Destination Verification for Access Information Theft Prevention

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Attackers often mimic legitimate applications and websites to deceive users into entering sensitive access information, leading to unauthorized access and information theft.

Innovation Solution

Implementing a method that compares user-provided access information with stored information and verifies the destination before transmission, preventing the transmission if the destination is not verified as legitimate.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users enter access information into applications that resemble legitimate ones, then attackers can obtain sensitive user access information, but users experience ease of operation

Engineering Contradiction:

Improveease of operationVSAvoidinformation theft

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary verification of the application's identity and destination before allowing access information transmission. This is achieved by comparing cryptographic signatures or certificates of the application against known legitimate applications, preventing information theft before it can occur

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

An intermediary verification layer is introduced between the user and the application. This intermediary checks whether the application is legitimate by verifying cryptographic signatures or certificates, acting as a mediator that prevents unauthorized access without interfering with legitimate operations

Inventive Principle:

Principle #24Intermediary (Mediator)

2Speed

If access information is transmitted without verification, then transmission speed is maintained, but information security is compromised

Engineering Contradiction:

Improvetransmission speedVSAvoidinformation security

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The system performs preliminary verification of the destination's authenticity before initiating information transmission. By checking cryptographic signatures or certificates in advance, the system ensures security is established before transmission begins, minimizing delays during the actual data transfer

Inventive Principle:

Principle #10Preliminary action

3Reliability

If destination verification is implemented before transmission, then information theft is prevented, but system complexity increases

Engineering Contradiction:

Improveinformation securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

An intermediary verification component is introduced that centralizes the security checking functionality. This intermediary handles cryptographic verification, signature validation, and destination authentication, isolating the complexity from the main transmission system while providing enhanced security

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system uses cryptographic copies or hashes of destination identifiers for verification purposes. Instead of implementing complex real-time analysis of destination systems, the system compares cryptographic representations (signatures, certificates, hashes) that can be verified through standardized algorithms, reducing overall system complexity

Inventive Principle:

Principle #26Copying

Data Source

PatentUS8904487B2Preventing information theft

Publication Date: 2014.12.02 RED HAT INC

AI summary

An embodiment generally relates to a method of preventing information theft. The method includes receiving access information including a password, comparing the access information to stored access information, and verifying a destination of the access information to determine if the destination is valid for the access information. The access information is transmitted based on the comparison to the stored access information and the verification of the destination.