Verification Information Management Module for Mobile Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile security systems are vulnerable to malicious applications that can read and steal verification information, such as verification codes sent via short messages, due to the openness of operating systems like Android, allowing Trojan horses to access sensitive data without user awareness.
Innovation Solution
Implementing a safe application strategy on terminals to control which applications can read verification information, by setting a whitelist or blacklist of approved applications, and using a monitoring module to judge the legitimacy and permission of applications before allowing access to verification information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the operating system allows applications to freely read short messages for verification purposes, then user convenience is improved, but information security deteriorates due to malicious applications stealing verification codes
Solution Approach 1:
The patent introduces a verification information management module as an intermediary between the operating system and applications. This module intercepts verification information from the message receiver, manages it securely, and selectively provides it to authorized applications. The module acts as a mediator that prevents direct access by malicious applications while maintaining convenient access for legitimate applications, thus resolving the contradiction between user convenience and information security.
2Adaptability or versatility
If all applications are allowed to access verification information, then service functionality is improved, but security risks increase due to Trojan horses and malicious software
Solution Approach 1:
The patent implements local quality control by assigning different access permissions to different applications based on their legitimacy and requirements. The verification information management module maintains a whitelist of authorized applications and selectively grants access to verification information only to those applications. This ensures that legitimate applications can access verification information for their intended purposes while malicious applications are blocked, thus maintaining service functionality while reducing security risks.
3Speed
If verification information is sent via plain text short messages, then delivery speed is improved, but vulnerability to theft increases due to lack of encryption
Solution Approach 1:
The patent applies beforehand cushioning by implementing a verification information management module that proactively intercepts and secures verification information immediately upon receipt from the server. The module stores the information securely in memory and controls its distribution to applications. This pre-emptive security measure cushions against potential theft by malicious applications, while the information remains in plain text for fast processing by authorized applications, thus maintaining delivery speed while reducing vulnerability to theft.
Data Source
AI summary
The present invention discloses a method and apparatus for controlling an application to read verification information. The method comprises: setting, in a terminal, a safe application strategy for reading a verification information, wherein the verification information is a message for verifying identity or permission of the terminal or a user in the process of executing a specific service; after the terminal receives the verification information from a network device, the application requesting to acquire the verification information; judging whether the application satisfies the safe application strategy, and according to the judging result, allowing only the application that satisfies the safe application strategy to read the verification information; and using the verification information for verifying identity or permission of the terminal or a user in the process of executing the specific service. the present invention, effectively preventing an illegal application from stealing the verification information and ensuring information security.


