Hardware Signature Malware Detection for Payment Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Consumers face risks of identity compromise due to malware, necessitating an improved system for detecting malware in computer systems, particularly for protecting payment authentication and user identity.

Innovation Solution

A system comprising a processor and memory with a software module that creates a unique hardware signature based on the system's profile, monitors for malware access, and initiates remediation or communication if compromised, ensuring secure transaction authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If malware detection and prevention mechanisms are implemented in the payment authentication system, then security and reliability are improved, but device complexity increases

Engineering Contradiction:
Improvepayment authentication securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary malware detection by monitoring access to the hardware profile and signature creation algorithm before authentication occurs. The malware detection module continuously checks for unauthorized access attempts to critical components (hardware profile, signature algorithm) in advance, preventing compromised transactions from proceeding. This preliminary action ensures security without requiring complex real-time intervention during the authentication process itself.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

A dedicated malware detection module is introduced as an intermediary component between the hardware profile/access control mechanisms and the signature creation algorithm. This intermediary monitors and filters access requests, allowing legitimate operations while blocking malicious ones. The module acts as a security gatekeeper that simplifies the overall architecture by centralizing security functions rather than distributing complexity across multiple components.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the signature creation algorithm is protected and made non-writable, then security against malware is improved, but adaptability and ease of repair deteriorate

Engineering Contradiction:
Improvesignature creation securityVSAvoidalgorithm update capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system segments the authentication functionality into distinct components: the hardware profile (immutable), the signature creation algorithm (protected but separable), and the malware detection module (monitoring layer). This segmentation allows the algorithm to be protected from direct modification while enabling controlled updates through the malware detection module, which can identify and respond to unauthorized changes. The separation maintains security while providing a pathway for legitimate updates.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The malware detection module implements continuous feedback monitoring of the signature creation algorithm's integrity. It detects unauthorized access attempts and modifications, providing feedback that triggers preventive actions (blocking access, alerting users). This feedback mechanism ensures the algorithm remains secure while allowing legitimate maintenance operations to proceed through authorized channels, balancing protection with adaptability.

Inventive Principle:
Principle #23Feedback

3Measurement precision

If malware access monitoring is implemented, then detection precision is improved, but loss of time increases

Engineering Contradiction:
Improvemalware detection accuracyVSAvoidtransaction processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs malware detection monitoring in the background before transactions occur, establishing security checks in advance. The malware detection module continuously monitors access patterns to the hardware profile and signature algorithm, building a security state that can quickly validate or reject transactions without time-consuming analysis during the actual authentication process. This preliminary monitoring ensures detection precision while minimizing transaction delays.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The malware detection system operates autonomously, automatically monitoring access patterns and detecting anomalies without requiring manual intervention or time-consuming analysis. The system self-monitors access to critical components, compares against known malware patterns, and automatically responds to threats. This self-service approach maintains high detection precision while minimizing the time impact on legitimate transactions, as the monitoring occurs continuously in the background rather than as a separate step.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8943598B1Automatic compromise detection for hardware signature for payment authentication
Publication Date: 2015.01.27 BANK OF AMERICA CORP
  • US8943598B1 patent drawing
  • US8943598B1 patent drawing
  • US8943598B1 patent drawing

AI summary

Embodiments of the invention provide a method a authenticating a transaction at the point of transaction. In some embodiments of the invention, a unique signature is created based at least in part on a hardware profile of the system. In some embodiments, a request is received from a user to perform a transaction using the system. In some embodiments, in response to receiving the request the system may determine whether malware has compromised the signature creation algorithm, and if so, prevent the signature creation algorithm from creating a key based on the unique signature. Alternatively, if not, the system may allow the signature creation algorithm to create a key based on the unique signature.