Mobile Keyboard Sensitive-Data Detection for Phishing Alerts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to effectively detect and notify users when sensitive information is typed on wireless communication devices, particularly due to evasion techniques employed by phishing attackers, which can lead to identity theft and financial fraud.
Innovation Solution
Implementing a sensitive information detection system on wireless communication devices that analyzes character strings as they are typed, using pattern recognition and stored information to identify sensitive data, and provides real-time alerts and notifications to users, optionally transmitting alerts to linked accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If real-time detection of sensitive information is implemented, then security against phishing attacks is improved, but device processing overhead and energy consumption increase
Solution Approach 1:
The system performs preliminary detection of sensitive information patterns as users type, before the information is transmitted. By detecting patterns like Social Security numbers, credit card numbers, and addresses in real-time during input, the system prevents phishing attacks proactively without requiring heavy post-transmission analysis
Solution Approach 2:
The patent introduces an intermediary detection layer between the user input and transmission channels. This intermediary system monitors character strings as they are typed and can block or alert about sensitive information before it reaches phishing targets, reducing the need for energy-intensive continuous monitoring of all communications
2Measurement precision
If comprehensive pattern recognition is used to detect all types of sensitive information, then detection accuracy is improved, but false positive alerts increase
Solution Approach 1:
The system applies different detection strategies to different types of sensitive information based on their specific patterns. For example, Social Security numbers follow a specific format (XXX-XX-XXXX), while credit card numbers have different patterns. By tailoring detection rules to each information type's local characteristics, the system improves accuracy while reducing false positives
Solution Approach 2:
The detection system adjusts its sensitivity parameters based on the context and type of information being entered. By changing detection thresholds and pattern matching parameters dynamically, the system can distinguish between legitimate sensitive information and false patterns, reducing unnecessary alerts
3Reliability
If real-time alerts are provided to users, then user awareness of phishing attempts is improved, but communication flow and user experience are disrupted
Solution Approach 1:
The system provides immediate feedback to users when sensitive information is detected, allowing them to correct or confirm the information before transmission. This feedback loop enhances user awareness without completely blocking communication, as users can choose to proceed with informed consent or modify their input
4Reliability
If detection occurs before transmission, then prevention of sensitive information leakage is improved, but transmission time is increased
Solution Approach 1:
The system performs detection during the typing process itself, rather than waiting until transmission is initiated. This preliminary detection occurs naturally as users compose messages, so the actual transmission time is not significantly impacted when legitimate information is being sent
Data Source
AI summary
This disclosure provides methods, components, devices, and systems for identifying and notifying users when sensitive information is typed on a wireless communication device. Some aspects, more specifically, relate to a keyboard extension installed on a wireless communication device that can monitor communications typed on the keyboard and identify if the typed communications contain sensitive information. In some aspects, the keyboard displays an alert when sensitive information is detected in the communications and may also transmit a notice to a linked account that includes information associated with the detection of the sensitive information.