Token node locking with fingerprints authenticated by digital certificates

A client device for receiving secure data, comprising:

• a processor;
• a memory, communicatively coupled to the processor, the memory storing processor instructions comprising processor instructions for:
• (a) accepting a request in the client device to provide secure data to the client device, the client device having a communicatively coupled token having both a token ID and a digital certificate generated by a certificate authority (CA), the certificate having client device fingerprint data generated from client device parameters;
• (b) regenerating the client device fingerprint data from the client device parameters;
• (c) determining, in the client device, differences between the client device fingerprint data of the digital certificate from the regenerated client device fingerprint data;
• (d) selectively transmitting a request to a secure data service to provide secure data based upon the determination, comprising:
• if the client device fingerprint data of the digital certificate matches the regenerated client device fingerprint data, transmitting the request to a secure data service to provide secure data to the client device;
• if the client device fingerprint data of the digital certificate does not match the regenerated client device fingerprint data, determining if differences between the client device fingerprint data of the digital certificate and the regenerated client device fingerprint data are acceptable;
• if differences between the client device fingerprint data of the digital certificate and the regenerated client device fingerprint data are acceptable:
• transmitting the request to a secure data service to provide secure data to the client device;
• receiving the secure data;
• transmitting the client device regenerated fingerprint data and token ID to the CA;
• receiving a further digital certificate generated by the CA having the client device regenerated fingerprint data;
• and
• storing the further digital certificate in the token.

A apparatus for receiving secure data, comprising:

• means for accepting a request in a client device to provide secure data to the client device, the client device having a token having both a token ID and a digital certificate generated by a certificate authority (CA) having client device fingerprint data generated from client device parameters;
• means for regenerating the client device fingerprint data from the client device parameters;
• means for determining, in the client device, differences between the client device fingerprint data of the digital certificate from the regenerated client device fingerprint data;
• means for selectively transmitting a request to a secure data service to provide secure data based upon the determination, comprising:
• means for transmitting the request to a secure data service to provide secure data to the client device if the client device fingerprint data of the digital certificate matches the regenerated client device fingerprint data;
• means for determining if differences between the client device fingerprint data of the digital certificate and the regenerated client device fingerprint data are acceptable if the client device fingerprint data of the digital certificate does not match the regenerated client device fingerprint data;
• and
• if differences between the client device fingerprint data of the digital certificate and the regenerated client device fingerprint data are acceptable, means for:
• transmitting the request to a secure data service to provide secure data to the client device;
• receiving the secure data;
• transmitting the client device regenerated fingerprint data and token ID to the CA;
• receiving a further digital certificate generated by the CA having the client device regenerated fingerprint data;
• and
• storing the further digital certificate in the token.