Mobile device indentification by device element collection
View Patent ↗A technique is described that determines if a request for authentication is made on the mobile device belonging to the authorized user by examining non confidential memory parameters of the mobile device, for example a total free memory, or a number of stored phone numbers. The technique examines past authorized user values for the memory parameters and performs a statistical analysis and projects a current memory range for each of the parameters for the authorized user. The projection may include factors such as the amount of time elapsed since the mobile device was acquired, the normal variation over a day, a week, a month or a year, and cyclic variations such as many new applications during a specific month each year. The projection may also include baseline variations which may be provided by analysis of a large number of different people. If the device used for the authorization request has memory parameters different from the projected range of authorized user values, then authorization may be refused.
1. A method of authenticating a mobile device transaction, the method comprising:
establishing a preliminary user identification based upon user provided login information;
measuring preliminary user mobile device variable memory parameters to generate a measured value;
comparing the measured value to a stored authorized user value range;
providing a failure to authenticate signal if the comparing indicates the measured value is outside the stored authorized user value range; and
providing an authenticate signal if the comparing indicates that the measured value is inside the stored authorized user value range.
2. The method of claim 1 wherein comparing the measured value comprises:
measuring a value of the preliminary user mobile device total free memory and comparing it to a stored authorized user value range of expected total free memory;
providing an authenticate signal if comparing results in a value inside of the stored authorized user value range;
providing a failure to authenticate signal if comparing results in a value outside of the stored authorized user value range; and
calculating a statistical trend in the stored authorized user values over a time period since mobile device acquisition to generate an updated expected value range for the total free memory; and
repeating the comparing with the updated expected value range used as the authorized user value range.
3. The method of claim 2 wherein calculating the statistical trend further includes an average change value of the authorized user per week, an average change value of the authorized user per month, and a common change rate in a total population of users to form a baseline rate of change.
4. The method of claim 1 wherein measuring the preliminary user mobile device variable memory parameters include a number of address book entries, a number of stored photographic images, a number of stored MP3 files, a number of installed applications from official markets, a number of installed applications from unofficial markets, a number of installed game applications, a number of installed social applications, a number of installed productivity applications, a number of SMS messages, a number of Email messages, a number of MMS messages, a number of BBM active chats, and an amount of total free memory.
5. The method of claim 1 wherein providing a failure to authenticate signal includes increasing a level of authentication inquiry to the user provided login information.
6. The method of claim 1 wherein providing a failure to authenticate signal if the measured value is within a selected difference value outside of the stored authorized user value range further includes:
measuring preliminary user mobile device factors including at least one of network ID, device ID, typing speed, transaction type, time of day, physical location of the mobile device, and;
comparing the network ID and device ID against stored authorized user mobile device factors; and
providing a stolen mobile device signal if network ID and device ID match the stored values and the other device factors do not match the stored values.
7. The method of claim 1 wherein providing an authenticate signal if the measured value is within a selected difference value inside of the stored authorized user value range further includes:
measuring preliminary user mobile device factors including at least one of network ID, device ID, typing speed, transaction type, time of day, physical location of the mobile device, and;
comparing the mobile device factors against stored authorized user mobile device factors; and
providing an increase security alert if the network ID and device ID match the stored values and the other device factors do not match the stored values.
8. The method of claim 1 wherein measuring preliminary user mobile device variable memory parameters to generate a measured value is in response to establishing the preliminary user identification based upon the user provided login information, and
wherein comparing the measured value to the stored authorized user value range includes verifying whether the measured value is greater than a lower limit of the user value range and less than an upper limit of the user value range.
9. An adaptive authentication server apparatus to authenticate a mobile device transaction, the adaptive authentication server apparatus comprising:
an interface;
a database; and
a controller coupled to the interface and the database, the controller being constructed and arranged to:
store a plurality of authorized users mobile device variable memory parameter values in a memory location of the database;
generate a preliminary user identification upon receipt of login information;
retrieve a stored authorized user mobile device variable memory parameter value range from a user memory location indicated by the preliminary user identification to generate a range of expected values;
obtain preliminary user variable memory parameters from the mobile device to generate a measured value;
compare the measured value to the range of expected values;
transmit an authorization failure signal if the measured value is outside the range of expected values; and
transmit an authorization signal if the measured value is inside the range of expected values.
