SIM-Based On-Device Verification for Fraud Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity verification methods, such as passwords and one-time passwords (OTPs), are vulnerable to fraud and misuse, particularly in online transactions and services, as they can be compromised by malware or automated bots.
Innovation Solution
The implementation of on-device verification using a mobile device's processor to execute an application, communicate with an applet stored in the device's circuitry, and validate processes based on authentication indications, such as validation tokens, to ensure secure access to network-based services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional identity verification methods (passwords, OTPs) are used, then ease of operation is maintained, but security against fraud and malware is insufficient
Solution Approach 1:
The patent introduces an intermediary verification mechanism where the system communicates with the mobile device's authentication components (SIM card, secure element) to obtain verification codes. This intermediary layer prevents direct access to sensitive authentication data while still enabling secure verification, thus improving security without significantly impacting user experience.
Solution Approach 2:
The system enables self-service authentication by allowing the mobile device to autonomously generate and provide verification codes through its built-in authentication components. The device itself serves as the verification source, eliminating the need for external authentication servers or complex manual verification processes, thereby maintaining ease of operation while enhancing security.
2Reliability
If on-device verification with SIM card authentication is implemented, then security against fraud and bots is improved, but device complexity increases
Solution Approach 1:
The patent leverages the mobile device's existing SIM card and secure element, which are already present for cellular communication and basic authentication purposes. By reusing these existing components for additional verification functions, the system achieves enhanced fraud prevention without adding significant complexity, as the same hardware serves multiple authentication-related functions.
Solution Approach 2:
The patent replaces complex mechanical or manual verification systems with electronic authentication mechanisms based on the SIM card and secure element. This substitution uses established electronic authentication protocols and hardware-based security, achieving robust fraud prevention while maintaining relatively simple system architecture compared to alternative approaches.
3Reliability
If validation tokens based on unique identifiers are used, then authentication reliability is improved, but information processing requirements increase
Solution Approach 1:
The patent performs preliminary authentication by obtaining verification codes from the mobile device's authentication components before the actual transaction or access request. This pre-verification ensures that only authenticated devices can proceed with operations, improving authentication accuracy while minimizing processing energy during the actual transaction, as the heavy authentication work is already completed.
Solution Approach 2:
The system uses verification codes that are generated and copied from the mobile device's secure storage (SIM card or secure element) to the application or server for validation. This copying mechanism allows the authentication data to be reused across multiple verification instances without requiring repeated processing of the same authentication information, thereby reducing processing energy consumption while maintaining high authentication accuracy.
Data Source
AI summary
There is provided a method for on-device verification, comprising: using at least one processor of a mobile device for: executing an application, establishing a communication with an applet stored in a storage component of circuitry installed in the mobile device, obtaining an indication that the mobile device is authenticated for cellular communication by a service provider, and validating a process of the application based on the indication.