Generalized Data Security Detection via Client-Side Encryption Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current anti-plug-in strategies for online games are complex, game-specific, and resource-intensive, failing to provide a generalized solution for detecting unauthorized data modifications, which undermines fair play and data security.

Innovation Solution

A method and apparatus for detecting data security by acquiring and updating data for detection, encrypting it, and comparing it with stored values to determine unauthorized modifications, allowing for a generalized solution that can be applied across different applications without requiring specific game logic.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If current anti-plug-in strategies are developed for each individual game with complicated logic, then data security detection can be performed, but device complexity increases and adaptability decreases

Engineering Contradiction:
Improvedata security detectionVSAvoiddetection logic complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies universality by creating a single, generalized anti-plug-in detection system that can be applied across multiple different games and applications. Instead of developing separate detection logic for each game, the system uses universal principles (memory address monitoring, data encryption verification, checksum validation) that work across different contexts, thereby reducing complexity while maintaining security detection capability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If current anti-plug-in strategies are developed for each individual game, then specific security detection can be performed, but adaptability to different games decreases

Engineering Contradiction:
Improvesecurity detection accuracyVSAvoidgeneralization to different games
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system achieves universality by abstracting common security detection patterns into a unified framework. It monitors memory addresses, verifies data integrity through encryption and checksums, and detects unauthorized modifications using principles that are applicable across different games and applications, eliminating the need for game-specific detection logic.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If server operates and verifies data to prevent cheating, then data security is maintained, but server resource consumption increases

Engineering Contradiction:
Improvedata securityVSAvoidserver resource usage
Core Design Contradiction:
ReliabilityVSUse of energy by stationary object

Solution Approach 1:

The patent applies preliminary action by performing security verification locally on the client device before data is transmitted to the server. The client device independently verifies data integrity using encryption keys and checksums, and only transmits verified data to the server. This shifts the computational burden from server to client, significantly reducing server resource consumption while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements self-service by enabling the client device to autonomously perform security verification operations. The client device has its own encryption keys and verification algorithms, allowing it to independently validate data without requiring continuous server intervention. This distributes the security verification workload and reduces server resource requirements.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS9633227B2Method, apparatus, and system of detecting unauthorized data modification
Publication Date: 2017.04.25 TENCENT TECHNOLOGY (SHENZHEN) CO LTD
  • US9633227B2 patent drawing
  • US9633227B2 patent drawing
  • US9633227B2 patent drawing

AI summary

Methods, apparatus and system of detecting data security are provided herein. Data for detection are acquired. Whether the data for detection are to be updated for a first time is determined. When the data for detection are to be updated for the first time, the data for detection can be updated, encrypted, and stored as first encrypted data. When the data for detection are not to be updated for the first time, the data for detection can be acquired and encrypted to provide second encrypted data. The second encrypted data are compared with the stored first encrypted data to determine whether the second encrypted data having been unauthorizedly modified. The present disclosure is simple to be implemented without relying on specific logical of a certain application. Development costs, maintenance costs and occupancy of server resources can be reduced. System performance and user experience can be improved.