# US 10,454,898 B2 · Method of securing connected devices on a network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,454,898 B2
- Document ID: US10454898B2
- Status: Granted
- Kind: B2
- Application number: 15/570,046
- Filed: 2016-04-25
- Published: 2018-08-23
- Granted: 2019-10-22
- Earliest claimed: 2015-04-30
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: Kelvan Howard
- Web page: https://patentgrep.com/patent/US10454898B2

## CPC

- H04L 63/0414: {during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication}
- G06F 15/16: Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs {(coordinating program control therefor G06F9/52; in regulating and control system G05B)}
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06Q 20/32: using wireless devices
- G06Q 20/383: {Anonymous user system}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 30/00: Commerce
- G06Q 50/18: Legal services
- H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A computing device and method may mask an identification of another computing device from malicious and unauthorized use of that identification for network communication. An identification for a network-based electronic device may be received, and a generic device ID may be created for the received ID. The received ID and the generic device ID may be stored in a memory as being related. The generic ID may be communicated by the masking device and method to an outside network.

## Claims

### Claim 1

A computing device to mask an identification of a network-enabled device comprising:
an input/output circuit;
a processor in communication with the input/output circuit;
a memory in communication with the processor and storing a plurality of instructions that, when executed by the processor, cause the processor to:
dynamically assign a unique generic identification to the network-enabled device based on an identification received at the input/output circuit from the network-enabled device;
relate the received identification and the unique generic identification to each other;
store the related received identification and the unique generic identification;
cause the unique generic identification to be communicated outside the network-enabled device, and
intercept a plurality of device identifications from HyperText Transfer Protocol traffic on a network and replace each of the plurality of device identifications with a unique generic device identification.

### Claim 2 (depends on 1)

The computing device of claim 1, wherein the received identification is a Unique Device Identifier (UDID).

### Claim 3 (depends on 2)

The computing device of claim 2, wherein the generic identification is in the form of a Unique Device Identifier.

### Claim 4 (depends on 2)

The computing device of claim 2, wherein the memory includes further instructions that, when executed by the processor cause the input/output circuit to communicate with a plurality of electronic devices each with a unique Unique Device Identifier.

### Claim 5 (depends on 4)

The computing device of claim 4, wherein the memory includes further instructions that, when executed by the processor, cause the received identification and the unique generic identification for each of the electronic devices to be stored in a database.

### Claim 6 (depends on 1)

The computing device of claim 1, wherein the memory includes further instructions that, when executed by the processor, cause the input/output circuit to:
(a) receive a communication directed to the generic identification,
(b) communicate the generic identification to the memory, and
(c) match the generic identification to the received identification to create a matched identification.

### Claim 7 (depends on 1)

The computing device of claim 1, wherein the input/output circuit is further configured to communicate wirelessly.

### Claim 8 (depends on 1)

The computing device of claim 1, wherein the input/output circuit is further configured to communicate additional identification data of the computing device.

### Claim 9 (depends on 1)

The computing device of claim 1, wherein the input/output circuit, memory, and processor are integrated within a router.

### Claim 10 (depends on 9)

The computing device of claim 9, wherein a single generic identification is used for a plurality of network devices.

### Claim 11 (depends on 1)

The computing device of claim 1, wherein the generic identification comprises a plurality of random bytes.

### Claim 12 (depends on 1)

The computing device of claim 1, wherein the generic identification comprises bits which represent a device manufacturer and additional random bits.

### Claim 13 (depends on 1)

The computing device of claim 1, wherein the memory includes further instructions that, when executed by the processor cause the processor to simulate a factory reset process to assign a generic identification to the network-enabled device.

### Claim 14 (depends on 1)

The computing device of claim 1, wherein the memory includes further instructions that, when executed by the processor, cause the processor to filter encrypted secure socket layer data from one or more computing devices and replace a received Unique Device Identifier with a generic identification.

### Claim 15

A method of creating a generic identification for a network-enabled computing device comprising:
(a) receiving an identification from the network-enabled device at an input/output circuit of a masking device;
(b) communicating the received identification to a processor of the masking device where the processor is physically configured to dynamically assign a unique generic identification to the network-enabled computing device;
(c) storing the received identification and the unique generic identification in a memory of the masking device as being related;
(d) communicating, with the input/output circuit, the unique generic identification for the network-enabled device to one or more other network-enabled devices, and
(e) intercepting, at the input/output circuit, a plurality of device identifications from HyperText Transfer Protocol traffic on a network and replacing each of the plurality of device identifications with a unique generic device identification.

### Claim 16 (depends on 15)

The method claim 15, further comprising simulating a factory reset process to assign a generic identification to the network-enabled device.

### Claim 17 (depends on 15)

The method of claim 15, further comprising filtering encrypted secure socket layer data from one or more computing devices and replacing a Unique Device Identifier from the encrypted secure socket layer data with a generic identification.