Mobile Terminal Notification Segmentation for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment applications lack robust security measures to prevent unauthorized access and data breaches when users lose their devices, as malicious users can exploit password retrieval functions via SMS or email to gain control and alter payment information.
Innovation Solution
Implementing a security policy on mobile terminals that requires users to enter a password to access notification messages related to sensitive applications, ensuring only prompt information is displayed initially, and allowing content access only after correct password entry, thereby enhancing security and user control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password retrieval function is provided via SMS or email, then user convenience is improved, but security is worsened because malicious users can exploit this function to gain unauthorized access
Solution Approach 1:
The notification message is segmented into two parts: prompt information (visible without password) and content information (visible only after password authentication). This segmentation allows the system to provide user convenience while maintaining security, as the malicious user can only see the prompt information without the actual content.
Solution Approach 2:
The system performs preliminary authentication by requiring password input before displaying the full notification content. This preliminary action prevents unauthorized access to sensitive information while still allowing legitimate users to retrieve passwords conveniently.
2Ease of operation
If full notification message content is displayed, then user experience is improved, but security is worsened because sensitive information becomes accessible to unauthorized users
Solution Approach 1:
The notification message content is divided into prompt information (displayed to all users) and sensitive content (displayed only after authentication). This resolves the contradiction by providing good user experience for legitimate users while preventing unauthorized access through the segmentation mechanism.
Solution Approach 2:
Password authentication acts as an intermediary mechanism between the user and the notification content. It mediates access control, allowing legitimate users to view full content while blocking malicious users, thus resolving the contradiction between user experience and security.
3Reliability
If password authentication is required for notification messages, then security is improved, but device complexity is worsened
Solution Approach 1:
The system uses simple segmentation of message display (prompt vs. content) rather than complex authentication systems. This approach improves security while minimizing the increase in device complexity, as the implementation relies on basic conditional logic rather than complex security infrastructure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention provides a method and a terminal for enhancing information security. The method includes: receiving, by a terminal, an open instruction of a sensitive application; starting a security policy of the sensitive application; when a notification message related to the sensitive application is received, displaying prompt information that the notification message arrives; and when an instruction for opening the notification message is received, displaying a prompt for entering a password. According to the method for enhancing information security provided in the present invention, a preset security policy is automatically started when the sensitive application is used. When the notification information related to the sensitive application is received, a corresponding password needs to be entered. This enhances information security, facilitates use by a user, and improves user experience.