{"id":"https://openalex.org/W7224766397","doi":"https://doi.org/10.21203/rs.3.rs-10953971/v1","title":"How a Payment Lookup Oracle Confirms Predictable Identifiers","display_name":"How a Payment Lookup Oracle Confirms Predictable Identifiers","publication_year":2026,"publication_date":"2026-10-30","ids":{"openalex":"https://openalex.org/W7224766397","doi":"https://doi.org/10.21203/rs.3.rs-10953971/v1"},"language":"en","primary_location":{"id":"doi:10.21203/rs.3.rs-10953971/v1","doi":"https://doi.org/10.21203/rs.3.rs-10953971/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10953971/v1","pdf_url":"https://www.researchsquare.com/article/rs-10953971/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"volume":null,"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.researchsquare.com/article/rs-10953971/latest.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138656856","display_name":"Badeesorn Sittikong","orcid":"https://orcid.org/0009-0004-2835-1539","observed_orcids":["https://orcid.org/0009-0004-2835-1539"]},"institutions":[{"id":"https://openalex.org/I60837268","display_name":"King Mongkut's University of Technology Thonburi","ror":"https://ror.org/0057ax056","country_code":"TH","type":"education","lineage":["https://openalex.org/I60837268"]}],"countries":["TH"],"is_corresponding":false,"raw_author_name":"Badeesorn Sittikong","raw_affiliation_strings":["King Mongkut's University of Technology Thonburi"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King Mongkut's University of Technology Thonburi","institution_ids":["https://openalex.org/I60837268"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036316550","display_name":"Tuul Triyason","orcid":"https://orcid.org/0000-0002-5970-7751","observed_orcids":["https://orcid.org/0000-0002-5970-7751"]},"institutions":[{"id":"https://openalex.org/I60837268","display_name":"King Mongkut's University of Technology Thonburi","ror":"https://ror.org/0057ax056","country_code":"TH","type":"education","lineage":["https://openalex.org/I60837268"]}],"countries":["TH"],"is_corresponding":false,"raw_author_name":"Tuul Triyason","raw_affiliation_strings":["King Mongkut's University of Technology Thonburi"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King Mongkut's University of Technology Thonburi","institution_ids":["https://openalex.org/I60837268"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I60837268"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.7973999977111816,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.7973999977111816,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.11089999973773956,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.06080000102519989,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/identity-verification","display_name":"identity verification","score":0.6029999852180481}],"concepts":[{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.6797000169754028},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6772000193595886},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.60589998960495},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5302000045776367},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.4864000082015991},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.4803999960422516},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.44519999623298645},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4284999966621399},{"id":"https://openalex.org/C119839945","wikidata":"https://www.wikidata.org/wiki/Q6545185","display_name":"Unique identifier","level":3,"score":0.4154999852180481},{"id":"https://openalex.org/C191916993","wikidata":"https://www.wikidata.org/wiki/Q362019","display_name":"Numbering","level":2,"score":0.3765000104904175},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.36550000309944153},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35910001397132874},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3400000035762787},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3391999900341034},{"id":"https://openalex.org/C2778707766","wikidata":"https://www.wikidata.org/wiki/Q202064","display_name":"Phone","level":2,"score":0.3294999897480011},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3255000114440918},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.3091999888420105},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.29159998893737793},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C134835016","wikidata":"https://www.wikidata.org/wiki/Q690265","display_name":"Lookup