Methods and systems for identifying a client computer system

An apparatus for identifying a client computer system comprising:

• a processor;
• and
• a memory configured to store data, said apparatus being associated with a network and said memory being in communication with said processor and having instructions stored thereon which, when read and executed by said processor, cause said apparatus to:
• grant access to a client computer system;
• capture input data from the client computer system, the data being generated by activity of an input device included in the client computer system;
• calculate temporal differences from the captured input data;
• calculate a distribution from the temporal differences;
• calculate from the captured input data a clustering tendency and a clustering period for the calculated distribution, the clustering tendency and clustering period being determined based on characteristics of the computer system independent of user input actions;
• compare the calculated clustering tendency and period against the clustering tendency and clustering period, respectively, of other client computers;
• and
• identify the client computer system as a matching client computer system when the calculated clustering tendency and clustering period match the clustering tendency and clustering period of one of the other client computer systems.

A method for identifying a client computer system by a server computer system comprising the steps of:

• granting access, by the server computer system, to the client computer system;
• capturing input device data, by the client computer system, generated by activity of at least one input device included in the client computer system;
• calculating, by the client computer system, a distribution for each of the at least one input devices from the captured data;
• calculating from the captured input device data, by the client computer system, a clustering tendency and a clustering period for each calculated distribution, each clustering tendency and each clustering period being determined based on characteristics of the respective input device independent of user input actions;
• comparing the clustering tendency and period calculated for each input device against the corresponding data of other client computer systems;
• and
• identifying, by the server computer system, the client computer system as a matching client system when the calculated clustering tendencies and periods match the corresponding data for one of the other client computer systems.