Device Identifier Updates for Compromised App Infrastructure Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cybersecurity solutions are inadequate in identifying compromised user devices within an application infrastructure, particularly in banking applications, where fraudsters manipulate clients into fraudulent transactions by installing multiple banking applications on their devices.
Innovation Solution
A method and system that generates and updates unique identifiers for user devices within an application infrastructure, using symmetric or asymmetric encryption to track device status, enabling servers to identify and remediate compromised devices by transmitting updated identifiers across the infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing cybersecurity solutions accumulate and analyze transaction data to prevent fraud, then fraud detection capability is improved, but the ability to identify compromised devices in real-time deteriorates
Solution Approach 1:
The system segments the identification process into two independent parts: device identification (performed in real-time when app launches) and fraud detection (performed by analyzing transaction patterns). This allows both functions to operate at their optimal speeds without interfering with each other, resolving the contradiction between real-time capability and comprehensive analysis.
Solution Approach 2:
The patent introduces a unique identifier as an intermediary element that bridges device identification and fraud detection. This identifier is generated in real-time during app launch but can be stored and analyzed later for fraud detection purposes, allowing the system to maintain real-time responsiveness while preserving comprehensive analysis capability.
2Reliability
If banks implement comprehensive monitoring of all transactions, then security coverage is improved, but system complexity and operational burden worsen
Solution Approach 1:
The system extracts the device identification function from the broader fraud detection system. By generating and managing unique identifiers specifically for device recognition, the patent separates this complex real-time identification task from the transaction monitoring process, reducing overall system complexity while maintaining comprehensive security coverage.
3Ease of operation
If multiple banking apps are installed on user devices, then user convenience is improved, but vulnerability to fraudulent actions increases
Solution Approach 1:
The unique identifier system provides universal device recognition across multiple banking applications. Instead of requiring separate security mechanisms for each app, the patent creates a single identifier that all apps in the family can use to recognize and report compromised devices, maintaining user convenience while enhancing security coverage.
Data Source
AI summary
Methods, a server, and an electronic device for identifying compromised user devices in an application infrastructure. One of the methods comprises: in response to receiving, from a given user device, a data container including a unique identifier of the given user device: updating a then current value of the unique identifier in a database, thereby generating an updated value of the unique identifier; and transmitting the updated value of the unique identifier to the given user device; in response to receiving information of the given user device being compromised: generating a then updated value of the unique identifier, indicative of the given user device being compromised; and transmitting a then updated data container with the then updated value of the unique identifier to the given user device, thereby enabling other servers of the application infrastructure to identify the given user device as being compromised.