Mobile Wallet Access Permission Transfer Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for managing electronic access permissions in mobile devices through wallet applications allow for potential misuse by enabling unauthorized access when permissions are transferred.
Innovation Solution
A method that requires authentication data or password input to transfer access permissions, associating unique device IDs with access permission IDs on a server, ensuring only authorized devices can receive permissions and limiting transfers beyond a predefined threshold.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If electronic access permissions are transmitted to other mobile electronic devices through wallet application links, then user convenience is improved, but the risk of unauthorized access and misuse increases
Solution Approach 1:
The system performs preliminary binding between the access permission and the purchaser's device ID before transfer occurs. When a transfer is initiated, the server verifies this binding relationship and requires authentication before allowing the transfer, thus preventing unauthorized access while enabling legitimate transfers.
Solution Approach 2:
The server continuously monitors and tracks the transfer of access permissions by associating permission IDs with device IDs. After each transfer, the server updates the binding information and can detect abnormal transfer patterns, providing feedback control to prevent misuse while maintaining operational convenience.
2Adaptability or versatility
If access permissions can be freely transferred between devices, then adaptability is improved, but control over permission usage deteriorates
Solution Approach 1:
The server acts as an intermediary between devices during permission transfers. Instead of direct peer-to-peer transfer, all transfer operations go through the server which verifies authentication, updates binding information, and logs the transfer. This maintains adaptability while implementing controlled management.
Solution Approach 2:
The wallet application on each device automatically handles the transfer process by communicating with the server. The authentication and binding updates are performed automatically without requiring manual configuration, making the system adaptable while keeping the control mechanism transparent to users.
Data Source
AI summary
A method for preventing misuse of electronic access permissions, managed in mobile electronic devices using a wallet application and transmitted by a server. A link is purchased from the server, during which a password or authentication data and a mobile electronic device, are specified via the link. When activating the link, an ID of the first mobile electronic device, which is associated with an ID of the purchased access permission, is transmitted to the server. The electronic access permission is only transferable from the first mobile electronic device to another mobile electronic device after the password is first entered with the server. Upon transfer, in the server the access permission ID is associated with the ID of the other mobile electronic device and the access permission stored on the first mobile electronic device is marked as invalid.