Emulator detection through user interactions
AssigneePaypal, Inc.
InventorsYotam Perkal, Yuri Shafet, Eli Straznik
Life of this patent
Estimating the term…
Abstract
Methods and systems are provided to determine when a first electronic device is emulating a second electronic device. The first electronic device may be operated through indirect inputs such as through a mouse and keyboard. The second electronic device may be operated through direct inputs such as inputs received through a touchscreen. Interaction data received from the first electronic device may be used to determine that the first electronic device is operating an emulator. Interaction data may include data associated with scrolling on the electronic device and such data may allow a determination that the electronic device received indirect inputs and, thus, is operating an emulator.
Claims20
A system comprising:
- a non-transitory memory;
- and
- one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising:
- receiving first data associated with a user account from an electronic device, wherein the first data comprises identification data and interaction data, and wherein the interaction data is associated with an action on a touch interface of the electronic device;
- determining, based at least on the identification data, that the electronic device is a mobile device, wherein the action on the electronic device is of a type performed through a direct input by a user;
- analyzing the interaction data to determine a touch radius of the direct input;
- based on the analyzing, determining that the touch radius has a constant value;
- in response to the touch radius having the constant value, determining that the action on the touch interface of the electronic device was controlled by an indirect input
- performed through a mobile device emulator;
- and
- flagging the user account based on the determining that the action was performed through the mobile device emulator.
A method comprising:
- receiving first data associated with a user account from an electronic device, wherein the first data comprises identification data and interaction data, and wherein the interaction data is associated with a scrolling action on an interface of the electronic device;
- determining that the identification data identifies the electronic device as a first type of device;
- determining that scrolling on the electronic device is controlled by a direct input;
- based on an analysis of the interaction data, determining a touch radius associated with the direct input;
- determining that the touch radius has a constant value;
- in response to the touch radius having the constant value, determining that the scrolling action on the electronic device was controlled by an indirect input performed through
- a mobile device emulator;
- and
- taking an action on the user account based on the determining that the scrolling action on the electronic device was controlled by an indirect input performed through the mobile device emulator.
A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
- receiving first data from a display of a first electronic device, wherein the first data is generated by an interaction associated with content displayed on the first electronic device, and wherein the first data comprises touch input data;
- based on the touch input data, determining a touch radius of the interaction;
- comparing the touch radius of the interaction to stored touch radius data associated with a second electronic device associated with an account associated with the content or the second electronic device;
- determining, based on the comparing, that the touch radius has less than a minimal value:
- in response to determining that the touch radius has less than the minimal value, determining that the interaction was by a third electronic device controlling the first electronic device through a mobile device emulator and not by a user associated with the account;
- and
- denying access to the account.
Dependencies are inferred from the claim text.