Anonymized User ID Detection for Compromised Account Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing trend of identity theft and compromised accounts due to reused credentials poses a significant threat, as existing technologies fail to effectively detect and protect user confidentiality and privacy across multiple online platforms.
Innovation Solution
A system and method for detecting compromised accounts by modifying user IDs to anonymize them, allowing for secure querying of a database containing compromised account data, and determining account status without exposing sensitive information, thereby enhancing security and privacy while maintaining usability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If user IDs are transmitted in clear text for database querying, then detection accuracy is improved, but user confidentiality and privacy are compromised
Solution Approach 1:
The patent introduces a modifier as an intermediary component that transforms the user ID before transmission. The modifier receives the original user ID, applies transformation (such as hashing or anonymization), and outputs a modified user ID that preserves detection capability while protecting privacy. This intermediary layer enables the system to achieve both detection accuracy and user confidentiality simultaneously.
Solution Approach 2:
The patent transforms the user ID by changing its parameters through modification functions. The original user ID parameters are transformed into modified parameters that maintain the ability to identify compromised accounts in the database while removing personally identifiable information. This parameter transformation allows the system to query the database effectively without exposing sensitive user data.
2Loss of information
If user credentials are protected through anonymization, then user privacy is improved, but the ability to detect compromised accounts is reduced
Solution Approach 1:
The modifier acts as a trusted intermediary that performs anonymization while preserving detection capability. It transforms user IDs in a controlled manner that maintains the ability to match against compromised account databases while protecting user privacy. The intermediary ensures that the transformation process itself is reliable and consistent.
Solution Approach 2:
The system implements feedback mechanisms where the modification process is validated against detection requirements. The modified user ID is tested to ensure it can still effectively identify compromised accounts, and the system adjusts the modification parameters based on detection performance feedback, maintaining reliability while protecting privacy.
Data Source
AI summary
Processes and systems described herein enable a computing device to detect compromised accounts. The computing device may obtain a user credential including a user ID, and further modify the user ID. The computing device may transmit the modified user ID to a service including a database related to compromised accounts, receive a record corresponding to the modified user ID that includes information of a compromised account, and further determine whether an account of the user ID is compromised based on the received record.