Tokenized Mobile Updates via Local Connected-Device Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices lack the necessary hardware and/or software to communicate directly with application systems for secure installation of applications like firmware updates, necessitating an indirect communication method to ensure application integrity.
Innovation Solution
A mobile device establishes a local connection with a connected device, receives an application and a token, generates a second token using a stored key, and compares it with the first token to authenticate and install the application securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile devices connect indirectly through another device to receive applications, then devices without direct communication capability can be updated, but security risk increases due to potential modification of applications during indirect transmission
Solution Approach 1:
The system generates cryptographic tokens (first token from application system, second token from mobile device) before application transmission. These tokens are used to verify application integrity upon receipt, preventing undetected modifications during indirect transmission through the connected device.
Solution Approach 2:
A connected device serves as an intermediary between the application system and the mobile device. This mediator enables application delivery to devices lacking direct network capability while the token verification system ensures that even through this intermediary, application integrity is maintained.
2Adaptability or versatility
If mobile devices establish local connections with connected devices for update delivery, then direct network dependency is reduced, but communication complexity increases due to additional connection management
Solution Approach 1:
The connected device performs multiple functions: it acts as a communication bridge for application delivery, a verification node for token validation, and a potential authorization interface. This multi-functionality reduces the need for separate dedicated components while enabling indirect update delivery.
3Reliability
If token verification is implemented to ensure application authenticity, then security is improved, but processing time increases due to cryptographic operations
Solution Approach 1:
The system performs partial verification by comparing only the critical token elements (first token from application system and second token generated by mobile device) rather than verifying the entire application payload. This selective verification maintains security while reducing processing time.
Data Source
AI summary
Systems and methods are provided for managing mobile device updates. In some embodiments, the disclosed systems can include a key provisioning system, a key system, and mobile devices. The key provisioning system can provide keys to the mobile devices and the key system. The key system can receive a key from the key provisioning system, receive a request from an application system, calculate a first token, and provide the first token to the application system for transmission to a mobile device. The mobile device can receive a key from the key provisioning system, establish a local connection with a connected device, receive an application and the first token from the connected device, generate a second token using the application and the key, compare the first token and the second token, and update the mobile device according to the application based on a result of the comparison.