Persistent Device Identifier for Accurate Recognition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in accurately recognizing returning devices due to changes in device characteristics, such as OS upgrades or changes in carrier or phone number, and are vulnerable to anonymization and spoofing attacks, leading to high False Accept Rate (FAR) and False Reject Rate (FRR).
Innovation Solution
The system maintains a set of groups of device attribute values, where each attribute value satisfies a uniqueness property. When a new group of device attribute values is received, a search for a matching group is performed. If only one matching group is found, the device is determined to be a likely returning device. If multiple matching groups are found, the device is classified as risky. If no matching group is found, the device is recognized as new and the new group is included in the set, with a unique device identifier generated using a pseudorandom number generator.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device characteristics are collected and transmitted to the server for device recognition, then the system can identify returning devices, but device characteristics often change for legitimate reasons (OS upgrades, carrier changes, phone number changes) causing the system to fail to recognize returning devices
Solution Approach 1:
The patent segments device identification into two independent components: (1) device attributes that may change over time (OS version, carrier, phone number) and (2) a persistent device identifier stored in secure hardware. This segmentation allows the system to maintain reliable device recognition even when device attributes change, as the persistent identifier remains constant across legitimate device modifications.
Solution Approach 2:
The patent implements preliminary action by pre-storing a persistent device identifier in secure hardware during device manufacturing or initial setup. This identifier is registered with the server before any device changes occur, enabling the system to automatically recognize returning devices regardless of subsequent attribute changes, eliminating the need for re-registration.
2Productivity
If traditional device recognition methods are used, then the system can process device identification, but malicious users can anonymize devices causing the server to erroneously determine returning devices as new devices
Solution Approach 1:
The patent applies preliminary anti-action by implementing a persistent device identifier in secure hardware that cannot be easily modified or anonymized by malicious users. This identifier is registered with the server in advance, creating a preemptive defense against anonymization attacks. Even if attackers attempt to change device attributes to anonymize the device, the persistent identifier remains constant, allowing the server to correctly identify returning devices and maintain high reliability.
3Measurement precision
If device characteristics are used for device recognition, then the system can identify devices, but malicious users can spoof devices by replacing characteristics with those of another device
Solution Approach 1:
The patent implements preliminary action by pre-registering a persistent device identifier with the server during device manufacturing or initial setup. This identifier is stored in secure hardware and cannot be easily spoofed. When a device connects, the server verifies this pre-registered identifier rather than relying solely on device characteristics that can be spoofed, thereby maintaining high measurement precision and preventing spoofing attacks.
Solution Approach 2:
The patent introduces a persistent device identifier as an intermediary between the device and the server's recognition system. This intermediary serves as a trusted mediator that cannot be easily spoofed, unlike device characteristics. The server uses this intermediary identifier to verify device identity, thereby maintaining high identification precision while resisting spoofing attacks.
4Reliability
If the system requires exact matching of device characteristics for device recognition, then the system can prevent unauthorized access, but legitimate users must repeat the registration process when device characteristics change
Solution Approach 1:
The patent segments the device identification system into immutable persistent identifiers (for security) and mutable device attributes (for flexibility). The persistent identifier stored in secure hardware provides the security foundation, while allowing device attributes to change without requiring re-registration. This segmentation maintains security accuracy while dramatically improving user convenience, as legitimate users can modify their devices without losing recognition.
Solution Approach 2:
The patent implements preliminary action by pre-registering the persistent device identifier with the server during initial setup. This pre-registration creates a long-term recognition relationship that survives device attribute changes. As a result, legitimate users enjoy enhanced ease of operation since they only need to register once, while the system maintains reliability through the secure persistent identifier verification.
Data Source
AI summary
A system for detecting whether a device seeking communication with a server is a returning device that previously communicated with the server includes a database that stores groups of device attributes based on observable device characteristics and unique identifiers. The database is generally not accessible to the devices. Each attribute group and the associated device identifier (DID) can uniquely identify a particular device, and the associated DID is generally not derivable from the attributes. The database may satisfy a uniqueness property so that each attribute value in the database may also uniquely identify a device.