Method for controlling access to computer resources utilizing user device fingerprints

A non-transitory computer-readable storage medium storing instructions, which when executed by a processing device of a computer system;

• cause the processing device to:
• receive a request for a computer resource from a first user device;
• obtain, from the first user device, an encrypted persistent cookie responsive to determining that the encrypted persistent cookie is present on the first user device, wherein the encrypted persistent cookie comprises a fingerprint signature field comprising a previous device fingerprint encoded into the fingerprint signature field as part of a previous session;
• obtain, from the first user device, an obtained device fingerprint of the first user device;
• compare, by the processing device, the obtained device fingerprint with the previous device fingerprint of the fingerprint signature field to derive a fingerprint variance representing a difference between the obtained device fingerprint and the previous device fingerprint of the fingerprint signature field;
• and
• process the request for the computer resource based on the fingerprint variance,
• wherein, to process the request for the computer resource based on the fingerprint variance, the processing device is to:
• identify a device change based on determining whether the fingerprint variance provides an indication that the encrypted persistent cookie was sourced from a second user device and the obtained device fingerprint is of the first user device that is distinct from the second user device;
• responsive to the device change being identified, transmit an authentication request to the first user device;
• responsive to the device change not being identified, determine whether the encrypted persistent cookie is valid and is associated with a legitimate user device;
• and
• responsive to a determination that the encrypted persistent cookie is valid and is associated with the legitimate user device, provide the first user device access to the computer resource.

A computer system comprising:

• a processing device;
• and
• a storage medium storing instructions, which when executed by the processing device, cause the processing device to:
• receive a request for a computer resource from a first user device;
• obtain, from the first user device, an encrypted persistent cookie responsive to determining that the encrypted persistent cookie is present on the first user device, wherein the encrypted persistent cookie comprises a fingerprint signature field comprising a previous device fingerprint encoded into the fingerprint signature field as part of a previous session;
• obtain, from the first user device, an obtained device fingerprint of the first user device;
• compare the obtained device fingerprint with the previous device fingerprint of the fingerprint signature field to derive a fingerprint variance representing a difference between the obtained device fingerprint and the previous device fingerprint of the fingerprint signature field;
• and
• process the request for the computer resource based on the fingerprint, variance, wherein, to process the request for the computer resource based on the fingerprint variance, the processing device is to:
• identify a device change based on determining whether the fingerprint variance provides an indication that the encrypted persistent cookie was sourced from a second user device and the Obtained device fingerprint is of the first user device that is distinct from the second user device,
• responsive to the device change being identified, transmit an authentication request to the first user device;
• responsive to the device change not being identified, determine whether the encrypted persistent cookie is valid and is associated with a legitimate user device;
• and
• responsive to a determination that the encrypted persistent cookie is valid and is associated with the legitimate user device, provide the first user device access to the computer resource.