approach 1:
The system performs preliminary identification of sensitive SMS (containing verification codes, payment information, etc.) and sets access prohibition periods before any reading requests occur. This preventive measure ensures that even if a malicious application obtains reading authority, it cannot access sensitive information during critical time windows.
Solution Approach 2:
The patent implements dynamic access control by setting different reading restrictions based on the content and timing of SMS. Sensitive SMS receive time-based access prohibitions, while non-sensitive SMS remain accessible. The system dynamically adjusts readability status based on the time difference between SMS receipt and reading requests, creating a flexible security mechanism that adapts to different scenarios.
2Reliability
If access prohibition period is implemented for sensitive SMS, then security against malicious applications is improved, but legitimate application access may be restricted
Solution Approach 1:
The system applies different access control policies to different SMS based on their content characteristics. Sensitive SMS (identified by keywords, senders, or templates) receive time-based access prohibitions, while non-sensitive SMS remain fully accessible. This localized approach ensures security measures are applied only where necessary, minimizing impact on legitimate applications.
Solution Approach 2:
The system changes the readability parameter of SMS dynamically based on time. During the access prohibition period (when time difference between receipt and reading request is within threshold), sensitive SMS are unreadable. Outside this period, they become readable again. This parameter change approach allows the system to maintain security during critical windows while restoring functionality when safe.
3Reliability
If time-based access control is implemented, then unauthorized access during critical periods is prevented, but system complexity increases
Solution Approach 1:
The system automatically identifies sensitive SMS using pre-configured criteria (keywords, sender patterns, templates) and self-manages the access prohibition period without requiring external intervention. The time-based readability status is automatically updated based on the difference between SMS receipt time and reading request time, reducing the need for complex manual configuration and management.
Solution Approach 2:
The system performs preliminary identification and classification of SMS as sensitive or non-sensitive before any reading operations occur. Sensitive SMS are pre-marked with access prohibition periods based on their content characteristics. This preliminary action simplifies subsequent access control operations, as the system only needs to check the pre-determined readability status rather than analyzing each reading request in detail.
Data Source
Figure 1~2
Figure 3A
Figure 3B~4A
AI summary
A Short Message Service (SMS) reading method and device are provided. The method includes that: a reading request of reading an SMS is received from a third party application(201); when the SMS is an SMS carrying sensitive information, whether a reading time in the reading request is in an access prohibition period of the SMS is detected(202), and when the reading time is in the access prohibition period, the reading request is not responded (203).