Method and system for determining a compromise risk associated with a unique device identifier

A system including a remotely accessible server including memory for storing computer-readable program code and a processor for executing the computer-readable program code, the remotely accessible server having access to a record associated with a unique device identifier usable in identifying a registered mobile communications device and comprising:

• a device identifier receiving component for receiving the unique device identifier from a mobile communications device;
• an interaction data element receiving component for receiving an interaction data element from the mobile communications device;
• an interaction data element validating component for validating the received interaction data element against the record associated with the unique device identifier including confirming that the received interaction data element matches an expected interaction data element associated with the record;
• and,
• a threat association component for, based on determining that the received interaction data element is not valid, updating the record to associate the unique device identifier with a potential security threat,
• wherein the interaction data element is updated periodically at the mobile communications device according to a sequence maintained at the remotely accessible server,
• and wherein the expected interaction data element changes based on the sequence.

A computer program product comprising a non-transitory computer-readable medium having stored computer-readable program code for performing, at a remotely accessible server having access to a record associated with a unique device identifier usable in identifying a registered mobile communications device, the steps of:

• receiving the unique device identifier from a mobile communications device;
• receiving an interaction data element from the mobile communications device;
• validating the received interaction data element against the record associated with the unique device identifier including confirming that the received interaction data element matches an expected interaction data element associated with the record;
• and
• based on determining that the received interaction data element is not valid, updating the record to associate the unique device identifier with a potential security threat,
• wherein the interaction data element is updated periodically at the mobile communications device according to a sequence maintained at the remotely accessible server,
• and wherein the expected interaction data element changes based on the sequence.