Terminal Network Locking via Hardware-Bound Asymmetric Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network locking methods for mobile terminals are vulnerable to illegal unlocking due to easily crackable unlocking codes, compromising security.
Innovation Solution
A network locking method that uses unique identification information of the terminal's hardware, combined with a network locking parameter, to generate and store network locking parameter verification information and unlocking codes via asymmetric encryption, ensuring secure binding and storage, and performs integrity checks to verify unlocking codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the unlocking code is directly obtained according to a set network locking parameter, then the unlocking process is simple, but the terminal is easy to be unlocked illegally and security of network locking is lowered
Solution Approach 1:
The patent applies asymmetric encryption (public key cryptography) to generate the unlocking code. The terminal uses a private key to encrypt the network locking parameter, producing a ciphertext that is stored. For unlocking, the terminal uses a public key to decrypt and verify the ciphertext. This asymmetric approach ensures that even if the ciphertext is obtained, it cannot be reversed to obtain the original parameter without the private key, thus preventing illegal unlocking while maintaining a simple user-facing process
Solution Approach 2:
The patent transforms the network locking parameter through cryptographic operations (encryption with private key, hashing) to generate the ciphertext and unlocking code. This parameter transformation changes the form of the data from a directly usable parameter to a secured cryptographic representation, making it computationally infeasible to reverse-engineer the original parameter from the ciphertext
2Device complexity
If network locking parameter is stored without binding to hardware identification, then the storage and unlocking process is simple, but the unlocking code can be easily cracked illegally
Solution Approach 1:
The patent merges the network locking parameter with the terminal's hardware identification information (such as IMEI or device-specific keys) during the cryptographic operation. The unlocking code is generated based on both the network locking parameter and the hardware-specific identifier. This binding ensures that the unlocking code is unique to each terminal and cannot be transferred or cracked for use on other devices, significantly enhancing security without adding complex hardware modifications
Data Source
AI summary
The present invention discloses a terminal, a network locking and network unlocking method for same, and a storage medium, said network locking method comprising: writing network-locking parameters in a first memory unit of the terminal; obtaining, in accordance with terminal hardware unique identification information and the network-locking parameters, network-locking parameter authentication information and an unlock code; storing the obtained network-locking parameter authentication information in a second memory unit of the terminal, and saving the unlock code.