Proof-of-Presence Communication to Block Phishing Impersonation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems lack the ability to verify the physical presence of a particular entity at another computing system, making them vulnerable to phishing attacks where an imposter pretends to be a trusted entity, thereby compromising sensitive information.
Innovation Solution
A first computing system controls a proof capture component on a second computing system to generate and verify presence proof, ensuring that the particular entity is present before processing communications, and fails communications if presence is not confirmed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional communication systems are used without presence verification, then communication simplicity is maintained, but security against phishing attacks deteriorates
Solution Approach 1:
The system performs presence verification in advance before allowing communication. The verifying computing system checks whether the particular entity is present at the other computing system before processing the communication, preventing phishing attacks by ensuring the entity is physically present and not impersonating someone else.
Solution Approach 2:
A proof capture component acts as an intermediary between the communicating entities. This component automatically generates presence proof that evidences the particular entity's presence at the other computing system, serving as a mediator that verifies identity without requiring complex manual authentication processes.
2Reliability
If presence verification is implemented, then phishing attack resistance is improved, but communication processing time increases
Solution Approach 1:
The proof capture component automatically generates presence proof without requiring manual intervention from the entity. The system self-verifies the entity's presence by monitoring control of the proof capture component, eliminating the need for time-consuming manual authentication while maintaining security.
Solution Approach 2:
The system replaces manual presence verification mechanisms with automated electronic verification. Instead of requiring physical meeting or manual authentication, the system uses automated detection of the entity's control over the proof capture component to verify presence, significantly reducing verification time.
3Ease of operation
If automatic presence verification is implemented, then user interaction requirement is reduced, but system control requirements increase
Solution Approach 1:
The proof capture component autonomously monitors and detects when the particular entity is present by detecting the entity's control over the component. No user action is required to initiate or maintain verification - the system automatically generates presence proof when the entity interacts with the component, making operation extremely simple while the backend control logic handles complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Technology that permits two computing systems to communicate with each other with high confidence that a particular entity is present at the other computing system. As an example, when a first computing system communicates with a second computing system, the first computing system may regularly verify that a particular entity is present at the second computing system. The first computing system is actually in control of a proof capture component on the second computing system. The first computing system causes the second computing system to automatically generate proof of presence, the proof evidencing that the particular entity is present at the second computing system. The first computing system also causes the second computing system to include the generated presence proof when communicating from the second computing system to the first computing system.