US 11,030,293 B2Granted

Method and system for configurable device fingerprinting

AssigneeBeijing Didi Infinity Technology and Development Co., Ltd.

InventorsChandrasekhar Rentachintala, Shengyong Deng, Qingdi Liu

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods and systems for configurable device fingerprinting and/or achieving communications with enhanced security are disclosed herein. In one example embodiment, a method of configurable device fingerprinting includes storing, at a server, first information regarding one or more selected system attributes, and further includes receiving, at the server, a first signal requesting that a first client device be registered and including system information pertaining to the first client device. Also, the method includes extracting, from the system information, relevant portions of the system information corresponding to the one or more selected system attributes, where the server determines a fingerprint of the first client device based at least in part the relevant portions. Additionally, the method includes generating a first identifier pertaining to the first client device at least indirectly in response to the extracting of the relevant portions, and sending the first identifier for receipt by the first client device.

Claims19

Dependent claims

A method of configurable device fingerprinting, the method comprising:

providing, by a server, a user interface comprising a list of selectable system attributes of a first client device that includes:
a basic input/output system universal unique identifier (biosUuid) attribute;
an operating system product identification number (osProductId) attribute;
a system serial number;
a hard disk serial number;
a media access control (MAC) address;
an internet protocol (IP) address;
and
a hostname;
rendering the list of selectable system attributes on the user interface;
receiving, from a second device via the user interface, a selection of at least three of the selectable system attributes to generate first information including respective values corresponding to the at least three of the selectable system attributes that correspond to the first client device,
wherein the at least three of the selected system attributes includes:
the biosUuid;
the osProductId;
and
at least one of:
the system serial number;
the hard disk serial number;
the MAC address;
the IP address;
or
the hostname;
storing, at the server, the first information;
receiving, at the server, a first signal requesting that a first client device be registered, the first signal including system information corresponding to the first client device;
determining a fingerprint of the first client device based on a matching of at least a portion of the system information with the stored first information;
generating a first identifier corresponding to the first client device based at least in part on the portion of the system information that matched the stored first information;
storing, by the server, the fingerprint and corresponding first identifier;
sending, by the server, the first identifier to the first client device;
receiving, by the server, a first token request that includes the first identifier and the system information;
verifying, by the server, the first token request by comparing the received first identifier and the received system information with the stored fingerprint and the stored first identifier;
and
in response to the verification:
determining that the first token request was sent by the first client;
and
sending a token to the first client,
wherein subsequent communications between the first client and the server are secured using the token.

33 more elements

A system comprising:

one or more processors;
one or more machine-readable, non-transitory storage mediums that include instructions configured to cause the one or more processors to perform operations including:
providing, by a server, a user interface comprising a list of selectable system attributes of a first client device that includes:
a basic input/output system universal unique identifier (biosUuid) attribute;
an operating system product identification number (osProductId) attribute;
a system serial number;
a hard disk serial number;
a media access control (MAC) address;
an internet protocol (IP) address;
and
a hostname;
rendering the list of selectable system attributes on the user interface;
receiving, from a second device via the user interface, a selection of at least three of the selectable system attributes to generate first information including respective values corresponding to the at least three of the selectable system attributes that correspond to the first client device,
wherein the at least three of the selected system attributes includes:
the biosUuid;
the osProductId;
and
at least one of:
the system serial number;
the hard disk serial number;
the MAC address;
the IP address;
or
the hostname;
storing, at the server, the first information;
receiving, at the server, a first signal requesting that a first client device be registered, the first signal including system information corresponding to the first client device;
determining a fingerprint of the first client device based on a matching of at least a portion of the system information with the stored first information;
generating a first identifier corresponding to the first client device based at least in part on the portion of the system information that matched the stored first information;
storing, by the server, the fingerprint and corresponding first identifier;
sending, by the server, the first identifier to the first client device;
receiving, by the server, a first token request that includes the first identifier and the system information;
verifying, by the server, the first token request by comparing the received first identifier and the received system information with the stored fingerprint and the stored first identifier;
and
in response to the verification:
determining that the first token request was sent by the first client;
and
sending a token to the first client,
wherein subsequent communications between the first client and the server are secured using the token.

35 more elements

A non-transitory computer-program product tangibly embodied in a machine-readable non-transitory storage medium that includes instructions configured to cause one or more processors to perform operations including:

providing, by a server, a user interface comprising a list of selectable system attributes of a first client device that includes:
a basic input/output system universal unique identifier (biosUuid) attribute;
an operating system product identification number (osProductId) attribute;
a system serial number;
a hard disk serial number;
a media access control (MAC) address;
an internet protocol (IP) address;
and
a hostname:
rendering the list of selectable system attributes on the user interface;
receiving, from a second device via the user interface, a selection of at least three of the selectable system attributes to generate first information including respective values corresponding to the at least three of the selectable system attributes that correspond to the first client device,
wherein the at least three of the selected system attributes includes:
the biosUuid;
the osProductId;
and
at least one of:
the system serial number;
the hard disk serial number;
the MAC address;
the IP address;
or
the hostname;
storing, at the server, the first information;
receiving, at the server, a first signal requesting that a first client device be registered, the first signal including system information corresponding to the first client device;
determining a fingerprint of the first client device based on a matching of at least a portion of the system information with the stored first information;
generating a first identifier corresponding to the first client device based at least in part on the portion of the system information that matched the stored first information;
storing, by the server, the fingerprint and corresponding first identifier;
sending, by the server, the first identifier to the first client device;
receiving, by the server, a first token request that includes the first identifier and the system information;
verifying, by the server, the first token request by comparing the received first identifier and the received system information with the stored fingerprint and the stored first identifier;
and
in response to the verification:
determining that the first token request was sent by the first client;
and
sending a token to the first client,
wherein subsequent communications between the first client and the server are secured using the token.

33 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/236,820Filed 31 Dec 2018
Published: US 2020/0210559 A12 Jul 2020
Granted: 8 Jun 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification16 codes

G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
G06F 21/32
User authentication: using biometric data, e.g. fingerprints, iris scans or voiceprints
G06F 21/43
Using separate channels for security data: wireless channels
H04L 63/062
For supporting key management in a packet data network: for key distribution, e.g. centrally by trusted party

Family

US 2020/0210559 A1Pre-grant publication · published 2 Jul 2020
US 11,030,293 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key