Mobile emulator determination using sound detection

Patent metadata

Field	Value
Publication number	US-11587577-B2
Application number	US-202117323866-A
Country	US
Kind code	B2
Filing date	May 18, 2021
Priority date	Jun 30, 2019
Publication date	Feb 21, 2023
Grant date	Feb 21, 2023

Abstract

A method and apparatus for mobile emulator determination using sound fingerprinting is disclosed. The method includes a verification computer system receiving a transaction request from a computing device purporting to be a mobile device. Responsive to receiving the request, the verification computer system transmits a request for verification information to the computing device. The verification system includes information regarding a tone to be generated by a speaker of the computing device. Thereafter, verification information is received from the computing device. The verification information includes information tone information generated by the computing device, wherein the tone is, after generation, detected by a microphone. The verification system then verifies, based on the receive verification information, whether the information indicates that the computing device is a mobile device.

First claim

What is claimed is:

1. A method for determining authenticity of transaction devices, the method comprising:
receiving, at a verification system, a transaction request from a computing device, the transaction request comprising device information indicating that the computing device is a mobile device;
responsive to receiving the transaction request, communicating a verification request to the computing device, the verification request specifying one or more desired characteristics of a tone to be generated by a speaker of the computing device and subsequently detected through a microphone of the computing device;
receiving verification information from the computing device, the verification information comprising tone information generated by the computing device based on the tone as generated and subsequently detected by the computing device; and
verifying, based on the verification information, that the device information correctly indicates that the computing device is a mobile device, the verifying comprising determining a lag between the tone as generated and the tone as detected.

2. The method as recited in claim 1 , wherein the one or more desired characteristics include a specified frequency of the tone.

3. The method as recited in claim 2 , wherein the specified frequency is an ultrasonic frequency.

4. The method as recited in claim 1 ,
wherein the one or more desired characteristics include a specified frequency of the tone; and
wherein the verifying further comprises:
determining the lag as a phase difference between the tone as generated and the tone as detected; and
determining, based on an expected distance between the speaker and the microphone of the mobile device, whether the phase difference corresponds to the expected distance.

5. The method as recited in claim 1 , further comprising:
accessing, at the verification system, an expected distance between the speaker and the microphone of the computing device;
wherein the one or more desired characteristics include a specified frequency of the tone; and
wherein the verifying further comprises:
determining, based on the lag, a detected distance between the speaker and the microphone of the computing device; and
determining whether the expected distance corresponds to the detected distance.

6. The method as recited in claim 1 , wherein the one or more desired characteristics include a specified frequency that is randomly determined by the verification system, and wherein the communicating the verification request includes indicating the randomly determined frequency to be generated.

7. The method as recited in claim 1 , wherein the verification information includes background noise information recorded by the computing device and further includes a reported location of the computing device at a time of the transaction request, and wherein the verifying further comprises correlating the background noise information to the reported location of the computing device.

8. The method as recited in claim 1 , wherein the one or more desired characteristics include a modulation value to be used by the computing device to modulate a carrier signal in order to generate the tone, wherein the modulation value corresponds to a first set of information;
wherein the tone information includes a second set of information that is generated from demodulating the tone as detected; and
wherein the verifying further comprises comparing the first set of information to the second set of information to determine whether to approve the transaction request.

9. The method as recited in claim 1 , wherein the transaction request is a payment request issued from a payment application executing on the computing device.

10. A verification device, comprising:
a non-transitory memory storing instructions; and
a processor configured to execute the instructions to cause the verification device to:
determine, based on a transaction request received from a computing device, to initiate a verification process of a computing device;
in response to a determination to initiate the verification process, provide a verification request to the computing device, the verification request specifying one or more desired characteristics of a tone to be generated by a speaker of the computing device for subsequent detection through a microphone of the computing device;
receive verification information from the computing device, the verification information comprising tone information indicating generation and detection of the tone by the computing device according to the verification request, the tone information further comprising background noise information recorded by the computing device, the verification information further comprising a reported location of the computing device; and
verify, as part of the verification process and based at least in part on the verification information, that the computing device is a mobile device, the verifying comprising correlating the background noise information to the reported location of the computing device.

11. The device of claim 10 , wherein the one or more desired characteristics include a specified frequency of the tone, wherein the specified frequency comprises an ultrasonic frequency.

12. The device of claim 10 , wherein the transaction request is a payment request issued from a payment application executing on the computing device.

13. The device of claim 10 , wherein the verification comprises determining whether a level of the background noise does not correlate with an expected level of the background noise at the reported location.

14. The device of claim 10 , wherein the verification process further comprises determining a lag between the tone as generated and the tone as detected, wherein the verifying is further based on the lag.

15. The device of claim 14 , wherein the correlating the background noise information to the reported location of the computing device comprises applying a machine learning model to the background noise information to analyze parameters of the background noise information.

16. A non-transitory machine-readable medium having instructions stored thereon, the instructions executable to cause performance of operations comprising:
receiving, at a verification system, a transaction request from a computing device, the transaction request comprising device information indicating that the computing device is a mobile device;
responsive to receiving the transaction request, communicating a verification request to the computing device, the verification request specifying one or more desired characteristics of a tone to be generated by a speaker of the computing device and subsequently detected through a microphone of the computing device;
receiving verification information from the computing device, the verification information comprising tone information generated by the computing device based on the tone as generated and subsequently detected by the computing device; and
verifying, based on the verification information, that the device information correctly indicates that the computing device is a mobile device, the verifying comprising determining a lag between the tone as generated and the tone as detected.

17. The non-transitory machine-readable medium of claim 16 , wherein the one or more desired characteristics include a specified frequency of the tone, wherein the specified frequency comprises an ultrasonic frequency.

18. The non-transitory machine-readable medium of claim 16 ,
wherein the one or more desired characteristics include a s

Assignees

• Paypal Inc

Inventors

• Perkal Yotam
• Shafet Yuri

Classifications

• G06F21/44

  Program or device authentication · CPC title

• G10L25/18

  the extracted parameters being spectral information of each sub-band · CPC title

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/3674

  involving authentication · CPC title

• G06Q20/3272

  using an audio code · CPC title