Motion Sensor Data Analysis for Mobile Device Emulation Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods for accessing protected resources on smartphones are vulnerable to unauthorized access by malicious individuals using emulated smartphone devices, which mimic real devices without physical possession.
Innovation Solution
The method involves collecting and analyzing motion sensor data from user apparatuses to differentiate between genuine and emulated mobile devices, using processing circuitry to identify and perform remedial actions such as denying access or adding the device to a blacklist if it is determined to be emulated.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional authentication methods (username and password) are used, then ease of operation is improved, but security against emulator-based attacks deteriorates
Solution Approach 1:
The patent introduces motion sensor data as an intermediary verification layer between the authentication credentials and the protected resource. The system collects motion sensor data from the mobile device and analyzes it to determine whether the device is physical or emulated, using this intermediate check to block emulator-based attacks while allowing legitimate users to proceed with authentication.
Solution Approach 2:
The patent replaces the purely information-based authentication mechanism (username and password verification) with a hybrid approach that incorporates physical motion sensor data. Instead of relying solely on digital credentials, the system substitutes in physical movement characteristics captured by accelerometers, gyroscopes, and other motion sensors to distinguish real devices from emulators.
2Reliability
If motion sensor data collection is added to the authentication process, then security against emulator attacks is improved, but device complexity increases
Solution Approach 1:
The patent leverages the existing multi-functionality of mobile devices by utilizing their built-in motion sensors (accelerometers, gyroscopes, gravity sensors) for authentication purposes. These sensors originally serve other functions such as screen orientation and step counting, but the patent repurposes them for emulator detection, avoiding the need for additional specialized hardware.
Solution Approach 2:
The system uses the mobile device's own inherent motion sensor capabilities to perform self-verification. The device collects and provides its own motion sensor data without requiring external verification equipment, enabling the authentication system to leverage the device's intrinsic physical characteristics for security verification.
3Measurement precision
If motion sensor data analysis is performed, then detection precision for emulated devices is improved, but use of energy increases
Solution Approach 1:
The patent implements a tiered approach where motion sensor data collection is performed selectively rather than continuously. The system collects motion sensor data specifically during authentication attempts or when emulator detection is suspected, rather than continuously monitoring, thereby reducing energy consumption while maintaining detection precision when needed.
Data Source
AI summary
A technique detects mobile device emulation. The technique involves identifying, by processing circuitry, a user apparatus for mobile device emulation detection. The technique further involves collecting, by the processing circuitry, motion sensor data from the identified user apparatus (e.g., samples of accelerometer attributes, gyroscopic attributes, gravity attributes, etc. over multiple time periods). The technique further involves performing, by the processing circuitry, a motion sensor data analysis operation based on the collected motion sensor data. A result of the motion sensor data analysis operation indicates whether the identified user apparatus is a physical mobile device or an emulated mobile device.