Terminal Determination via Operation Trait Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to detect spoofed emails that forge transmission source information, as they rely on referencing identification information of the transmission source terminal against permitted identification information, and are unable to authenticate emails sent from unauthorized terminals.
Innovation Solution
A terminal determination system that extracts and encrypts operation trait information, such as application switching and screen lock restoration patterns, and appends it to emails, allowing the receiving side to determine if the terminal is authorized by comparing the appended information with stored patterns associated with the terminal ID.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If identification information (MAC address) of the transmission source terminal is appended to email header for detection, then spoofed email detection capability is improved, but the system cannot detect spoofed email that forges transmission source information
Solution Approach 1:
The patent extracts operation trait information (such as application switching patterns, screen lock restoration patterns, and other user behavior characteristics) from the terminal's operation history and attaches it to the email. This separates the authentication mechanism from the terminal identification, allowing verification of actual user behavior rather than relying on forgeable terminal identifiers.
Solution Approach 2:
The system performs preliminary acquisition and storage of operation trait information associated with terminal IDs before email transmission. This pre-collected behavioral data is then used for authentication, enabling the system to verify the legitimacy of the transmission source based on historical operation patterns rather than static identification information.
2Measurement precision
If biometric traits (voice patterns) are attached to email for terminal determination, then terminal authorization accuracy is improved, but the system requires specific user operations that burden the user
Solution Approach 1:
The system automatically acquires operation trait information from the terminal's operation history without requiring any specific user actions. The terminal itself generates and attaches the operation trait information (application switching patterns, screen lock restoration patterns) to emails, making the authentication process transparent and burden-free for users while maintaining high determination accuracy.
Solution Approach 2:
Operation trait information is acquired and stored in advance associated with terminal IDs, creating a baseline for future authentication. This preliminary collection of behavioral data enables accurate terminal determination without requiring users to perform specific authentication actions at the time of email composition.
3Measurement precision
If operation trait information is acquired and stored for each terminal, then terminal determination accuracy is improved, but information storage requirements and processing complexity increase
Solution Approach 1:
The patent extracts only the essential operation trait information (application switching patterns, screen lock restoration patterns, and other key behavioral characteristics) from the terminal's operation history, rather than storing complete operation logs. This selective extraction reduces storage requirements and processing complexity while maintaining sufficient accuracy for terminal determination.
Solution Approach 2:
The system transforms operation history data into condensed operation trait information by changing the parameter representation from detailed chronological logs to extracted behavioral patterns. This parameter transformation reduces data volume and complexity while preserving the essential characteristics needed for accurate terminal determination.
Data Source
AI summary
A terminal determination device includes a processor that executes a procedure. The procedure includes acquiring operation information indicating history of operation that has taken place on a terminal, and, according to whether or not the acquired operation information belongs in a particular range of similarity with operation information stored associated with a specific terminal, determining whether or not the terminal is the specific terminal.