Compromised Device Detection via Adaptive Seed Values
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional methods for securely transferring data and detecting compromised devices are inadequate, as they fail to prevent unauthorized access and can be vulnerable to hacking, especially when using SSL protocols or when devices are compromised, such as jailbroken or rooted mobile devices.
Innovation Solution
A system and method that involves a first computing device determining data for transmission and replacing it with transmittal tokens, which are then sent to a second computing device, allowing the receiving device to reconstruct the original data without it being transmitted in plain form, and includes tests to determine if the first device is compromised, generating different seed values for authentication based on the device's state.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures (e.g., SSL protocol) are used for data transmission, then data can be transmitted securely, but the system remains vulnerable to hacking and compromised devices
Solution Approach 1:
The patent segments data into multiple portions and replaces each portion with a transmittal token from a mapping data structure. This segmentation prevents complete data exposure even if tokens are intercepted, as the mapping data remains on the client device and tokens alone are insufficient to reconstruct the original data.
Solution Approach 2:
The patent introduces transmittal tokens as intermediaries between the original data and the transmission process. These tokens act as a mediator that obscures the actual data during transmission, requiring the mapping data (which remains on the client device) to decode them, thereby adding a layer of security against compromised transmission channels.
2Adaptability or versatility
If devices are allowed to operate without restrictions (e.g., jailbroken or rooted), then additional access and functionality are provided, but security risks increase
Solution Approach 1:
The patent performs preliminary actions by implementing detection tests before data transmission to determine if the device is compromised. Based on these preliminary findings, the system generates different seed values for authentication codes, preventing data transmission from compromised devices before security risks can materialize.
Solution Approach 2:
The patent implements a feedback mechanism where detection tests continuously monitor device state and provide information about compromise status. This feedback loop allows the system to adaptively adjust security measures by generating different authentication codes based on detected device conditions, ensuring ongoing security even as device states change.
3Reliability
If detection tests are performed to identify compromised devices, then security is improved, but device complexity and processing requirements increase
Solution Approach 1:
The patent changes parameters by using different seed values for authentication codes based on device detection results. Instead of complex detection algorithms, the system varies authentication parameters (seed values) according to simple detection outcomes, maintaining security while minimizing added complexity.
Data Source
AI summary
According to one example, a system includes a first computing device that performs one or more tests that indicate whether the first computing device is compromised. In response to a determination that the first computing device passed the one or more tests, the first computing device manipulates an authentication code to generate a first seed value. In response to a determination that the first computing device failed the one or more tests, the first computing device manipulates the authentication code to generate a second seed value. The first computing device also determine data for transmittal to a second computing device, modifies the data using the first seed value or the second seed value, and transmits the modified data for receipt by the second computing device.