Login Request Tracking for Fraud Deterrence
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Online ordering platforms for restaurants are susceptible to unauthorized access, leading to fraud as thieves acquire stolen credentials and serially access accounts to redeem loyalty points or gift card values, causing significant problems for consumers, businesses, and franchise restaurants.
Innovation Solution
A system that includes a server hosting an online ordering application with an identification module to track login requests from specific IP addresses and disable accounts if the number of requests exceeds a threshold, combined with a risk scoring module to assess and block unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the number of credential authentication events is increased to inhibit serial account takeovers, then security against fraud is improved, but user convenience deteriorates and customers are inhibited from consistently using the application
Solution Approach 1:
The patent applies different authentication requirements to different users based on their behavior patterns. Authorized users experiencing normal access patterns face no additional authentication barriers, while suspicious accounts exhibiting serial login attempts from multiple IP addresses are subject to enhanced verification or temporary locking. This localized differentiation resolves the contradiction by applying security measures only where needed rather than universally.
Solution Approach 2:
The system dynamically changes the authentication parameter (number of credential requests required) based on detected login patterns. When serial access from multiple IP addresses is detected, the system increases the authentication burden for those specific accounts. This dynamic parameter adjustment allows the system to maintain high security for suspicious accounts while preserving ease of use for legitimate users.
2Ease of operation
If the duration of time without subsequent authentication is extended to minimize credential requests, then user convenience is improved, but security control deteriorates
Solution Approach 1:
The patent implements dynamic session management where the authentication timeout duration is not fixed but adjusts based on detected behavior patterns. Normal authorized users benefit from extended session durations requiring fewer re-authentications, while accounts exhibiting suspicious serial login patterns have their session durations dynamically reduced or reset. This dynamic adjustment resolves the contradiction by adapting security control intensity to the specific user context.
3Reliability
If IP address tracking and login request monitoring are implemented to detect serial unauthorized access, then fraud detection capability is improved, but system complexity increases
Solution Approach 1:
The patent segments the fraud detection function into distinct modular components: IP address tracking module, login request counting module, threshold comparison module, and account locking module. Each component performs a specific sub-function and can be independently implemented and maintained. This segmentation resolves the contradiction by making the complex fraud detection system manageable through functional decomposition while maintaining high detection capability.
Data Source
AI summary
A system and a method for deterring unauthorized access to an account. The method includes the steps of receiving a user login request from one of a plurality of account holder computers, then identifying a username associated with the received user login request, a time associated with the received user login request, and an internet protocol (IP) address associated with the received user login request. The method and system determine a number of prior login requests received from the identified IP address during a duration of time TR prior to the identified time. Each of the received login requests has a unique username that is different than the identified username. The method includes the step of disabling access to the account associated with the identified username when the determined number of received login requests is above a request threshold B.