Emulated mobile device identification

Patent metadata

Field	Value
Publication number	US-11076291-B2
Application number	US-201715403147-A
Country	US
Kind code	B2
Filing date	Jan 10, 2017
Priority date	Jan 10, 2017
Publication date	Jul 27, 2021
Grant date	Jul 27, 2021

Abstract

According to an aspect of an embodiment of the present disclosure, operations related to emulated mobile device determinations may include obtaining sensor data associated with an entity. The sensor data may include sensor output values associated with one or more sensors of a physical mobile device. The operations may also include analyzing the obtained sensor data. The analyzing may include performing one or more determinations. The determinations may include determining whether the obtained sensor data includes static data. The determinations may also include determining whether the obtained sensor data includes computer-simulated data. In addition, the determinations may include determining whether the obtained sensor data includes reused sensor data. In some embodiments, the operations may include determining whether the obtained sensor data includes emulated sensor data based on one or more of the determinations.

First claim

What is claimed is:

1. A method, comprising:
receiving, from an entity indicating that it is a physical mobile device, a request to access a service provider system;
requesting first sensor data from a sensor of the entity based on the received request; receiving the first sensor data from the entity in response to requesting the first sensor data; analyzing the first sensor data, the analyzing being based on a plurality of determinations that include:
determining whether the first sensor data includes static data based on whether the first sensor data changes over a period of time;
in response to a result of the determining whether the first sensor data includes static data indicating that static data is not included in the first sensor data, determining whether the first sensor data includes computer-simulated data based on other computer-simulated data and second sensor data of one or more other genuine physical mobile devices; and
in response to a result of the determining whether the first sensor data includes computer-simulated data indicating that computer-simulated data is not included, determining whether the first sensor data includes reused sensor data based on a comparison of the first sensor data against third sensor data previously obtained from one or more other entities and stored in a database, wherein the comparison of the first sensor data against the third sensor data comprises a determination whether at least a portion of the first sensor data is a reuse of at least a corresponding portion of the third sensor data;

in response to determining that the first sensor data includes emulated sensor data based on one or more of the plurality of determinations of the analyzing, determining that the entity is an emulated mobile device and not a genuine physical device in response to determining that the first sensor data includes emulated sensor data; and
limiting access of the entity to the service provider system in response to determining that the entity is the emulated mobile device.

2. The method of claim 1 , wherein determining that the first sensor data does not include static data comprises monitoring output values of the sensor at different points in time during the period of time, and determining that at least one output value corresponding to a particular point in time differs from at least one other output value corresponding to a different point in time.

3. The method of claim 1 , further comprising determining that the first sensor data includes emulated sensor data in response to determining that the first sensor data includes computer-simulated data.

4. The method of claim 1 , further comprising determining that the first sensor data includes emulated sensor data in response to determining that the first sensor data includes reused sensor data.

5. The method of claim 1 , further comprising obtaining a classifier that classifies generic data as computer-simulated data or actual sensor data based on the other computer-simulated data and the second sensor data, wherein determining whether the first sensor data includes computer-simulated data includes providing the first sensor data as an input to the classifier.

6. The method of claim 1 , wherein the comparison of the first sensor data against the third sensor data includes applying a hashing function to the first sensor data and the third sensor data.

7. Non-transitory computer-readable storage media configured to store instructions that cause a system to perform operations, the operations comprising:
obtaining sensor data from a sensor of an entity, the sensor data including sensor output values associated with one or more sensors of a physical mobile device;
analyzing the obtained sensor data, the analyzing including performing one or more determinations selected from a group of determinations consisting of:
determining whether the obtained sensor data includes static data;
in response to a result of the determining whether the obtained sensor data includes static data indicating that static data is not included, determining whether the obtained sensor data includes computer-simulated data; and
in response to a result of the determining whether the obtained sensor data includes computer-simulated data indicating that computer-simulated data is not included, determining whether the obtained sensor data includes reused sensor data by comparing the obtained sensor data to stored sensor data previously received from other physical mobile devices and stored in a database, wherein the comparison of the obtained sensor data against the stored sensor data comprises a determination whether at least a portion of the obtained sensor data is a reuse of at least a corresponding portion of the stored sensor data; and

determining whether the obtained sensor data includes emulated sensor data from an emulated mobile device that is not a genuine physical mobile device based on one or more of the determinations performed from the group of determinations.

8. The non-transitory computer-readable media of claim 7 , wherein determining that the obtained sensor data does not include static data comprises obtaining sensor data at different points in time, and determining that the obtained sensor data changes between two or more points in time.

9. The non-transitory computer-readable media of claim 7 , wherein determining whether the obtained sensor data includes computer-simulated data is based on other computer-simulated data and other sensor data of one or more physical mobile devices.

10. The non-transitory computer-readable media of claim 9 , wherein the operations further include determining a classifier that classifies generic data as computer-simulated data or actual sensor data based on the other computer-simulated data and the other sensor data, wherein determining whether the obtained sensor data is computer-simulated data includes providing the obtained sensor data as an input to the classifier.

11. The non-transitory computer-readable media of claim 7 , wherein determining whether the obtained sensor data includes reused sensor data is based on a comparison of the obtained sensor data against other sensor data obtained from other entities.

12. The non-transitory computer-readable media of claim 11 , wherein the comparison of the obtained sensor data against the other sensor data includes applying a hashing function to the obtained sensor data and the other sensor data.

13. The non-transitory computer-readable media of claim 7 , wherein the operations further comprise determining that the obtained sensor data includes emulated sensor data in response to determining that the obtained sensor data includes static data.

14. The non-transitory computer-readable media of claim 7 , wherein the operations further comprise determining that the obtained sensor data includes emulated sensor data in response to determining that the obtained sensor data includes computer-simulated data.

15. The non-transitory computer-readable media of claim 7 , wherein the operations further comprise determining that the obtained sensor data includes emulated sensor data in response to determining that the obtained sensor data includes reused sensor data.

16. The non-transitory computer-readable media of claim 7 , wherein the operations further comprise:
determining whether the obtained sensor data includes computer-simulated data in response to determining that the obtained sensor data does not include static data; and determining whether the obtained sensor data includes reused sensor data in response to determining that the obtained sensor data does not in

Assignees

• Paypal Inc

Inventors

• Boutnaru Shlomi

Classifications

• H04W12/30

  Security of mobile devices; Security of mobile applications · CPC title

• H04W12/122

  Counter-measures against attacks; Protection against rogue devices · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04W12/08 Primary

  Access security · CPC title

• H04W12/65

  Environment-dependent, e.g. using captured environmental data · CPC title