Multi-Processor Data Verification for Phishing Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The proliferation of malware, spoofing, and phishing attacks in digital environments poses a significant threat to cybersecurity, as users can be tricked into providing sensitive information to unauthorized entities through manipulated webpages that appear trustworthy.

Innovation Solution

An electronic device with multiple processors is configured to independently verify data by transmitting content requests to a web server and receiving validation data from a remote server, presenting both sets of information concurrently on separate displays to ensure the authenticity of the data source and integrity of transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single processor is used to process web content and display information, then device complexity is reduced, but security reliability deteriorates because the processor can be compromised by malware or spoofing attacks

Engineering Contradiction:
Improvesecurity reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system divides the processing function into two separate processors: a first processor that displays web content and a second processor that independently verifies data integrity. This segmentation allows security verification to be performed independently without compromising the main display functionality, resolving the contradiction between security reliability and device complexity

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The second processor acts as an intermediary verification layer between the web server and the user. It receives the same data from the web server, independently verifies its integrity against known good values, and confirms authenticity before allowing the first processor to display the content. This intermediary approach enhances security without significantly increasing overall system complexity

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If data verification is performed by a separate independent processor, then security against spoofing and phishing is improved, but processing time and system complexity increase

Engineering Contradiction:
Improvesecurity verificationVSAvoidverification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs verification in advance by having the second processor check data integrity before the content is displayed to the user. The second processor receives data from the web server, verifies it against pre-stored good values, and only allows display after confirmation. This preliminary verification prevents malicious content from being displayed while minimizing user-perceived delay

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The verification process operates continuously and concurrently with the main display process. The second processor continuously monitors incoming data from the web server and performs verification in parallel with the first processor displaying content. This continuous verification ensures security without requiring sequential processing that would increase user-perceived time loss

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS11025644B2Data verification via independent processors of a device
Publication Date: 2021.06.01 APPLE INC
  • US11025644B2 patent drawing
  • US11025644B2 patent drawing
  • US11025644B2 patent drawing

AI summary

A content request communication, e.g., generated using a first processor of a device, can be transmitted to a web server. A response communication including content identifying a first value can be received from the web server. The first processor can facilitate presentation of the content on a first display of the device. A communication can be received at a second processor of the device from a remote server. The communication can include data representing a second value and can be generated at the remote server using information received from the web server. Further, the second processor can produce a secure verification output that can be presented on a separate, second display, representing at least the second value. The presentation on first display can at least partially overlap in time with the presentation on the second display.