Internal Footprint Repository for BYOD Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations face challenges in monitoring and maintaining user devices that perform organization-related functions, especially in a bring-your-own-device (BYOD) model, as they struggle to prevent unauthorized access to external user accounts due to the dynamic nature of devices and platforms.
Innovation Solution
A computing platform with a communication interface, processor, and memory receives user device identification information, verifies if the device is internal, and then determines if the actions on external accounts are authorized, using an internal device verification server and external account authorization server to prevent unauthorized access by transmitting relevant information to a case management server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If organizations allow associates to use personal user devices for organization-related functions (BYOD model), then ease of operation and adaptability improve, but device monitoring and security control become more difficult
Solution Approach 1:
The patent introduces an intermediary system comprising a computing platform, device verification server, and account authorization server that mediates between user devices and external accounts. This intermediary layer captures device metadata, verifies device status, and authorizes account actions without requiring direct organization control over diverse user devices, thus maintaining adaptability while simplifying security management.
Solution Approach 2:
The patent segments the security monitoring system into distinct functional components: a computing platform for receiving and processing metadata, a device verification server for determining internal device status, and an account authorization server for authorizing external account actions. This segmentation allows each component to handle specific tasks efficiently, reducing overall system complexity while maintaining comprehensive security control.
2Reliability
If organizations implement comprehensive device monitoring to prevent unauthorized access, then security reliability improves, but system complexity and operational difficulty increase
Solution Approach 1:
The patent implements preliminary action by requiring device verification before external account authorization. The device verification server determines whether a device is an internal organization device before the account authorization server permits any external account actions. This preliminary verification step ensures reliability by blocking unauthorized access at the source while keeping the authorization system relatively simple.
Solution Approach 2:
The patent establishes a feedback loop where the computing platform receives device metadata, the device verification server determines device status, and this verification information feeds back to the account authorization server to control external account access. This feedback mechanism ensures reliable security control by continuously monitoring device status and adjusting authorization accordingly, while maintaining clear system boundaries that reduce complexity.
3Measurement precision
If organizations track and verify each user device accessing external accounts, then measurement precision and security control improve, but the difficulty of detecting and measuring device information increases
Solution Approach 1:
The patent extracts only the essential device metadata needed for verification purposes from user devices, such as device identification information and platform information. The device verification server processes this extracted metadata to determine internal device status without requiring comprehensive access to or analysis of all device information. This extraction approach achieves precise measurement of critical security attributes while reducing the difficulty of device information detection and measurement.
Data Source
AI summary
Aspects of the disclosure relate to a system to monitor devices for unauthorized access of an external account. A computing platform may receive, via a communication interface, and from a first user device, metadata comprising first user device identification information and accessed account information. The computing platform may determine, based on the first user device identification information, whether the first user device is one of a plurality of internal user devices. The computing platform may identify, based on the accessed account information, an action indicating the first user device is accessing an account. The computing platform may determine, based on the action and the accessed account information, whether the action is authorized. The computing platform may receive information indicating unauthorized use of the account by the first user device. The computing platform may transmit the information indicating unauthorized use of the account by the first user device.