machine identification using web api

Trushal Dhobale

I want to implement device detection mechanism. How can we detect if the user is using the same machine for login to our application that he had used earlier? If user is using his machine that he had used for first time then skip security question else for new machine show him security question.

I am using .Net core 2.1 web API with no database and angular 6 to develop front-end.

Please provide your suggestions. Many thanks in advance.

9 Replies

Know the answer? Post it — somebody with the same question will find it here.

Laxmidhar Sahoo7y ago
Encript the answaer and store in the regisrty of the mechine at first time login .
later retrive from the registry and decript then compare with security answer
Sanwar Ranwa7y ago
Think how you store the IP details and check when login second time and try to implment
Trushal Dhobale7y ago
Hi,

But I do not have database to store. Can it be checked at server level?
Sanwar Ranwa7y ago
Hello Trushal

You need to find IP address of machine and save it in database and every time when you login you need to check the IP address
Laxmidhar Sahoo7y ago
when first time login retrive the machine ip and store in your database .When second time
login match from database
Trushal Dhobale7y ago
but won't that be a security risk to keep the security answers in cookie?
Laxmidhar Sahoo7y ago
So security answar should be stored in the cookies .
When second time log in it will retrive from the cookies
Trushal Dhobale7y ago
Hi Laxmidhar, Thanks for reply. But I am not having issue with displaying security question. The main agenda for me is to identify if user is using the same machine that he had used it first time when he had logged in to our application.
eg. in Banking application, when we login for the first time from new machine, we are prompted with some security question, but when user is login for the 2nd time from same machine, he will not be prompted with security question as it is now trusted machine. How can we identify this trusted machine for the user?

Let me know if you need more details for clarification.
Laxmidhar Sahoo7y ago
Hi Trushal actualy not clear yor question . In case of security question that can be static.
If you need for a application for a specific machine store the hard disc slno in registry and
check at first run time