SIM Presence Verification Using QR Scan and IP Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Social engineering attacks can deceive cellular service providers into believing a SIM is present in the wrong device by manipulating one-time PIN verification, allowing unauthorized account changes.
Innovation Solution
A method to verify the presence of a SIM in a user equipment (UE) without removing it, involving scanning a code to extract an IP address and interaction ID, comparing it with a stored SIM address list to confirm the UE's identity and session validity, and generating a verification ID.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a one-time PIN is transmitted to the victim's cellphone for identity verification, then the service provider can verify account ownership, but the system becomes vulnerable to man-in-the-middle attacks where the PIN can be intercepted and relayed to unauthorized users
Solution Approach 1:
The patent introduces a verification code displayed on the victim's device screen as an intermediary verification mechanism. Instead of relying solely on a PIN transmitted to the device, the system creates a visual verification code that must be physically observed and entered by the authorized user, adding a layer of security that prevents relay attacks while maintaining verification reliability
Solution Approach 2:
The system performs preliminary verification by checking the device's current location and registered information before transmitting the verification code. This preliminary action ensures that only authorized devices can receive and display the verification code, preventing unauthorized interception and relay attempts
2Measurement precision
If the service provider requests the victim to display the ICCID on the cellphone screen for verification, then the SIM card identity can be confirmed, but the verification can be defeated by displaying a pre-obtained screenshot
Solution Approach 1:
The system performs preliminary verification of the device's registered information and current location before generating the verification code. This ensures that only the legitimate device can receive and display the correct verification code, preventing attackers from using pre-obtained screenshots of ICCID or other verification information
Solution Approach 2:
The system provides real-time feedback by generating a verification code that is valid only for the current session and device state. The code changes based on the device's registered information and location, making static screenshots obsolete and ensuring that verification information is always current and device-specific
3Reliability
If the SIM card is removed from the user equipment for verification purposes, then the physical SIM can be inspected, but the verification process becomes more complex and time-consuming
Solution Approach 1:
The patent replaces the mechanical process of physically removing and inspecting the SIM card with an electronic verification system. The system uses the device's existing SIM information, registered data, and location to generate a verification code, eliminating the need for physical SIM handling while maintaining verification reliability
Solution Approach 2:
The verification process leverages the device's own registered information and current state to generate the verification code. The system uses the device's built-in capabilities (SIM information, location services, screen display) to perform self-verification, eliminating the need for external physical inspection and reducing process complexity
Data Source
AI summary
Verification of a subscriber identity module (SIM), as represented by the purported owner, is enabled without requiring that the SIM be removed from a user equipment (UE, e.g., a cellphone). The UE scans a code (e.g., a QR code) that contains an address of a verification website and an interaction identifier (ID) that includes a session ID, a UE identification (e.g., a phone number) as reported by the purported owner, and a time that indicates a session expiration. The UE transmits the interaction ID to the website, and also must transmit its own IP address in order to receive the website's response. The website has a list, previously compiled by the cellular service provider, that pairs IP addresses with UE identifications (e.g., phone numbers). The information transmitted by the UE is compared with the list to verify that the UE that scanned the code actually has the SIM, as represented.