Device Memory Snapshot Authentication for Account Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack an effective method to utilize device memory information for identification and authentication, leading to unnecessary additional security measures for trusted devices and potential access issues for untrusted devices.

Innovation Solution

A system that takes snapshots of device memory to identify characteristics, compares them to stored data, and allows access based on similarity levels, bypassing additional security measures for trusted devices and pre-authorizing access for untrusted devices that meet certain criteria.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If traditional authentication methods are used for all devices, then security is maintained, but authentication efficiency deteriorates due to unnecessary additional security steps for trusted devices

Engineering Contradiction:
Improveauthentication efficiencyVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The authentication system segments devices into trusted and untrusted categories based on memory characteristic analysis. Trusted devices that exhibit consistent memory patterns across multiple authentication attempts are identified and granted expedited authentication, while untrusted devices undergo full security verification. This segmentation allows the system to maintain security for untrusted devices while improving authentication efficiency for trusted devices.

Inventive Principle:
Principle #1Segmentation

2Productivity

If memory snapshots are taken and analyzed for device identification, then authentication efficiency improves by eliminating additional security steps, but device complexity increases due to memory analysis requirements

Engineering Contradiction:
Improveauthentication efficiencyVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system creates snapshots (copies) of device memory states during authentication attempts and stores these copies for analysis. By working with memory copies rather than requiring direct access to or modification of the actual device memory, the system achieves device identification without adding significant complexity to the physical device architecture. The memory analysis occurs on the authentication server side.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The authentication server acts as an intermediary that performs memory analysis between the device and the authentication decision-making process. The server captures memory snapshots, analyzes memory characteristics, and uses this analysis to determine device trust status. This intermediary approach isolates the complexity of memory analysis from the device itself, maintaining device simplicity while enabling efficient authentication.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If memory characteristics are compared to determine device trust, then accuracy of device identification improves, but loss of time increases due to memory analysis processing

Engineering Contradiction:
Improvedevice identification accuracyVSAvoidauthentication time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs memory analysis and establishes device trust status in advance through preliminary authentication attempts. Once a device is identified as trusted based on consistent memory characteristics across multiple attempts, this trust status is stored and reused for subsequent authentication events. This preliminary action eliminates the need for repeated memory analysis, reducing authentication time while maintaining identification accuracy.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system performs full memory analysis only when necessary (for untrusted devices or initial authentication attempts), and uses simplified verification for trusted devices. By applying partial action (reduced verification steps) to trusted devices and excessive action (full memory analysis) only when needed, the system balances identification accuracy with authentication speed.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS10924478B2Identification based on snapshot of device memory
Publication Date: 2021.02.16 PAYPAL INC
  • US10924478B2 patent drawing
  • US10924478B2 patent drawing
  • US10924478B2 patent drawing

AI summary

A computer system identifies one or more characteristics corresponding to a memory of a user device based on analyzing information stored in the memory of the user device during one or more instances of a first time period. The computer system detects an untrusted user device attempting to access an account during a second time period. In response to the detecting the untrusted device attempting to access the account, the computer system compares one or more characteristics of the information stored in a memory of the untrusted user device to the identified one or more characteristics. In response to determining that a similarity level between the one or more characteristics of the information stored in the memory of the untrusted device and the identified one or more characteristics is above a threshold level, the computer system allows access to the account.