Verification Information Management Module for Mobile Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing mobile security systems are vulnerable to malicious applications that can read and steal verification information, such as verification codes sent via short messages, due to the openness of operating systems like Android, allowing Trojan horses to access sensitive data without user awareness.

Innovation Solution

Implementing a safe application strategy on terminals to control which applications can read verification information, by setting a whitelist or blacklist of approved applications, and using a monitoring module to judge the legitimacy and permission of applications before allowing access to verification information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the operating system allows applications to freely read short messages for verification purposes, then user convenience is improved, but information security deteriorates due to malicious applications stealing verification codes

Engineering Contradiction:
Improveuser convenienceVSAvoidinformation security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a verification information management module as an intermediary between the operating system and applications. This module intercepts verification information from the message receiver, manages it securely, and selectively provides it to authorized applications. The module acts as a mediator that prevents direct access by malicious applications while maintaining convenient access for legitimate applications, thus resolving the contradiction between user convenience and information security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If all applications are allowed to access verification information, then service functionality is improved, but security risks increase due to Trojan horses and malicious software

Engineering Contradiction:
Improveservice functionalityVSAvoidsecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements local quality control by assigning different access permissions to different applications based on their legitimacy and requirements. The verification information management module maintains a whitelist of authorized applications and selectively grants access to verification information only to those applications. This ensures that legitimate applications can access verification information for their intended purposes while malicious applications are blocked, thus maintaining service functionality while reducing security risks.

Inventive Principle:
Principle #3Local quality

3Speed

If verification information is sent via plain text short messages, then delivery speed is improved, but vulnerability to theft increases due to lack of encryption

Engineering Contradiction:
Improvedelivery speedVSAvoidvulnerability to theft
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent applies beforehand cushioning by implementing a verification information management module that proactively intercepts and secures verification information immediately upon receipt from the server. The module stores the information securely in memory and controls its distribution to applications. This pre-emptive security measure cushions against potential theft by malicious applications, while the information remains in plain text for fast processing by authorized applications, thus maintaining delivery speed while reducing vulnerability to theft.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS10136324B2Method and apparatus for reading verification information
Publication Date: 2018.11.20 BEIJING QIHOOD TECHNOLOGY CO LTD
  • US10136324B2 patent drawing
  • US10136324B2 patent drawing
  • US10136324B2 patent drawing

AI summary

The present invention discloses a method and apparatus for controlling an application to read verification information. The method comprises: setting, in a terminal, a safe application strategy for reading a verification information, wherein the verification information is a message for verifying identity or permission of the terminal or a user in the process of executing a specific service; after the terminal receives the verification information from a network device, the application requesting to acquire the verification information; judging whether the application satisfies the safe application strategy, and according to the judging result, allowing only the application that satisfies the safe application strategy to read the verification information; and using the verification information for verifying identity or permission of the terminal or a user in the process of executing the specific service. the present invention, effectively preventing an illegal application from stealing the verification information and ensuring information security.