Trusted SMS App Segments Verification Code Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the Rich environment, the existing SMS permission system has a low security level, allowing malicious applications to obtain SMS verification codes, leading to security risks, as they can be disguised as legitimate applications and intercept SMS messages.
Innovation Solution
A trusted SMS application receives verification code requests from client service applications, extracts and sends SMS verification codes to the client service applications, even when the SMS permission is disabled, using a higher security TEE environment to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If SMS permission is enabled to allow applications to read SMS messages, then applications can obtain verification codes, but malicious applications can intercept and steal verification codes
Solution Approach 1:
The patent segments the SMS reading capability from general applications and assigns it to a dedicated trusted SMS application. This segmentation isolates the sensitive function (reading verification codes) from potentially malicious applications, allowing only the trusted app to access SMS messages while other applications must request verification codes through the trusted app's interface.
Solution Approach 2:
The trusted SMS application acts as an intermediary between the SMS message system and other applications. Instead of allowing direct access to SMS messages, the trusted app receives verification codes and forwards them to requesting applications through controlled interfaces, preventing direct interception while maintaining functionality.
2Reliability
If SMS permission is disabled to prevent malicious applications from intercepting verification codes, then security is improved, but legitimate applications cannot obtain verification codes
Solution Approach 1:
The trusted SMS application serves multiple functions: it reads SMS messages, identifies verification codes, manages permissions, and distributes verification codes to legitimate applications. This multi-functional design allows the system to maintain security while supporting multiple applications' needs through a single trusted intermediary.
Solution Approach 2:
The system implements feedback mechanisms where the trusted SMS application monitors which applications request verification codes and validates these requests before distributing codes. This feedback loop ensures that only legitimate applications can obtain verification codes while maintaining security control.
3Device complexity
If applications directly read SMS messages to obtain verification codes, then the process is simple, but the security architecture becomes vulnerable to attacks
Solution Approach 1:
The patent implements preliminary anti-action by establishing a trusted SMS application with special permissions before any verification code operations occur. This pre-established trusted entity proactively prevents malicious applications from intercepting verification codes by controlling the SMS reading capability from the outset, rather than reacting to attacks after they occur.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present invention disclose an information sending method and apparatus, a terminal device, and a system. The information sending method includes: receiving, by a first application, request information sent by a second application, where the request information carries association information of the second application, the first application is running in a first operating system, the second application is running in a second operating system, the first operating system includes a first network interface, and the second operating system includes a second network interface; receiving, by the first application, a first message from an external network by using the first network interface; and extracting, by the first application, first information from the first message according to the association information of the second application, and sending the first information to the second application, so that the second application sends, by using the second network interface, the first information to an application server corresponding to the second application. By means of the embodiments of the present invention, a second application can obtain first information when an information permission is disabled.