Attestation Token Verification for Fraud-Resistant Device Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in verifying the integrity of content item operations and preventing fraudulent requests in a computer networked environment, particularly in scenarios involving third-party content providers and client devices, leading to potential data integrity issues and performance degradation.
Innovation Solution
A method involving a data processing system that receives a content item communication with a device identifier and attestation token, verifies the digital signature, generates a crypto-hash of the public key, and matches it with the device identifier to authenticate legitimate requests, thereby mitigating fraudulent activities such as data wipe-out and application installation notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional device identifiers are used for content item operations, then system complexity is reduced, but security and fraud prevention capabilities deteriorate
Solution Approach 1:
The system performs preliminary verification of digital signatures and device identifiers before processing content item operations. The verification system checks the authenticity of device identifiers and digital signatures in advance, ensuring that only legitimate requests are processed, thereby preventing fraudulent operations before they can cause harm.
Solution Approach 2:
The patent introduces an intermediary verification system that acts as a mediator between the content item operation requests and the processing system. This intermediary layer validates device identifiers and digital signatures, providing a buffer that enhances security without requiring fundamental changes to the core processing system.
2Reliability
If digital signature verification is performed for each content item operation, then fraud prevention is improved, but processing time and system performance deteriorate
Solution Approach 1:
The system performs preliminary verification of device identifiers and digital signatures before content item operations are executed. By validating the authenticity of requests in advance, the system ensures fraud prevention while maintaining efficient processing of legitimate operations.
Solution Approach 2:
The verification system applies selective validation based on the specific operation type and risk level. Not all content item operations require the same level of verification scrutiny, allowing the system to optimize processing speed by applying appropriate verification depth to each request.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
At least one aspect is directed to improving performance of a data processing system processing content item operations by identifying fraudulent content item operations. The data processing system can receive a content item operation including a content item device identifier and an attestation token from a client device. The attestation token can include a public key associated with the computing device, an attestation token time stamp, a message payload, and an embedded digital signature. The data processing system can verify a digital signature of a combination of the public key, the attestation token time stamp, and the message payload using the public key as a signature verification key. The system may process the content item operation only if the digital signature verification process succeeds.