Server User Tracking via Dynamic Identifier Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user tracking methods, such as those relying on Cookies, are vulnerable to falsification by attackers, leading to inaccurate tracking of user behavior.
Innovation Solution
A user tracking method that uses a server to generate unique historical identifier values based on user seeds and random numbers, stored in a historical identifier set, to identify users and track their behavior securely, with the server determining a user seed when a preset identifier is present in an access request and generating a new seed if not, and sending responses that include these identifiers to ensure accurate tracking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user tracking is performed using Cookies, then user behavior tracking is enabled, but the tracking accuracy deteriorates due to falsification by attackers
Solution Approach 1:
The patent changes the tracking parameter from static Cookies to dynamic identifier values that are generated using cryptographic hashing algorithms. The identifier value is computed as Hash(user_seed + random_number), where the user_seed remains constant for a user but the random_number changes with each access. This parameter transformation makes the tracking data resistant to falsification while maintaining accuracy.
Solution Approach 2:
The patent introduces an intermediary verification mechanism where the server validates the relationship between identifier values and user seeds through cryptographic verification. The server maintains a mapping of user seeds to identifier values and verifies that submitted identifiers correspond to legitimate user seeds, preventing attacker falsification while enabling accurate tracking.
2Reliability
If identifier values are generated based on user seed and random number, then tracking security is improved, but system complexity increases
Solution Approach 1:
The system employs self-service mechanisms where the client automatically generates random numbers and computes identifier values using the cryptographic hashing algorithm without requiring manual intervention. The server automatically verifies identifier values against stored user seeds and maintains the mapping database, eliminating the need for complex manual verification processes while ensuring security.
Solution Approach 2:
The patent uses cryptographic hashing to create a copy of the user identification data in the form of identifier values. The hash function creates a deterministic copy that can be verified without exposing the original user seed, enabling secure tracking while simplifying the system architecture by avoiding the need to store or transmit sensitive user identification data directly.
Data Source
AI summary
In embodiments, a server receives an HTTP protocol-based access request sent by the client; when the server determines that the access request comprises a preset identifier and the current identifier value corresponding to the preset identifier matches any of historical identifier values in a historical identifier set stored in the server, the server determines a user seed from the historical identifier set according to the current identifier value, the historical identifier set comprising a corresponding relationship between historical identifier values and user seeds, the any of historical identifier values being generated by the server on the basis of a user seed and a random number corresponding to the historical identifier value, and the user seed being used for identifying a same user recognized by the server on the basis of the access request; the server tracks an access behavior of the user seed.