Communication Device Authentication via Dynamic Parameter Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device fingerprinting technologies for mobile communication devices are vulnerable to security breaches as hackers can reverse-engineer executable code, allowing them to imitate devices and access remote servers storing card credentials.
Innovation Solution
A method and system that authenticate communication devices by receiving a fingerprint and a variable parameter from the device, determining if the parameter is within a predicted range, and sending an additional authentication request via a secondary channel if it's not, using a communication number obtained during registration, to ensure secure transactions without user input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If device fingerprinting technology is used to identify mobile communication devices, then device identification capability is improved, but security is worsened because hackers can reverse engineer the executable code and imitate devices
Solution Approach 1:
The patent introduces an intermediary verification mechanism where a remote server acts as a mediator between the device and the authentication system. The server receives fingerprint data from the device, verifies it against stored templates, and provides authentication without exposing the verification logic to the device. This intermediary layer prevents hackers from reverse-engineering the authentication mechanism while maintaining accurate device identification.
Solution Approach 2:
The patent creates a server-side copy of the device fingerprint template during registration and stores it securely. Instead of requiring the device to perform complex verification calculations that could be reverse-engineered, the server uses its stored copy to verify incoming fingerprint data. This copying approach allows accurate identification while protecting the verification logic from exposure.
2Reliability
If additional authentication requests are sent via secondary communication channels, then security is improved, but device complexity and user experience are worsened
Solution Approach 1:
The patent performs preliminary actions by establishing multiple communication channels during the initial registration phase. The device's communication number is obtained and stored in advance, and the server prepares verification codes ready for transmission. When authentication is needed, these pre-established channels are used immediately without requiring additional setup, thereby enhancing security while minimizing perceived complexity for the user.
Solution Approach 2:
The system implements self-service authentication where the device automatically receives and processes verification codes through pre-configured communication channels. The authentication header includes instructions that enable the device to handle the verification process autonomously without requiring user intervention, thus improving security while maintaining simplicity.
3Measurement precision
If executable code is installed on the device for fingerprint generation, then device identification is improved, but security is worsened as the code becomes vulnerable to reverse engineering
Solution Approach 1:
The patent extracts the critical verification logic from the device and relocates it to the remote server. The device retains only the fingerprint generation function, while the complex verification algorithms and authentication decisions are performed server-side. This extraction removes the vulnerable elements from the device, reducing reverse-engineering risks while maintaining accurate fingerprint-based identification.
Solution Approach 2:
The remote server acts as an intermediary that receives raw fingerprint data from the device and performs all verification operations. This intermediary approach allows the device to maintain simple fingerprint generation capabilities without exposing verification logic, thereby preserving identification accuracy while eliminating reverse-engineering vulnerabilities associated with embedded verification code.
Data Source
AI summary
A method and system are provided for authenticating a communication device. The method conducted at a remote server includes the steps of: receiving, from a communication device via a first communication channel, a fingerprint identifying the communication device and a value of a parameter of the communication device specific to the communication device and variable over time; determining whether the value is within a predicted range; and if the value is not within the predicted range or the predicted range has not been established, sending an additional authentication request via a second communication channel. The predicted range is learnt over a given number of interactions between the communication device and the remote server and an expected rate of change of the value.