Identifying Digital Good Recipients via Network Element Tracking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for identifying recipients of digital products online are insecure, as stolen DSL identifiers can be used to mask the true identity of fraudsters, leading to abuse and difficulty in holding perpetrators accountable.
Innovation Solution
The method involves tracking digital goods through hardware elements in the access network, specifically determining the network element and street address associated with a single Internet connection, allowing for the identification of the actual delivery location and detection of fraudulent activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If only IP address and DSL identifier are used for recipient identification, then the identification process is simple, but security is compromised as stolen credentials can mask the true identity of fraudsters
Solution Approach 1:
The patent introduces a network element (DSLAM port) as an intermediary identifier between the recipient and the digital good delivery. This intermediary provides a stable, hardware-based identification point that cannot be easily stolen or spoofed like software credentials, thereby enhancing security while maintaining a relatively simple identification process.
Solution Approach 2:
The patent replaces the software-based identification system (DSL identifier and password) with a hardware-based identification system (DSLAM port). This substitution eliminates the vulnerability to credential theft while keeping the identification process straightforward, as the hardware identifier is automatically assigned and tracked by the access network.
2Productivity
If goods are shipped immediately after purchase contract conclusion, then transaction speed is high, but providers suffer losses when recipients use false information
Solution Approach 1:
The patent performs preliminary identification of the recipient using the network element before the goods are shipped. By determining the DSLAM port in advance and storing this information, the system ensures that even if false information is provided, the true delivery location is already identified and recorded, enabling accountability while allowing immediate shipment.
Solution Approach 2:
The patent establishes a feedback mechanism where the network element identification is continuously tracked and can be used to trace the actual delivery location. This feedback loop ensures that providers can hold recipients accountable for false information while maintaining fast transaction processing, as the traceability is already in place before shipment.
3Ease of operation
If DSL identifiers are used for authentication, then access control is implemented, but stolen identifiers enable fraudsters to log on from different Internet connections
Solution Approach 1:
The patent merges the authentication process with the network element identification. By combining the DSL identifier authentication with the DSLAM port determination, the system ensures that even if credentials are stolen, the fraudster cannot complete the transaction without also having access to the legitimate user's physical network connection, thereby eliminating remote fraud while maintaining easy authentication.
Data Source
AI summary
Method for identifying a recipient (4) of a data packet (10) comprising a digital good in the context of an online transaction, wherein the data packet (10) is transmitted via the Internet (2) from a provider (1) to the recipient (4), the recipient (4) having an Internet connection (3) and being assigned an IP address when dialing into the Internet, comprising the following steps: sending the data packet (10) from the provider (1) to the recipient (4), determining a network element (8) which is assigned to a single subscriber connection (3) via which the data packet (10) was transported, identifying an Internet connection (3) based on the determined network element (8), and in particular also a home address (16) of this Internet connection (3) to which the data packet (10) was delivered.