Paypal, Inc.

Avihay Nathan

Adam Cohen

Avishay Meron

David Stein

Uri Arad

Oded Argon

Lev Faivishevsky

Anna Livshits-Rozenman

Roi Lupo

Oded Ben Haim

Raz Alon

A method is provided that includes accessing, by a server provider server of a service provider, a database storing associations between network addresses and locations. Additionally, the method includes determining a subset of the database corresponding to a first network address, each association included in the subset corresponding to an association between the first network address and a respective location. The method also includes in response to determining that the subset of the database satisfies one or more clustering criteria, calculating a representative location corresponding to the first network address, and storing an association between the first network address and the representative location in a second database.

Calculating representative location information for network addresses

Methods and systems are disclosed for dynamic detection of geo-location spoofing by a networked device, such as fraudulent client connections to a server, in which the connection is made using an internet protocol (IP) tunneling as may be provided by a virtual private network (VPN) connection. A user of a client device may employ spoofing of IP-geo location mechanisms and IP classification for various reasons, such as gaining access to services that are not allowed in certain locations (e.g., certain movie and television content providers); browsing server data while maintaining a higher level of anonymity; and performing fraudulent actions on the server. Detecting a false geographic location (e.g. as indicated by IP address) is helpful for improving computer system security, and for evaluating whether access to particular digital resources should be provided.

Dynamic detection of geo-location obfuscation in of internet devices

Methods and systems are disclosed for dynamic detection of fraudulent client connections to a server, in which, for example, the connection is made using an internet protocol (IP) tunneling technology such as networking on a virtual private network (VPN) and making the connection via a VPN tunnel in order to obfuscate the client IP address, in which a user of a client device may employ spoofing of IP-geo location mechanisms and IP classification on the server side. Such a user may have various motivations for obfuscating the client device's geo-location by using an IP tunnel when connecting to a server such as gaining access to services that are not allowed in certain locations (e.g., certain movie and television content providers); browsing server data while maintaining a higher level of anonymity; and performing fraudulent actions on the server.

Method and apparatus for dynamic detection of geo-location obfuscation in client-server connections through an IP tunnel

Growing community of inventors

Kfar Saba, Israel

Avihay Nathan