Software Authentication via Device Identifier Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Manufacturers of computing devices face challenges in preventing users from installing and executing unauthorized software, as users often bypass restrictions intended by the device manufacturer.
Innovation Solution
A system that transmits a unique device identifier over a telecommunications network to determine validity, allowing only authorized software applications to be installed and launched by matching unique identifiers, and prohibiting other software applications unless the first authorized application is removed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device manufacturers implement software authorization mechanisms, then software security and manufacturer control are improved, but device complexity and ease of operation deteriorate
Solution Approach 1:
The system performs preliminary actions by pre-registering device identifiers and application identifiers in a database before actual software installation or execution. When a device requests software, the system checks pre-stored identifier pairs to determine authorization, avoiding complex real-time verification mechanisms.
Solution Approach 2:
The system uses identifier copies (device identifiers and application identifiers) as proxies for actual device and software validation. Instead of verifying device hardware or software integrity directly, the system checks matching identifier pairs stored in the database, simplifying the authorization process.
2Ease of operation
If device manufacturers allow flexible software installation, then ease of operation is improved, but software security and manufacturer control worsen
Solution Approach 1:
The system enables self-service installation for authorized software. When a user requests to install software, the system automatically checks if the device identifier and application identifier pair exists in the database, and if so, permits installation without requiring manual manufacturer approval, thus maintaining both ease of operation and security control.
Solution Approach 2:
The system implements feedback mechanisms where the database stores and validates identifier pairs, providing automatic authorization decisions. The system receives installation requests, checks them against stored data, and provides immediate authorization feedback, enabling flexible yet controlled software installation.
3Reliability
If device manufacturers enforce single application policy, then software security is improved, but adaptability and versatility worsen
Solution Approach 1:
The single application policy is implemented dynamically rather than statically. The system allows a device to have one authorized application at a time, but enables seamless transitions by checking identifier pairs for new applications. When a new authorized application is installed, the system automatically replaces the previous one, providing both security control and adaptability.
Solution Approach 2:
The system performs preliminary checks of device and application identifier pairs before allowing installation. This pre-validation ensures that only pre-authorized applications can be installed, maintaining security control while allowing users to switch between different authorized applications as needed.
Data Source
AI summary
A computer-implemented method only enables a software application to launch on a first device if a unique identifier of the first device is determined to be valid by a second device, and if a unique identifier stored in the software application matches a unique identifier of the software application stored on the first device.