Electronic Pseudonym Generation for Service Request Abuse Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic service request systems face issues with improper requests due to inadequate user identification, leading to unnecessary server burden and increased costs, as users can be identified indirectly by IP addresses, which can be exploited by third-party computers, and CAPTCHA tests can be circumvented.
Innovation Solution
Utilizing an electronically readable identification document, such as a passport or identity card with an electronic chip, to generate a temporary pseudonym for user identification, preventing abusive repetition of service requests by temporarily storing the pseudonym on the service provider's server, allowing only one request per service within a predetermined time frame.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If IP address-based indirect identification is used, then user identification is simplified, but security against misuse deteriorates
Solution Approach 1:
The patent introduces an electronic identification document as an intermediary between the user and the service system. This document contains cryptographic elements (public key, certificate) that mediate the identification process, replacing direct IP address-based identification with a secure token-based system that prevents misuse while maintaining ease of use.
Solution Approach 2:
The system creates a cryptographic copy (pseudonym) of the user's identity from their electronic identification document. This pseudonym serves as a secure representative that can be used for service requests without exposing the actual identity or allowing unauthorized reuse, thus preventing misuse while simplifying the identification process.
2Reliability
If CAPTCHA tests are implemented, then automated misuse is reduced, but user convenience deteriorates and the system becomes vulnerable to bypass
Solution Approach 1:
The electronic identification document is obtained and stored on the user's device before accessing the service. This preliminary action of securing the identification document eliminates the need for CAPTCHA tests during service access, as the pre-established cryptographic identity provides sufficient security while maintaining user convenience.
3Speed
If electronic services are triggered before user identification, then service speed is improved, but cost and effort increase due to potential aborts
Solution Approach 1:
The system performs preliminary identification using the electronic identification document before triggering the electronic service. This preliminary action ensures that only authenticated users can initiate services, preventing aborted processes and associated costs while maintaining efficient service execution for legitimate users.
4Reliability
If pseudonymous identification is implemented, then repeated requests are prevented, but system complexity increases
Solution Approach 1:
The system creates a simple cryptographic pseudonym (hash value) from the user's electronic identification document. This pseudonym serves as a lightweight identifier that can be stored and compared to prevent repeated requests, providing reliable abuse prevention with minimal system complexity.
Data Source
Figure 1
Figure 2
AI summary
Method for recording an electronic request for the performance of an electronic service, wherein the electronic request is associated with an electronic identification document belonging to a person, wherein the electronic identification document is provided with an electronic identification, and wherein the method comprises the following features: receiving (201) the electronic request via a communication network; receiving (203) the electronic identification of the electronic identification document via the communication network; generating (205) an electronic pseudonym for the person on the basis of the electronic identification; and temporarily storing (207) the electronic pseudonym for a predefined period in a memory in order to record the electronic request.