Authentication Module for Mobile Devices Mitigating Phishing Risks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices lack the capability to identify malicious websites, making users susceptible to phishing attacks and other fraudster attacks, as they do not have the same browser blacklist functionalities as laptops.
Innovation Solution
A system and method that monitors device activity to detect requests for authentication information, identifies the requesting entity, and implements security measures such as disallowing input or intercepting credentials if risk indications are detected, using a database of risk flags and threat feeds to assess potential threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mobile devices implement browser blacklist functionality like laptops, then security against phishing attacks is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary authentication module that acts as a mediator between the mobile device and external websites. This module intercepts authentication requests, checks them against a database of known malicious sites, and prevents credential transmission to fraudulent sites without requiring the entire mobile device to become a complex security system. The intermediary handles the blacklist functionality independently, resolving the contradiction by isolating the complexity to a specific component rather than the whole device.
Solution Approach 2:
The system performs preliminary actions by pre-populating a database with known malicious website identifiers before authentication requests occur. The authentication module proactively checks incoming authentication requests against this pre-prepared database, preventing phishing attacks before they can succeed. This preliminary preparation of security data allows the system to provide laptop-like security capabilities without adding complex real-time analysis functionality to the mobile device.
2Reliability
If mobile devices monitor and analyze authentication requests in real-time, then fraud detection capability is improved, but processing time and energy consumption increase
Solution Approach 1:
The system performs preliminary actions by pre-populating a database with known malicious website identifiers before authentication requests occur. The authentication module proactively checks incoming authentication requests against this pre-prepared database, preventing phishing attacks before they can succeed. This preliminary preparation of security data allows the system to provide laptop-like security capabilities without adding complex real-time analysis functionality to the mobile device.
Solution Approach 2:
The patent implements a simplified copy of the laptop browser blacklist functionality within the mobile device authentication module. Rather than implementing full real-time analysis capabilities, the system creates a lightweight copy of the blacklist checking mechanism that operates specifically for authentication requests. This copying approach enables fraud detection without requiring the full processing power and time investment of complete real-time analysis.
3Reliability
If mobile devices implement comprehensive security checks for all authentication requests, then protection against malicious sites is improved, but user convenience deteriorates
Solution Approach 1:
The patent applies local quality by implementing security checks specifically at the authentication request stage rather than throughout all device operations. The authentication module focuses its protective measures only where they are most critical - when users are entering sensitive credentials. This localized approach provides comprehensive protection against malicious sites while maintaining user convenience for other device functions that do not require security intervention.
Solution Approach 2:
The system implements self-service by automatically performing security checks and blocking malicious authentication requests without requiring user intervention. The authentication module autonomously evaluates each authentication request, compares it against the malicious site database, and either permits or blocks the connection without presenting the user with security decisions. This automated self-service approach maintains protection effectiveness while preserving user convenience by eliminating manual security management overhead.
Data Source
AI summary
A computer system determines that authentication information has been requested from a user device by a requesting device. In response to determining that authentication information has been requested by the requesting device, the computer system identifies information corresponding to the requesting device and determines if one or more risk indications correspond to the identified information corresponding to the requesting device. In response to determining that one or more risk indications correspond to the identified information corresponding to the requesting device, the computer system implements one or more security measures.