Server-Device Sequence Synchronization for Clone Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures fail to effectively distinguish between a user's valid device and a cloned device, allowing unauthorized access to accounts even when multi-factor authentication is in place, as attackers can clone devices by copying data and using spoofed device identification information.
Innovation Solution
A method and system that initialize and maintain identical sequence values on a server and an electronic device, comparing these values during login requests to ensure only authorized devices can access protected information, with sequence values updated upon successful login to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication is implemented to enhance security, then account security is improved, but the system becomes vulnerable to device cloning attacks
Solution Approach 1:
The patent applies preliminary action by pre-establishing a trusted relationship between the server and the legitimate device through secure enrollment procedures. During enrollment, the server generates cryptographic key pairs and stores them securely, creating a pre-shared secret that will later enable the server to verify the authenticity of login requests. This preliminary setup ensures that even if device cloning occurs, the cloned device cannot replicate the cryptographic credentials without detection.
Solution Approach 2:
The patent implements feedback through continuous monitoring and verification of device credentials during login attempts. The server receives login requests, verifies cryptographic signatures against stored credentials, and responds with acceptance or rejection. This feedback mechanism allows the system to detect cloned devices and prevent unauthorized access while maintaining security against device cloning attacks.
2Ease of operation
If device identification information is used for authentication, then login convenience is improved, but the device can be spoofed or cloned
Solution Approach 1:
The patent replaces mechanical device identification methods (such as hardware IDs, serial numbers, or physical characteristics that can be copied) with cryptographic verification mechanisms. Instead of relying on device-specific identification information that can be spoofed, the system uses cryptographic signatures and digital certificates that are computationally infeasible to replicate. This substitution maintains login convenience while eliminating device spoofing vulnerabilities.
3Reliability
If physical access to device identification information is required, then security is improved, but the information can still be extracted and cloned
Solution Approach 1:
The patent extracts the critical security functionality from the physical device and relocates it to a secure server environment. Instead of storing sensitive device identification information locally on the device where it can be extracted through physical access, the system stores cryptographic credentials securely on the server and uses them to verify login requests. This extraction eliminates the risk of information extraction through physical access while maintaining security.
Data Source
AI summary
In an approach for protecting against use of clones of electronic devices, a first sequence value is initialized on the server and an equal second sequence value is initialized on an electronic device. In response to a first login request to the server from a user operating the electronic device, the first and second sequence values are compared. If the values are equal, processing of the login process continues. Otherwise, the login request is rejected. If the login is successful, a next value is computed for the first and second sequence values, and the next first and second sequence values are stored on the server and on the electronic device, respectively.