CA RiskMinder Windows Installation Guide › Understanding the Basics › Introduction to RiskMinder › Data Used for Risk Evaluations › End-User Device Identification Information

End-User Device Identification Information

The following subsections briefly walk you through the device identification and analytics technique that is used by RiskMinder:

• Device ID
• Machine FingerPrint (MFP)
• DeviceDNA

Device ID

The Device ID is a device identifier string that RiskMinder generates on the end-user device to identify and track the device that the end user uses for logging in to your online application and performing transactions. The Device ID information is in encrypted format.

Machine FingerPrint (MFP)

Machine FingerPrint (also referred to as Device fingerprinting or PC fingerprinting in industry terms) represents the browser information and device identification attributes (such as operating system, installed software applications, screen display settings, multimedia components, and other attributes) that are gathered from the end-user system and are analyzed to generate a risk profile of a device in real time. Some of the attributes that are collected from the end-user device include:

• Browser information (such as the name, UserAgent, major version, minor version, JavaScript version, HTTP headers)
• The operating system name and version.
• Screen settings, such as height, width, color depth.
• System information such as the time zone, language, system locale.

For every transaction performed by the end user, RiskMinder matches the corresponding MFP stored in its database with the incoming information. If this match percentage (%) is equal to or more than the value specified for the Device-MFP Match rule in Administration Console, then it is considered "safe".

DeviceDNA

DeviceDNA is a device identification and analytics technique that uses both Machine FingerPrint (MFP) and Device ID for more accurate information analyses. For accuracy, more information is collected than in case of MFP. For example:

• Extra system information (such as platform, CPU, MEP, system fonts, camera, and speaker information)
• Extra browser information (such as vendor, VendorSubID, BuildID)
• Extra screen settings (such as buffer depth, pixel depth, DeviceXDPI, DeviceYDPI)
• Plug-in information (such as QuickTime, Flash, Microsoft Windows Media Player, ShockWave, Internet Explorer plug-ins)
• Network information (such as the connection type)