10. The adaptive authentication server apparatus of claim 9 wherein preliminary user variable memory parameters include at least one of the following:
a number of address book entries, a number of stored photographic images, a number of stored MP3 files, a number of installed applications from official markets, a number of installed applications from unofficial markets, a number of installed game applications, a number of installed social applications, a number of installed productivity applications, a number of SMS messages, a number of Email messages, a number of MMS messages, a number of BBM active chats, and an amount of total free memory.
11. The adaptive authentication server apparatus of claim 10 wherein the measured value is generated by measuring a plurality of mobile device variable memory parameters, the controller constructed and arranged to;
generate a measured value for each mobile device variable memory parameter;
compare each measured value against a stored authorized user expected value range;
provide an authenticate signal if each measured value is inside the expected value range; and
provide a failure to authenticate signal if any measured value is outside the expected value range.
12. The adaptive authentication server apparatus of claim 11 wherein authorized user expected value ranges include a calculated statistical trend in each of the stored authorized user values over at least one of a time period since mobile device acquisition, an average rate of change per month, an average rate of change per week, an average rate of change for the same month in the previous year, and a baseline rate of change in the general population, to generate an expected value range for each of the mobile device variable memory parameters.
13. The adaptive authentication server apparatus of claim 11 further including an increased level of authentication inquiry to the preliminary user provided login information after a failure to authenticate signal is received by the controller.
14. The adaptive authentication server apparatus of claim 11 further including:
if any of the measured values is within a small selected difference value of the stored authorized user value range limits;
then compare a set of preliminary user mobile device factors including at least one of typing speed, transaction type, time of day, physical location of the mobile device, and network ID against a set of stored authorized user mobile device factors to generate a difference; and
generate a stolen mobile device signal if the network ID is the same and the difference is greater than a selected value.
15. A computer program product which includes a non transitory computer readable storage medium storing instructions which, when executed on a computer, cause the computer to authenticate a mobile device transaction, the instructions comprising:
instructions to establish a preliminary user ID based upon user provided login information;
instructions to measure preliminary user mobile device variable memory parameter values;
instructions to perform a comparison between the preliminary user mobile device variable memory parameter values and a stored authorized user's stored mobile device variable memory parameter values; and
instructions to issue an authorization failure alert if the comparison results in preliminary user mobile device variable memory parameter values that are outside of a selected range of the user's stored mobile device variable memory parameter values, or issue an authorization signal if the comparison values are within the selected range.
16. The computer program product of claim 15 wherein instructions to measure preliminary user mobile device variable memory parameter values include at least one of the following:
instructions to measure a number of address book entries, a number of stored photographic images, a number of stored MP3 files, a number of installed applications from official markets, a number of installed applications from unofficial markets, a number of installed game applications, a number of installed social applications, a number of installed productivity applications, a number of SMS messages, a number of Email messages, a number of MMS messages, a number of BBM active chats, and an amount of total free memory.
17. The computer program product of claim 15 wherein the measured preliminary user mobile device variable memory parameter values includes;
instructions to generate a measured value for each mobile device variable memory parameter value;
instructions to compare each measured value against a stored authorized user expected value range;
instructions to provide an authenticate signal if each measured value is inside the expected value range; and
instructions to provide a failure to authenticate signal if any measured value is outside the expected value range.
18. The computer program product of claim 17 wherein stored authorized user's stored mobile device variable memory parameter values includes instructions to calculate a statistical trend in the values over at least one of a time period since mobile device acquisition, an average rate of change per month, an average rate of change per week, an average rate of change for the same month in the previous year, and a baseline rate of change in the general population, to generate an expected value range for each of the mobile device variable memory parameters.
19. The computer program product of claim 17 further including instructions to increase a level of authentication inquiry to the preliminary user provided login information after a failure to authenticate signal is provided.
20. The computer program product of claim 17 further including instructions to generate a stolen mobile device signal if:
any of the measured values is within a small selected difference value of a range limit of the stored authorized user value;
measuring preliminary user mobile device factors including at least one of typing speed, transaction type, time of day, physical location of the mobile device, and network ID;
comparing the measured factors against stored authorized user mobile device factors to generate a difference; and
if the network ID is the same and the difference is greater than a selected value.