Time-Stamped Computer Tags for Fraud Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network security methods, such as login names and passwords, hardware tokens, and digital certificates, are inadequate in preventing fraudulent transactions and identity theft due to vulnerabilities like password predictability, hardware visibility, and IP spoofing, necessitating a more robust and user-transparent solution.
Innovation Solution
Implementing time-stamped computer tags, which include encrypted server timestamp information, to analyze device activity and detect suspicious behavior by comparing tag creation dates with account usage history, thereby preventing unauthorized access and reducing the risk of fraud and identity theft.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, hardware tokens, digital certificates) are used, then basic security is provided, but they are vulnerable to fraud, identity theft, and security breaches
Solution Approach 1:
The system performs preliminary actions by assigning computer tags to devices before they attempt access to the network. These tags contain device identification information that is analyzed in advance to detect potential fraud. The fraud detection system examines the tags and compares them against known fraudulent patterns, allowing the system to prevent fraudulent access before it occurs, rather than relying solely on reactive authentication methods.
2Reliability
If hardware security devices (tokens, dongles) are implemented, then secondary authentication is provided, but they are visible, can be copied, and increase system complexity
Solution Approach 1:
Instead of using physical hardware devices that can be copied or stolen, the system uses virtual computer tags that are assigned to devices. These tags contain device identification information and are stored in the device's memory or registry. The tags are much harder to copy or simulate compared to physical hardware devices, providing security without the complexity and vulnerability of hardware tokens or dongles.
3Reliability
If digital certificates from third parties are used, then authentication is provided, but they can be stolen, require significant trust in third parties, and burden users
Solution Approach 1:
The system extracts the authentication verification function from third-party certificate authorities and implements it within the network's own fraud detection system. The computer tags contain device identification information that is analyzed by the network's own fraud detection system, eliminating the need for external certificate authorities. This reduces user burden and eliminates reliance on third parties while maintaining authentication verification.
4Measurement precision
If IP addresses are used for location verification, then basic user verification is provided, but they are easily spoofed and provide limited security
Solution Approach 1:
The system changes the verification parameter from IP addresses (which can be spoofed) to computer tags containing device identification information. These tags are assigned to specific devices and are much harder to spoof or falsify. The fraud detection system analyzes these tags to verify device identity, providing more accurate and reliable verification compared to IP address-based methods.
Data Source
AI summary
Systems and methods for creating and analyzing computer tag information for the prevention or detection of potential fraud. Computers and other devices accessing the Web carry device tags with date and time information describing when they were issued by a security tag server. A server time stamp may be inserted into time based computer tags such as a cookies indicating when they were created. Such time stamp information can be encrypted and analyzed during future attempts to access a secure network such as a customer attempting to log into an online banking account. When the time stamp information from the tag is compared to other selected information about the user, device and/or account, including but not limited to last account log-in date/time or account creation date, the invention may be used to detect suspicious activity.