Geolocation-Based VPN Detection via Device-IP Delta

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for detecting electronic communications from VPNs or proxies are prone to high false positives and false negatives, and are often easily circumvented by fraudsters, due to their reliance on latency analysis, web protocols, open port scanning, and IP lookups.

Innovation Solution

The proposed solution involves analyzing and comparing the geolocation reported by a device with the geolocation associated with its IP address, flagging requests as potentially originating from a VPN or proxy based on a significant delta between these two geolocations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If latency analysis is used to detect VPNs/proxies, then detection capability is improved, but false positives and false negatives increase

Engineering Contradiction:

Improvedetection capabilityVSAvoidfalse positives and false negatives

Core Design Contradiction:

ReliabilityVSMeasurement precision

Solution Approach 1:

The patent introduces an intermediary approach by using geolocation data as a mediator between the client device and the server to detect VPN/proxy usage. Instead of directly measuring latency, the system compares the geolocation reported by the device with the geolocation associated with the IP address, using this intermediary comparison to identify inconsistencies that indicate VPN/proxy usage.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent substitutes the mechanical/physical measurement approach (latency analysis) with an information-based approach (geolocation comparison). By replacing direct network performance measurement with geographic data comparison, the system achieves more accurate detection while reducing false positives and negatives.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If web protocols are used to bypass VPN/proxy, then direct communication is established, but false negatives increase due to blocked protocols

Engineering Contradiction:

Improvedirect communicationVSAvoidfalse negatives

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

Instead of attempting to bypass the VPN/proxy through web protocols (the conventional approach), the patent inverts the approach by detecting the VPN/proxy presence through geolocation inconsistency. This inversion allows the system to identify VPN/proxy usage without attempting to establish direct communication, thereby avoiding false negatives caused by blocked protocols.

Inventive Principle:

Principle #13The other way round (Inversion)

3Reliability

If open port scanning is used to detect VPNs/proxies, then detection coverage is improved, but cost and latency increase

Engineering Contradiction:

Improvedetection coverageVSAvoidscanning latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent extracts the essential detection function from the complex open port scanning process. Instead of performing comprehensive port scanning, the system extracts only the necessary geolocation information from the device and compares it with the IP address geolocation, achieving detection coverage without the time and resource costs of full port scanning.

Inventive Principle:

Principle #2Taking out (Extraction)

4Device complexity

If IP lookup is used to identify VPNs/proxies, then detection is simplified, but false negatives increase due to IP carrier mappings

Engineering Contradiction:

Improvedetection simplicityVSAvoidfalse negatives

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent changes the detection parameter from IP address lookup to geolocation comparison. By transforming the detection approach from examining IP addresses to comparing geographic locations, the system maintains simplicity while improving accuracy, as geolocation data provides more reliable indicators of actual device location regardless of IP carrier mappings.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS20250030665A1Geolocation to identify virtual private networks

Publication Date: 2025.01.23 MASTERCARD TECHNOLOGIES CANADA ULC

AI summary

Systems, methods, and non-transitory computer-readable media for identifying electronic communications from a virtual private network (VPN). An VPN/Proxy communication identifier application receiving a request, enriched with location information of the client device, from a client device. Determining a geolocation of the client device based on the location information. Determining a geolocation of an internet protocol (IP) address associated with the client device. Determining a distance between the geolocations of the client device and the IP address. Flagging the request that is received as associated with a virtual private network or a proxy based on the distance that is determined.