I see two solutions to it. First: have the phone include a chip specifically for doing this type of work. Second: make the calculation such that it cannot be performed faster on cheap hardware specialized for the task. I believe that is the peppery of scrypt, and the reason why we do not see LiteCoin ASIC's yet.