Device Signature Detection for Spoofed Access Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems struggle to reliably distinguish between human and automated access to computer resources, as unauthorized users can spoof digital fingerprints to impersonate human users, leading to unauthorized access and potential damage.
Innovation Solution
An authorization system that extracts a signature from a digital fingerprint to identify unauthorized users by analyzing a pattern of constant and varying values, using root signature patterns to detect and block such access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If digital fingerprinting is used to identify users, then user identification capability is improved, but reliability of detection deteriorates because unauthorized users can spoof fingerprints
Solution Approach 1:
The patent segments the digital fingerprint into multiple individual characteristics (browser name, version, language, platform, etc.) and analyzes their combination patterns. This segmentation allows the system to detect spoofed fingerprints by examining whether the combination of characteristics is consistent and plausible, rather than treating the fingerprint as a single unanalyzable unit.
Solution Approach 2:
The patent introduces an authentication challenge system as an intermediary between the user and the computer resource. This intermediary presents challenges that require human interaction, creating a mediation layer that can distinguish human users from automated bots even when their digital fingerprints are spoofed, thereby restoring detection reliability.
2Reliability
If authentication challenges are presented to all users, then security against automated access is improved, but ease of operation deteriorates due to additional user burden
Solution Approach 1:
The patent applies authentication challenges selectively rather than uniformly to all users. By analyzing digital fingerprint characteristics and identifying patterns consistent with automated access, the system applies challenges only to suspicious cases, leaving legitimate human users to access resources without additional burden. This local application of security measures maintains ease of operation for genuine users while preserving security against automated access.
Data Source
AI summary
A method of authenticating a user device in providing access to a computer resource, the method includes: extracting a plurality of device fingerprint records from an access log, each of the device fingerprint records associated with an unauthorized access of a computer resource; from each of the plurality of device fingerprint records, extracting a digital signature, each of the digital signatures comprising a plurality of session characteristics; determining, by a processing device from the digital signatures, a root signature pattern, the root signature pattern comprising a combination of values of one or more of the plurality of session characteristics; and identify a subsequent access request for the computer resource as an unauthorized access based on a comparison of a device fingerprint associated with the subsequent access request and the root signature pattern.