# US 11,909,728 B2 · Network resource access control methods and systems using transactional artifacts > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,909,728 B2 - Document ID: US11909728B2 - Status: Granted - Kind: B2 - Application number: 15/257,270 - Filed: 2016-09-06 - Published: 2017-01-19 - Granted: 2024-02-20 - Earliest claimed: 2007-09-24 - Assignees: Cheng Holdings, LLC - Applicants: Cheng Holdings, LLC - Inventors: Thomas W. Lynch - Web page: https://patentgrep.com/patent/US11909728B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - G06F 21/31: User authentication - H04L 63/10: {for controlling access to devices or network resources} - G06F 2221/2101: Auditing as a secondary aspect - G06F 2221/2129: Authenticate client device independently of the user - H04L 2463/101: applying security measures for digital rights management - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Methods and systems are provided for use with digital data processing systems to control or otherwise limit access to networked resources based, at least in part, on transactional artifacts and/or derived artifacts. ## Claims ### Claim 1 A system comprising: a first device comprising at least one processor; and a second device comprising at least another processor, wherein the at least one processor of the first device is configured to: generate a verifier at the first device by processing a first artifact stored on the first device; receive a credential from the second device after the verifier is generated; and update the first artifact based on a first transactional history between the first device and the second device, wherein the first transactional history is stored on the first device, wherein the at least another processor of the second device is configured to: update a second artifact stored on the second device based on a second transactional history between the first device and the second device, wherein the second transactional history is stored on the second device; and generate the credential by processing the second artifact stored on the second device, and wherein the at least one processor of the first device is further configured to: determine if a transaction should be authorized based on a comparison between the credential and the verifier, wherein the comparison is performed responsive to a request for the transaction; and transmit information indicative of the comparison to the second device; and execute the transaction when the information indicative of the comparison indicates the transaction should be authorized, wherein the first transactional history and the second transactional history being associated with a matching transactional relationship indicates the transaction should be authorized. ### Claim 2 (depends on 1) The system of claim 1, wherein the first device is associated with a content provider and wherein the second device is associated with a content requester. ### Claim 3 (depends on 2) The system of claim 2, wherein the at least one processor of the first device further comprises a first updater configured to modify at least a portion of the first artifact based on the first transactional history stored on the first device to generate a modified first artifact, and the first device further configured to store the modified first artifact in a memory of the first device. ### Claim 4 (depends on 3) The system of claim 3, wherein the at least another processor of the second device comprises a second updater configured to modify at least a portion of the second artifact based on the second transactional history stored on the second device to generate a modified second artifact, and the second device further configured to store the modified second artifact in a memory of the second device. ### Claim 5 (depends on 4) The system of claim 4, wherein the at least one processor of the first device is further configured to: retrieve the modified first artifact from the memory of the first device responsive to a request for a subsequent transaction; and compare another verifier based on the modified first artifact to another credential based on the modified second artifact to determine if the subsequent transaction should be authorized. ### Claim 6 (depends on 5) The system of claim 5, wherein the at least one processor of the first device is configured to generate the another verifier based on the modified first artifact and is further configured to receive, from the second device, the another credential based on the modified second artifact. ### Claim 7 (depends on 2) The system of claim 2, wherein the second device is a computing platform is the second device, wherein the second device is associated with a content requester, and wherein the first device is associated with a content provider. ### Claim 8 (depends on 7) The system of claim 7, wherein the computing platform is another device different from the first device and the second device. ### Claim 9 (depends on 1) The system of claim 1, wherein the first artifact stored on the first device comprises initial data before the first transactional history, and wherein the updated first artifact based on the first transactional history comprises the initial data and updated data. ### Claim 10 A method comprising: generating a verifier at a first device by processing a first artifact stored on the first device; receiving a credential from a second device after the verifier is generated; updating the first artifact based on a first transactional history between the first device and the second device, wherein the first transactional history is stored on the first device; updating a second artifact stored on the second device based on a second transactional history between the first device and the second device, wherein the second transactional history is stored on the second device; generating the credential by processing the second artifact stored on the second device; determining if a transaction should be authorized based on a comparison between the credential and the verifier, wherein the comparison is performed responsive to a request for the transaction; transmitting information indicative of the comparison to the second device; and executing the transaction when the information indicative of the comparison indicates the transaction should be authorized, wherein the first transactional history and the second transactional history being associated with a matching transactional relationship indicates the transaction should be authorized. ### Claim 11 (depends on 10) The method of claim 10, further comprising: modifying at least a portion of the first artifact based on the first transactional history stored on the first device to generate a modified first artifact, and storing the modified first artifact in a memory of the first device. ### Claim 12 (depends on 11) The method of claim 11, further comprising: modifying at least a portion of the second artifact based on the second transactional history stored on the second device to generate a modified second artifact; and storing the modified second artifact in a memory of the second device. ### Claim 13 (depends on 12) The method of claim 12, further comprising: retrieving the modified first artifact from the memory of the first device responsive to a request for a subsequent transaction; and comparing another verifier based on the modified first artifact to another credential based on the modified second artifact to determine if the subsequent transaction should be authorized. ### Claim 14 (depends on 13) The method of claim 13, further comprising: generating the another verifier based on the modified first artifact; and receiving, from the second device, the another credential based on the modified second artifact.