Virtual Store Authorization for Wireless Device Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless providers face challenges in securely supporting virtual game and application vendors on wireless devices, particularly due to issues like the need for 'Unknown Sources' exceptions and limited support for third-party vendors, which affects user experience and customer retention.

Innovation Solution

A system and method that utilizes a server with a processor to manage public asymmetric keys, authorization files, and encryption to securely support multiple applications on wireless devices, enabling authorized access, convenient installation, and reliable service, thereby improving user experience and supporting multiple game and application vendors.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If wireless providers support multiple virtual game and application vendors, then service offerings and user experience are improved, but security risks and system complexity increase

Engineering Contradiction:
Improvesupport for multiple vendorsVSAvoidsecurity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system segments the application distribution ecosystem by creating distinct virtual stores for different vendors (e.g., Google Play Store, Apple App Store, Amazon Appstore) on the same wireless device. Each virtual store operates as an independent entity with its own authorization mechanisms, allowing multiple vendors to coexist without compromising the security of the overall system. The processor manages these segmented stores through a unified interface while maintaining separate security boundaries.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If wireless providers allow applications from unknown sources, then vendor flexibility is improved, but device security and stability deteriorate

Engineering Contradiction:
Improvevendor flexibilityVSAvoiddevice security
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system introduces virtual store interfaces as intermediary layers between the user and application sources. These intermediaries authenticate and authorize applications before installation, acting as security gatekeepers. The processor works with these intermediary virtual stores to verify application legitimacy, thereby maintaining device security while enabling access to diverse vendor applications without requiring 'Unknown Sources' exceptions.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If a unified interface manages multiple virtual stores, then user convenience is improved, but system complexity increases

Engineering Contradiction:
Improveuser convenienceVSAvoidsystem complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The processor implements a universal interface that performs multiple functions: it manages multiple virtual stores, handles application installation, enforces authorization rules, and provides user interaction. This single unified interface consolidates what would otherwise require separate management systems for each virtual store, reducing overall system complexity while maintaining ease of operation. The interface universally applies authorization logic across all vendors through consistent protocols.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If authorization files are encrypted with asymmetric keys, then security is improved, but processing time and computational overhead increase

Engineering Contradiction:
Improveauthorization securityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-generating and storing authorization files encrypted with asymmetric keys before application installation. The virtual stores prepare these encrypted authorization files in advance, so that during installation, the processor can quickly verify permissions without performing complex real-time cryptographic operations. This preliminary encryption and storage of authorization data reduces processing time during critical installation phases while maintaining strong security.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11076294B2System and method of securely supporting one or more virtual application sources on a wireless device
Publication Date: 2021.07.27 VERIZON PATENT & LICENSING INC
  • US11076294B2 patent drawing
  • US11076294B2 patent drawing
  • US11076294B2 patent drawing

AI summary

A method of securely supporting at least one application for use on a wireless device, including storing a plurality of locations, storing a plurality of public asymmetric keys for encryption of the plurality of locations, providing an interface for a virtual store, providing the location of a plurality of authorization files, displaying a list of applications available for the wireless device, presenting content associated with the list of applications available for the wireless device, receiving a customer selection of an application, creating an authorization file comprising the location of the application, storing the plurality of authorization files, providing an authorization file, authorizing one of the plurality of locations based on decryption of at least one of the plurality of public asymmetric keys, and installing on the wireless device the user selected application.