Anti-replay systems and methods
AssigneeTrusona, Inc.
InventorOri Eisen
Life of this patent
Estimating the term…
Abstract
Systems and methods for detecting replay attacks are provided. One or more sensors may be used to collect data about a state of a device. The device may be used to perform a transaction. The device may be used to authenticate or identify a user. The state of the device may pertain to a characteristic of the device position, movement, component, or may pertain to one or more environmental conditions around the device. The state of the device may be expected to change over time, and certain states are unlikely to be repeated. The detected repetition of a state of the device may be a cause for increasing the likelihood that a replay attack is taking place.
Claims20
A method of performing anti-replay analysis, said method comprising:
- providing a device configured to permit a user to perform a transaction;
- collecting, with aid of one or more sensors on-board the device, device state data about a physical state of the device that is unique to the device at a moment in time during which the device state data is collected;
- obtaining identification information about the device or the user;
- comparing, with aid of one or more processors, the device state data and the identification information with previously collected device state data and previously collected identification information;
- and
- determining, with the aid of the one or more processors, a presence of a replay attack based on whether the device state data and the previously collected device state data are identical and whether the device state data is valid.
A system for performing anti-replay analysis, said system comprising:
- a server in communication with a device configured to permit a user to perform a transaction, wherein the server comprises (i) a memory for storing previously collected device state data, previously collected identification information, and a first set of software instructions, and (ii) one or more processors configured to execute the first set of software instructions to:
- receive device state data about a physical state of the device that is unique to the device at a moment in time during which the device state data is collected, wherein the device state data is collected with aid of one or more sensors on-board the device;
- receive identification information about the device or the user;
- compare, the device state data and the identification information with the previously collected device state data and the previously collected identification information;
- and
- determine a presence of a replay attack based on whether the device state data and the previously collected device state data are identical and whether the device state data is valid.
A tangible computer readable medium storing instructions that, when executed by one or more servers, causes the one or more servers to perform a computer-implemented method for performing anti-replay analysis, said method comprising:
- collecting, with aid of one or more sensors on-board a device, device state data about a physical state of the device that is unique to the device at a moment in time during which the device state data is collected, and wherein the device is configured to permit a user to perform a transaction;
- obtaining identification information about the device or the user;
- comparing, with aid of one or more processors, the device state data and the identification information with previously collected device state data and previously collected identification information;
- and
- determining, with the aid of the one or more processors, a presence of a replay attack based on whether the device state data and the previously collected device state data are identical and whether the device state data is valid.
Dependencies are inferred from the claim text.