Compromised Account Detection via User ID Modification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of compromised accounts due to cybercrimes poses a significant threat, as traditional security measures fail to effectively detect and protect against the reuse of stolen user credentials across multiple platforms, leading to identity theft and malicious activities.
Innovation Solution
A system and method that involves modifying user IDs and passwords to anonymize them, allowing for secure querying of a database of compromised accounts, determining if an account is compromised by matching patterns, and providing notifications to users, while ensuring the security and privacy of sensitive data through encryption and the use of a hardware security module.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user credentials are stored and checked in plain text format, then account compromise detection is straightforward, but user privacy and security are compromised
Solution Approach 1:
The patent transforms user credentials from plain text to hashed format using cryptographic hash functions. This parameter change allows the system to maintain detection capability while protecting privacy, as hashes can be compared for equality without revealing the original credentials
Solution Approach 2:
The patent introduces salt values as intermediary elements in the credential storage and verification process. Salts are random values added to credentials before hashing, acting as a mediator that enhances security without compromising the ability to detect compromised accounts
2Reliability
If a comprehensive database of all compromised accounts is maintained, then detection coverage is maximized, but system complexity and resource requirements increase
Solution Approach 1:
The patent segments the credential verification process into distinct components: credential hashing, salt generation and management, database storage of hashed values, and verification comparison. This segmentation reduces system complexity by making each component independent and manageable
Solution Approach 2:
The patent performs preliminary hashing of credentials during account creation or credential updates, storing only the hashed values in the database. This preliminary action eliminates the need to store and manage large volumes of plain text credentials, reducing database complexity and resource requirements
3Speed
If credential checking is performed at every login attempt, then security response time is improved, but processing speed and user experience deteriorate
Solution Approach 1:
The patent implements partial credential checking by comparing only the hashed portion of credentials against the database without performing additional verification steps. This partial action provides sufficient security detection while minimizing processing overhead and maintaining login speed
Data Source
AI summary
Processes and systems described herein enable a computing device to detect compromised accounts. The computing device may obtain a user credential including a user ID, and further modify the user ID. The computing device may transmit the modified user ID to a service including a database related to compromised accounts, receive a record corresponding to the modified user ID that includes information of a compromised account, and further determine whether an account of the user ID is compromised based on the received record. Some implementations relate to the on-site provision of risk information associated with compromised accounts.