Terminal SIM Card Binding Authentication for Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current UE-card binding schemes do not effectively protect user data, as they only lock the terminal and SIM card, failing to prevent data leakage when the terminal is lost or the SIM card is removed.
Innovation Solution
A method and device where a terminal sends authentication requests to a server to verify the SIM card's binding status, refusing access and uploading identification information if the SIM card is not bound, and allowing access and unbinding only when verification is successful, ensuring data safety by making data unreadable if the SIM card is not registered.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If UE-card binding scheme is implemented to lock terminal and SIM card, then terminal can only use corresponding card, but data safety is not protected and data leakage cannot be prevented
Solution Approach 1:
A server is introduced as an intermediary component to manage the binding relationship between terminal and SIM card. The server stores binding information and provides authentication services, separating the complex binding logic from the terminal itself. This allows the terminal to maintain simple local functionality while achieving secure data protection through server-mediated authentication.
Solution Approach 2:
The binding relationship between terminal and SIM card is established in advance on the server before data access is required. The terminal sends authentication requests to the server beforehand, and the server pre-verifies the binding status. This preliminary authentication setup ensures data safety without requiring complex real-time verification mechanisms during data access operations.
2Reliability
If terminal and SIM card are bound locally without server verification, then binding function is achieved, but data cannot be automatically destroyed when terminal is lost or card is removed
Solution Approach 1:
The terminal continuously monitors its state and sends authentication requests to the server to verify the binding relationship. When the terminal detects loss or SIM card removal, it sends feedback information to the server, which then triggers automatic data destruction in the terminal. This feedback mechanism enables automatic data protection without requiring manual user intervention.
Solution Approach 2:
The system automatically performs data destruction when terminal loss or SIM card removal is detected, without requiring user action. The terminal self-monitors its state, communicates with the server, and executes data destruction automatically based on the binding verification result, making the data protection process self-service oriented.
3Reliability
If authentication verification is performed for each data access, then data safety is improved, but access efficiency is reduced
Solution Approach 1:
The binding verification between terminal and SIM card is performed in advance on the server before data access operations. The server stores the binding results and provides authentication information to the terminal beforehand. This preliminary verification eliminates the need for repeated authentication during data access, improving both security and efficiency.
Solution Approach 2:
The server creates and stores a copy of the binding relationship information, allowing the terminal to access this pre-verified authentication data without re-performing the full verification process. The terminal uses the copied binding information from the server to quickly determine authentication status during data access operations.
Data Source
AI summary
Disclosed are a data access method and device. The method comprises: a terminal sending an authentication request to a server, the authentication request being used for requesting the server to verify whether a SIM card in the current terminal is a SIM car bound in the server by the terminal; if the terminal receives an authentication failure message, which is returned by the server, the terminal not permitting a user to access the data in the terminal, the authentication failure message being used for indicating that the SIM card in the current terminal is not the SIM card bound in the server by the terminal. The present invention can solve the technical problem in the prior art that the purpose of increasing data security is not achieved because the terminal and the SIM card are only in a binding state, and achieve the technical effect of increasing data security in the terminal.