Mobile App Profile Authentication Against SIM Duplication Fraud
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing two-factor authentication systems are vulnerable to attacks where an attacker uses a duplicate SIM card to intercept verification messages, allowing unauthorized access to resources.
Innovation Solution
Implement a system that generates a real-time mobile device application profile based on application usage data, comparing it to a historical profile to detect anomalies, and takes remedial actions such as denying access if an anomaly is detected, thereby enhancing authentication accuracy and conserving resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional two-factor authentication using SIM card is used, then authentication process is simple and fast, but security is compromised due to SIM duplication attacks
Solution Approach 1:
The authentication system is segmented into multiple independent verification layers: traditional SIM-based verification and application profile-based verification. Each layer operates independently, and the system requires both to match for successful authentication. This segmentation allows the system to maintain simplicity while adding security, as each segment remains relatively simple but their combination provides robust protection against SIM duplication attacks.
Solution Approach 2:
The application profile acts as an intermediary verification mechanism between the user and the authentication system. Instead of directly relying on the SIM card alone, the system introduces the application profile as a mediator that must also confirm the device's legitimacy. This intermediary layer prevents direct exploitation of SIM duplication while maintaining the overall authentication flow.
2Measurement precision
If application profile verification is added to detect anomalies, then authentication accuracy is improved, but processing time and computational resources increase
Solution Approach 1:
The system performs preliminary actions by continuously monitoring and updating the application profile in the background before authentication is needed. Usage patterns, installed applications, and device characteristics are pre-analyzed and stored. When authentication is required, the system only needs to compare the current state against the pre-established profile, significantly reducing processing time while maintaining high accuracy.
Solution Approach 2:
The system applies partial verification by focusing on key anomaly indicators rather than analyzing every possible parameter during authentication. It selectively checks the most critical aspects of the application profile (such as major application presence, fundamental usage patterns) rather than performing exhaustive analysis, thereby achieving sufficient authentication accuracy with reduced processing overhead.
3Reliability
If continuous monitoring of application profiles is performed, then detection of compromised devices is improved, but network and computational resources are consumed
Solution Approach 1:
The system implements periodic monitoring of application profiles instead of continuous real-time monitoring. It checks device characteristics and application states at predetermined intervals or triggered by specific events (such as login attempts or significant application changes). This periodic approach maintains effective detection capability while dramatically reducing network traffic and computational resource consumption compared to continuous monitoring.
Solution Approach 2:
The mobile device performs self-service by locally maintaining and updating its own application profile information. The device monitors its own installed applications and usage patterns, storing this data locally. This eliminates the need for constant network communication to report device state, as the device independently manages its profile information and only communicates when changes occur or authentication is required.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Provided are computer-implemented methods for authenticating a mobile device based on a real-time mobile device application profile which may include generating, with a mobile device application on a mobile device, a real-time mobile device application profile associated with the mobile device, receiving the mobile device application profile by the mobile device; and determining whether there is an anomaly between the real-time mobile device application profile and a historical mobile device application profile associated with the mobile device. The methods may also include performing a remedial action associated with a transaction based on determining that there is an anomaly between the real-time mobile device application profile and the historical mobile device application profile. Systems and computer program products are also provided.