Dynamic Value Appended to Cookie Data for Fraud Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Static computer cookies provide inadequate security for authentication, as they can be compromised by malicious parties, leading to fraudulent activities and account misuse, as they do not change or update during subsequent logins.
Innovation Solution
Incorporating a dynamic value into computer cookies that updates during subsequent logins, which is matched with an expected value stored by the service provider to authenticate users and detect potential fraud, requiring step-up authentication if the values do not match.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static computer cookies are used for authentication, then authentication simplicity is maintained, but security against fraud is insufficient
Solution Approach 1:
The cookie is divided into two distinct segments: a static portion (device identifier) and a dynamic portion (changing value). This segmentation allows the static part to maintain device recognition while the dynamic part provides evolving security validation, resolving the contradiction between simplicity and security.
Solution Approach 2:
The cookie transitions from a purely static structure to a dynamic structure where the second portion changes between authentications. This dynamics enables the cookie to adapt to security requirements by incorporating time-varying or usage-varying values, enhancing security while maintaining a relatively simple overall structure.
2Reliability
If a dynamic value is added to the cookie, then fraud detection capability is improved, but authentication processing complexity increases
Solution Approach 1:
The system pre-generates and stores expected dynamic values on the server side before they are needed for validation. This preliminary action allows for efficient real-time comparison during authentication without complex calculations, improving fraud detection while keeping processing relatively simple.
Solution Approach 2:
The system implements a feedback mechanism where the dynamic value in the cookie is compared against the expected value stored on the server. This feedback loop provides automatic fraud detection by validating whether the presented cookie matches the anticipated state, enhancing security without requiring overly complex processing.
3Reliability
If cookie values are updated between logins, then security against stolen cookies is enhanced, but compatibility with existing systems may be reduced
Solution Approach 1:
By segmenting the cookie into static and dynamic portions, the system maintains compatibility with existing systems that can handle the static device identifier portion, while the dynamic portion provides enhanced security against stolen cookies. Existing systems continue to function with the static portion while gaining additional security from the dynamic validation.
Solution Approach 2:
The cookie structure is designed to serve multiple functions: the static portion maintains device recognition and basic authentication compatibility with existing systems, while the dynamic portion provides enhanced security and fraud detection. This multi-functionality allows the system to backward兼容 while incorporating security improvements.
Data Source
AI summary
There are provided systems and methods for a dynamic value appended to cookie data for fraud detection and step-up authentication. A service provider, such as an electronic transaction processor for digital transactions, may utilize computer cookies for authentication and/or login for a user account. In order to further secure cookies from being compromised and used by malicious parties for fraudulent account access, the service provider may add or append a dynamic value that changes at each subsequent login to the computer cookie. The dynamic value may be used so that if a computer cookie is misappropriated, only one device may use the cookie once without the cookie updating and invalidating the cookie with another device or application on the device. Thereafter, when a login is requested, the dynamic value is matched to an expected value by the service provider when determining whether to authenticate the device.