Type 0 SMS Message Authentication for Spoofing Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing message authentication methods for SMS messages are vulnerable to spoofing attacks, as the 'from address' field is not authenticated, making it difficult to recognize and prevent such attacks.
Innovation Solution
The use of type 0 SMS messages, which are silent and do not trigger notifications, for authenticating messages by including authentication information such as signatures and certificates, allowing receivers to verify the sender's identity through a public-key infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional SMS message format is used without authentication, then message communication is simple and direct, but the system is vulnerable to spoofing attacks and sender identity cannot be verified
Solution Approach 1:
The patent introduces type 0 SMS messages as an intermediary authentication mechanism. These silent messages carry authentication information (signatures, certificates) from the sender to the receiver without being displayed to the user. This mediator resolves the contradiction by providing reliable authentication while maintaining the simplicity of standard SMS communication for the end user.
Solution Approach 2:
The authentication process is segmented into separate components: the main SMS message carries the communication content, while separate type 0 SMS messages carry the authentication information (signatures and certificates). This segmentation allows the authentication mechanism to operate independently without complicating the main message format or user interface.
2Reliability
If authentication information is included in visible messages, then sender identity can be verified, but the receiving device experiences disruption and user confusion
Solution Approach 1:
Type 0 SMS messages serve as an intermediary carrier for authentication information. These messages are processed by the messaging application in the background without being displayed to the user, thus providing sender verification while avoiding user confusion or disruption to the normal messaging experience.
Solution Approach 2:
The authentication information is extracted from the visible message content and placed into separate type 0 SMS messages. This extraction allows the authentication data to be processed independently without interfering with the display or user interaction with the main message content.
3Productivity
If the from address field is trusted without authentication, then message processing is fast and simple, but spoofing attacks cannot be detected
Solution Approach 1:
The authentication information is attached to the message in advance via type 0 SMS messages before the main message is processed. The receiving device can quickly verify the sender's identity using pre-provisioned public keys without adding significant processing time to the main message flow, thus maintaining productivity while preventing spoofing.
Solution Approach 2:
The messaging application automatically processes type 0 SMS messages and performs authentication verification without requiring user intervention. This self-service approach maintains fast message processing while providing security against spoofing attacks through automated background verification.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6
AI summary
Systems, methods, and software can be used to share content. In some aspects, a message is received at an electronic device from a sender. A first type 0 short message service (SMS) message is sent, from the electronic device to the sender. The first type 0 SMS message indicates an authentication request for the message. A second type 0 SMS message is received at the electronic device. The second type 0 SMS message indicates that the message is authenticated.