Route Tracing Agent for Bypass Access Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional online service providers face challenges in blocking malicious users who use proxy servers or VPNs to circumvent access restrictions, and there is a need for effective methods to prevent account theft in online games by analyzing user behavior and log information.
Innovation Solution
A method that involves a server receiving access information through a route tracing agent, extracting region information from IP addresses, determining bypass access, and blocking unauthorized access, while also analyzing log information to identify stolen accounts by comparing unique user information and behavior patterns.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional blocking methods (IP address blocking, service denial) are used to prevent malicious access, then service security is improved, but users can easily circumvent using proxy servers or VPNs
Solution Approach 1:
The patent transitions from blocking based on single IP addresses to blocking based on route tracing information spanning multiple network hops. By examining the entire access path rather than just the endpoint, the system adds dimensional depth to the blocking mechanism, making it resistant to IP manipulation through proxies or VPNs.
Solution Approach 2:
The system performs route tracing in advance to establish baseline access patterns and identifies malicious routes before they can be used for attacks. By pre-characterizing legitimate versus malicious access paths, the system can quickly block bypass attempts without waiting for actual attacks to occur.
2Measurement precision
If route tracing is implemented to detect bypass access, then detection accuracy is improved, but system complexity increases
Solution Approach 1:
The patent introduces a route tracing agent as an intermediary component that handles the complex task of trace route analysis. This agent acts as a mediator between the server and the network, performing the detailed examination of access paths and returning simplified results, thereby reducing the complexity burden on the core server system.
Solution Approach 2:
The system divides the bypass detection function into separate modular components: route tracing agents deployed at network points, a analysis module that processes trace data, and a blocking module that executes decisions. This segmentation allows each component to be optimized independently and simplifies the overall system architecture.
3Reliability
If log information analysis is used to detect account theft, then account security is improved, but processing time increases
Solution Approach 1:
The system pre-processes and stores baseline user behavior patterns during normal gameplay, establishing reference profiles for each user's typical actions, timing, and patterns. When suspicious activity is detected, the system compares against these pre-established baselines rather than analyzing from scratch, significantly reducing detection time while maintaining high accuracy.
Data Source
AI summary
Disclosed is technology relating to a device and method for detecting bypass access and account theft. In the method for detecting bypass access from a client to a server according to the present invention: a server receives access data comprising data about hops on the route from the client to the server by using a route tracing agent; region data is extracted from the IP address(es) of the hop(s) comprised in the received access data; a judgment is made as to whether the extracted region data belongs to a pre-set access-permitted region; and the server detects whether the access from the client is bypass access, in accordance with the judgment results.