Enabling secure notifications to mobile devices via cloud

ARMONK, USA: IBM inventors have patented a cloud computing security technique that enables app developers to ensure that data notifications are securely and confidentially pushed to and from mobile devices.

Maintaining the privacy and confidentiality of data shared via mobile networks is a priority for developers, service providers and end-users, yet IBM security researchers found that insufficient security protocols in mobile applications can risk exposing details of data notifications pushed across mobile networks, potentially exposing personal or sensitive information to service providers.

This mobile security exposure is problematic and limiting to organizations that wish to use mobile notifications to communicate sensitive information with their customers, such as a credit card company wanting to notify a customer of suspicious charges or a bank may need to alert customers to suspicious account activity.

To address this mobile security challenge, a team of IBMers invented a cloud-based service that enables developers to create applications that can encrypt data notifications, assign them a unique message identifier (ID) in the cloud that is securely transmitted to a mobile device via a third-party service provider. Once the end-user's device authorizes the message, the recipient can pull down and access the encrypted message content from the cloud.