Terminal Access Key Management for Secure Bank Intranet Links

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The security risks associated with mobile terminals accessing a bank's intranet through the Internet, as existing security measures primarily focus on data transmission and do not provide comprehensive security protection for the entire access link.

Innovation Solution

A security management system that includes a first server generating a unique encryption key based on terminal device registration time, identification, and fingerprint information, using a second key for encryption, and implementing a symmetric encryption mechanism between the terminal and server to ensure secure access and communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If mobile terminals access the bank's intranet through the Internet, then network accessibility and service availability are improved, but security risks and vulnerability to unauthorized access increase

Engineering Contradiction:
Improvenetwork accessibilityVSAvoidsecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary security actions by generating device fingerprints before access, creating cryptographic keys in advance, and establishing trusted device profiles. The server generates a first key based on registration time, identification information, and fingerprint information before the actual access occurs, preparing security credentials beforehand to enable both accessibility and security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces cryptographic keys and device fingerprints as intermediary elements between the mobile terminal and the bank's intranet. These intermediaries act as mediators that enable secure communication without direct exposure, with the first key serving as a secret intermediary that establishes trusted connections while preventing unauthorized access.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If comprehensive security protection is implemented for the entire access link, then security reliability is improved, but system complexity and implementation difficulty increase

Engineering Contradiction:
Improvesecurity protectionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies local quality by implementing security measures at specific critical points rather than uniformly across the entire system. Device fingerprints are generated locally on the terminal device, the first key is created based on local registration information, and encryption/decryption operations occur at specific interfaces. This localized approach provides comprehensive security while avoiding the complexity of uniform security implementation throughout the entire access link.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system changes parameters by transforming device identification information into cryptographic keys through hash algorithms. The first key is generated by changing parameters based on registration time, identification information, and fingerprint information. This parameter transformation approach provides robust security through cryptographic operations without requiring complex security infrastructure, as the security strength derives from parameter transformation rather than system complexity.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS12489618B2Security management system and security management method
Publication Date: 2025.12.02 BEIJING BOE TECH DEV CO LTD
  • US12489618B2 patent drawing
  • US12489618B2 patent drawing
  • US12489618B2 patent drawing

AI summary

A security management system includes a first server. The first server is configured to: obtain access information of a terminal device; generate, if the access information of the terminal device meets an access condition, a first key based on a registration time of the terminal device, identification information of the terminal device, and fingerprint information of the terminal device; encrypt the first key using a second key, the first key being different from the second key; and send the encrypted first key to the terminal device, so that the terminal device decrypts the encrypted first key using the second key.