Volatile Memory Encryption for Mobile Device Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for protecting mobile devices against unauthorized access primarily focus on securing data in long-term storage but fail to adequately protect data in volatile memory, such as RAM, which remains vulnerable even when the device is locked.
Innovation Solution
A computer-implemented method and system that encrypts user data in volatile memory when the device is locked and decrypts it when unlocked, using a combination of local and remote key management, including a high-entropy secret for fallback access, ensuring data protection without compromising usability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data in volatile memory is kept in clear text form for processing, then processing speed and usability are improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent implements dynamic encryption where data in volatile memory is encrypted when the device is locked and decrypted when unlocked. The encryption state changes dynamically based on device status, allowing data to be protected during storage while accessible during active use. This resolves the contradiction by making the security state adaptive rather than static.
Solution Approach 2:
The system performs preliminary encryption of data in volatile memory before the device is locked, ensuring data is protected in advance. When the device unlocks, decryption is automatically performed beforehand to enable immediate processing. This preliminary action ensures both security during idle states and usability during active states.
2Reliability
If encryption is implemented on volatile memory data, then security is improved, but processing performance may deteriorate
Solution Approach 1:
Encryption and decryption operations are performed periodically at specific transitions (lock/unlock events) rather than continuously during processing. This periodic action minimizes the impact on processing performance by concentrating cryptographic operations at state transition points while maintaining fast access during active usage periods.
Solution Approach 2:
Once decrypted, data remains in accessible form continuously during the unlocked state, enabling uninterrupted processing. The encryption/decryption cycle maintains continuity of useful action by ensuring data is available in clear text form throughout the entire unlocked period, eliminating repeated encryption/decryption overhead during normal operation.
3Speed
If decryption key is stored locally in the device, then access speed is improved, but security against loss or theft deteriorates
Solution Approach 1:
The decryption key is segmented into multiple parts: a local component stored in the device and a remote component stored on external servers. Both components are required to fully decrypt data, so even if the device is lost or stolen, the segmented key material alone is insufficient for decryption. This segmentation resolves the contradiction by distributing security risk while maintaining access capability.
Solution Approach 2:
External servers act as an intermediary for storing and managing portions of the decryption key. The servers mediate between the user's device and the encrypted data, providing secure key management without requiring full key storage in the device. This intermediary approach enables both fast local access (using cached key material) and enhanced security (requiring server verification).
Data Source
AI summary
A computer-implemented method for protecting a mobile device against unauthorized access may be provided. The method comprises encrypting the user data stored in a volatile memory of the mobile device if the mobile device is switched to a locked status, and decrypting the user data stored in the volatile memory if the mobile device is switched from the locked status into an unlocked status.