Remote Transaction Verification with Host Interaction Logs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for verifying the legitimacy of device interactions in remote access scenarios are inadequate, allowing malicious entities to trick users into granting unauthorized access, leading to potential identity theft and secure credential misuse.
Innovation Solution
Implementing an authentication plug-in on the host computer to create and update log files containing data about viewer computer interactions, which are transmitted to an authentication server for verification, enabling the server to determine the authenticity of interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote access is allowed for convenience, then ease of operation is improved, but security and reliability deteriorate
Solution Approach 1:
The system performs preliminary actions by creating log files on the host computer that document viewer computer interactions before transactions occur. These log files contain data about the viewer computer's control actions, which are then transmitted to the authentication server for verification, establishing a baseline for authenticity checking before the actual transaction takes place.
Solution Approach 2:
The authentication server acts as an intermediary between the host computer and the transaction processing system. It receives interaction request messages containing log file data, determines whether the interaction is authentic or not authentic based on this data, and uses this determination to influence transaction authorization, thereby mediating the security verification process.
2Reliability
If device fingerprinting and behavioral profiling are used for verification, then security is improved, but device complexity increases
Solution Approach 1:
The system extracts only the necessary verification data from complex behavioral analysis by focusing on specific log file contents that document viewer computer interactions. Instead of implementing full behavioral profiling, the system extracts and transmits relevant interaction data to the authentication server, simplifying the verification mechanism while maintaining security effectiveness.
3Reliability
If log files are created and transmitted for authentication, then security is improved, but loss of time increases
Solution Approach 1:
The log files are created and prepared in advance on the host computer before the authentication request is made. This preliminary creation of verification data eliminates the need for time-consuming data collection during the authentication process itself, reducing the overall time penalty while maintaining security.
Data Source
AI summary
A method includes a host computer creating a log file containing data used to determine if the host computer is being controlled by a viewer computer. The host computer transmits an interaction request message comprising the log file to an authentication server computer. The authentication server computer determines if an interaction associated with the interaction request message is authentic or not authentic.