table","level":2,"score":0.2676999866962433},{"id":"https://openalex.org/C67388219","wikidata":"https://www.wikidata.org/wiki/Q207440","display_name":"Hash table","level":3,"score":0.2612000107765198},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21203/rs.3.rs-10953971/v1","doi":"https://doi.org/10.21203/rs.3.rs-10953971/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10953971/v1","pdf_url":"https://www.researchsquare.com/article/rs-10953971/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.21203/rs.3.rs-10953971/v1","doi":"https://doi.org/10.21203/rs.3.rs-10953971/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-10953971/v1","pdf_url":"https://www.researchsquare.com/article/rs-10953971/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7224766397.pdf","grobid_xml":"https://content.openalex.org/works/W7224766397.grobid-xml"},"referenced_works_count":3,"referenced_works":["https://openalex.org/W2000830239","https://openalex.org/W2159024459","https://openalex.org/W7161816180"],"related_works":["https://openalex.org/W7008778572","https://openalex.org/W7001095643","https://openalex.org/W2496182547","https://openalex.org/W3040820439","https://openalex.org/W2067229524","https://openalex.org/W7008359169","https://openalex.org/W2350122515","https://openalex.org/W2565920291","https://openalex.org/W2537711344","https://openalex.org/W7208734251"],"abstract_inverted_index":{"Abstract":[0],"Acquisti":[1],"and":[2,67,95,158,185],"Gross":[3],"(PNAS":[4],"2009)":[5],"demonstrated":[6],"that":[7,39,47,131,233],"structured":[8],"national":[9,41,53,93,149],"identifiers":[10],"such":[11],"as":[12],"the":[13,29,76,80,88,91,100,161,203,210,225],"U.S.":[14],"Social":[15],"Security":[16],"Number":[17],"are":[18,222],"predictable":[19],"from":[20],"public":[21],"data.":[22],"A":[23,199],"prediction,":[24],"however,":[25],"cannot":[26],"be":[27],"confirmed:":[28],"attacker":[30],"never":[31],"learns":[32],"which":[33],"guess":[34],"is":[35,117,168],"correct.":[36],"We":[37,84,240],"show":[38],"a":[40,49,104,114,120,132,175,182,186],"payment":[42],"resolution":[43],"oracle":[44,134],"(the":[45],"lookup":[46],"turns":[48],"phone":[50],"number":[51],"or":[52],"ID":[54,94],"into":[55,153],"an":[56,143,230],"account":[57],"holder's":[58],"name,":[59],"deployed":[60],"at":[61],"population":[62],"scale":[63],"in":[64,68,214,217],"Thailand's":[65],"PromptPay":[66],"comparable":[69],"systems":[70],"across":[71,202],"Asia":[72],"and,":[73],"since":[74],"2025,":[75],"EU)":[77],"supplies":[78],"exactly":[79],"missing":[81],"confirmation":[82],"step.":[83],"quantify":[85],"(i)":[86],"how":[87,113,140],"structure":[89],"of":[90,106,146,181,205,237],"Thai":[92,183,207],"mobile":[96],"numbering":[97],"plan":[98],"shrinks":[99],"candidate":[101,122,137],"space":[102],"by":[103,166],"factor":[105],"135":[107],"before":[108],"any":[109,235],"target-specific":[110],"information;":[111],"(ii)":[112],"redacted":[115],"identifier":[116],"reduced":[118],"to":[119],"small":[121],"set":[123],"(at":[124],"most":[125],"10^k":[126],"for":[127,179,188,246],"k":[128],"hidden":[129],"digits)":[130],"single":[133],"query":[135],"per":[136],"disambiguates;":[138],"(iii)":[139],"composition":[141],"with":[142,242],"existing":[144],"leak":[145],"1,263,268":[147],"indexed":[148],"IDs":[150],"converts":[151],"prediction":[152],"deterministic,":[154],"liveness-checked":[155],"identity":[156],"confirmation;":[157],"(iv)":[159],"why":[160],"partial-name":[162],"masking":[163],"recently":[164],"adopted":[165],"Singapore":[167],"weak":[169],"on":[170,224],"its":[171],"own":[172,227],"terms,":[173],"leaving":[174],"given":[176],"name":[177,212],"unique":[178],"51%":[180],"corpus":[184],"surname":[187],"65.8%,":[189],"so":[190],"it":[191],"blunts":[192],"human":[193],"display-harvesting":[194],"but":[195],"not":[196],"oracle-backed":[197],"confirmation.":[198],"direct":[200],"measurement":[201],"apps":[204],"seven":[206],"banks":[208],"finds":[209],"recipient":[211],"returned":[213],"full,":[215],"unmasked,":[216],"every":[218],"case.":[219],"All":[220],"measurements":[221],"performed":[223],"authors'":[226],"accounts":[228],"under":[229],"ethics":[231],"protocol":[232],"forbids":[234],"enumeration":[236],"third-party":[238],"identifiers.":[239],"conclude":[241],"concrete,":[243],"quantified":[244],"recommendations":[245],"scheme":[247],"operators.":[248]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-31T00:00:00"}