False Banking, Credit Card, and Ecommerce System

• US 20130263226A1
• Filed: 01/22/2013
• Published: 10/03/2013
• Est. Priority Date: 01/22/2012
• Status: Abandoned Application

• Current Assignee: Frank W. Sudia
• Original Assignee: Frank W. Sudia
• Inventors: Sudia, Frank W.
• Application Number:
  US13/747,368
• Publication Number:
  US 20130263226A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2123 Dummy operation
• CPC Class Codes: G06F 2221/2127 Bluffing
• CPC Class Codes: H04L 2463/144 Detection or countermeasures against botnets
• CPC Class Codes: H04L 2463/146 Tracing the source of attacks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

A false banking, credit card, and ecommerce system provides a family of inter-related computer software programs and processes that can a) generate and distribute seemingly valid false credentials that are made available to be “stolen” by criminals, b) provide an assortment of seemingly valid websites, business servers, or ecommerce sites that will apparently accept the false credentials, and c) track each use and provide trace information for use by law enforcement to apprehend and prosecute cyber offenders.

Claims

1. A method for deterring cyber attacks and for tracing and tracking cyber attackers comprising:

a. a source of seemingly legitimate but false online access credentials,

b. a means for inputting said credentials into criminal malware systems,

c. a means for accepting said credentials and granting apparent online access,

d. a means for reporting said access using said credentials to a user.

2. The method of claim 1 where the said credentials comprise a bank URL, user ID, and password.

3. The method of claim 1 where the said means of inputting is a cyber security system that feeds false keystrokes to a downstream keylogger.

4. The method of claim 1 where the means of accepting said credentials is an apparently valid (but false) online banking website.

5. The method of claim 1 where the means of accepting said credentials is a valid online banking website and wherein said website redirects the user to a separate apparently valid (but false) website for alternate processing and reporting.

6. The method of claim 1 where the means of accepting said credentials is a valid online banking website and wherein said website performs its own alternate processing and reporting.

7. The method of claim 1 further including a means for reporting said inputting to a user.

8. The method of claim 1 wherein said means of reporting said inputting or access via the false credentials to a user includes sending a feed of such data records to an IP address specified by said user.

9. A method of identifying low-activity remote cyber attackers of a computer system comprising the steps of:

a. migrating the subject system to a new URL,

b. creating a replica system with dummy data at the prior URL

b. notifying all legitimate system users of a new system URL via an out of band method,

d. maintaining the replica system at the prior URL, and

e. logging any further system access as potentially unauthorized,

wherein the method of designing and maintaining such subject system further comprises;

f. steps for creating the parallel replica system as part of the original system build,

g. steps for maintaining the dummy replica database as part of the standard system maintenance process,

h. incorporating an automated cutover process as part of the original delivered system, that performs steps a-e above, using the already existing replica system and database of steps f-g.

10. A method for concealing true user files on a computer system to potentially prevent data theft by remote attackers comprising the steps of:

a. identifying a true user directory to be camouflaged,

b. selecting a set of innocuous looking ghost directory and file names,

c. copying true user files to the ghost location using the ghost names,

d. overwriting the true files with compressible random data, and

e. making a database entry equating the ghost location with the original true location.

11. (canceled)