# US 12,002,060 B2 · Method and system for using random and derivative device identifiers to authenticate, and to deliver targeted marketing and other customized communications to mobile and other devices, with user privacy and security central to the design

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,002,060 B2
- Document ID: US12002060B2
- Status: Granted
- Kind: B2
- Application number: 17/572,336
- Filed: 2022-01-10
- Published: 2022-05-19
- Granted: 2024-06-04
- Earliest claimed: 2012-05-17
- Assignees: PoKos Communications Corp
- Applicants: Timo Platt; Stephan Krueger; Barbara Roselle
- Inventors: Timo Platt; Stephan Krueger; Barbara Roselle
- Web page: https://patentgrep.com/patent/US12002060B2

## CPC

- G06Q 30/02: Marketing; Price estimation or determination; Fundraising
- C07F 5/02: Boron compounds
- C07F 5/027: {Organoboranes and organoborohydrides}
- C07F 7/0816: {said ring comprising Si as a ring atom}
- C09K 11/06: containing organic luminescent materials
- G06Q 30/0256: {User search}
- G16H 50/80: for detecting, monitoring or modelling epidemics or pandemics, e.g. flu
- H04L 41/12: Discovery or management of network topologies
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 65/403: Arrangements for multi-party communication, e.g. for conferences (data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15)
- H04L 67/125: involving control of end-device applications over a network
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services
- H04L 67/52: specially adapted for the location of the user terminal
- H04W 4/02: Services making use of location information
- H04W 4/029: Location-based management or tracking services
- H04W 4/06: Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
- H04W 8/005: {Discovery of network devices, e.g. terminals}
- H04W 12/06: Authentication
- H04W 76/14: Direct-mode setup
- H10K 50/11: characterised by the electroluminescent [EL] layers
- H10K 85/40: Organosilicon compounds, e.g. TIPS pentacene
- H10K 85/657: {Polycyclic condensed heteroaromatic hydrocarbons}
- H10K 85/6572: {comprising only nitrogen in the heteroaromatic polycondensed ring system, e.g. phenanthroline or carbazole}
- H10K 50/15: Hole transporting layers
- H10K 50/16: Electron transporting layers
- H10K 2101/40: Interrelation of parameters between multiple constituent active layers or sublayers, e.g. HOMO values in adjacent layers
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- C07F: ACYCLIC, CARBOCYCLIC OR HETEROCYCLIC COMPOUNDS CONTAINING ELEMENTS OTHER THAN CARBON, HYDROGEN, HALOGEN, OXYGEN, NITROGEN, SULFUR, SELENIUM OR TELLURIUM (metal-containing porphyrins C07D487/22)
- C09K: MATERIALS FOR MISCELLANEOUS APPLICATIONS, NOT PROVIDED FOR ELSEWHERE
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H10K: ORGANIC ELECTRIC SOLID-STATE DEVICES

## Abstract

A communications method is established using random and derivative device identifiers to authenticate, and to deliver targeted marketing and other customized communications to, app-tracking transparency and other devices so as to enable the continued privacy and anonymity of the device users.

## Claims

### Claim 1

A new privacy-preserving method for authenticating devices and their users communicating over at least one of the following type of networks (jointly herein, a “Universal Network”): the internet; public switched network; cellular or wireless digital network; wide-area network; local-area network; or any other wired or wireless network that is not a hyper-local or other proximity-based network (i.e., a distance-limited network based on NFC or bluetooth technology that covers only a user's vicinity, i.e., typically at most a few hundred meters), the method comprising:
A software of firmware client on any phone, tablet, watch, laptop, computer or other device (“Initiating Device”), using variable identification information, assigns a unique device identifier (“Tracing Key”), selected by using either:
generation of a static Tracing Key (“STK”) based on at least one of the following identifiers associated with the Initiating Device (including its software and firmware): a one-time tracing key, randomly generated one-time tracing key, and any other variable identification dataset, or
generation of a random dynamically changing Tracing Key (“RTK”); and
Using a client application (herein, a sixth-sense client or, “SS Client”) on an Initiating Device to conduct at least one of the following functions on at least one Universal Network: detect the Tracing Key stored on at least one recipient device (“Detected Device”) and authenticate the at least one Detected Device based on its Tracing Key.

### Claim 2 (depends on 1)

A communications authentication method described in claim 1, wherein an Initiating Device or a Detected Device (separately, a “First Device”) may be configured to enable at least one of the following authentication, privacy and security capabilities:
Encryption of metadata exchanged by the First Device;
Be in public mode wherein the First Device can detect the Tracing Key of the at least one other device (“Other Device”);
Periodically generate a random RTK (the “Periodic Tracing Key” or “PTK”);
Using the SS Client on the First Device to conduct at least one of the following functions: detect a Periodic Tracing Key stored on the at least one Other Device and authenticate the at least one Other Device based on its PTK;
Be in public mode wherein the First Device can detect on the at least one Other Device at least one of the following keys: at least one key of a set comprised of one or more of its: STK, RTK, and PTK (jointly and separately herein, “Base Tracing Key” or “BTK”); a key (“Derived Key”) on the at least one Other Device derived from its BTK; or a key (“Further-Derived Key”) on the at least one Other Device derived from said Derived Key (Derived Key and Further-Derived Key jointly and separately herein, “Derivative Key”);
Periodically generate a random RTK based on a Derivative Key of the said First Device (a “Random Derivative Key” or “RDK”);
Enabling the SS Client on the First Device to detect at least one of the BTK, Derivative Key, and RDK (jointly and separately, an “AuthKey”) stored on the at least one Other Device and authenticate the at least one Other Device based on its AuthKey;
Authenticating the at least one Other Device by enabling the SS Client on the First Device to require both device and user authentication, by coupling an AuthKey for device-to-device authentication with receipt from the at least one Other Device of confirmation (a “UserAuth”) that its current user is authorized by the First Device to access the First Device based on at least one item (a “Biometric”) from a set comprised of facial recognition, fingerprinting and other biometric identifier; and
Authenticating the at least one Other Device by enabling the SS Client on the First Device to require both an AuthKey and an UserAuth confirmed by the at least one Other Device based on at least one item from the following set: a password, token, code received by the at least one Other Device from or on behalf of the First Device, and Biometric.

### Claim 3

A new privacy-preserving method for targeting users of phones, tablets, watches, laptops, computers or other devices (a) communicating over at least one of the following type of networks (jointly herein, a “Universal Network”): the internet; public switched network; cellular or wireless digital network; wide-area network; local-area network; or any other wired or wireless network that is not a hyper-local or other proximity-based network (i.e., a distance-limited network based on NFC or bluetooth technology that covers only a user's vicinity, i.e., typically at most a few hundred meters), and (b) equipped with app-tracking-transparency or other privacy enhancing software or functionality, the method comprising:
A software or firmware client one any phone, tablet, watch, laptop, computer or other device (“Targeted Device”), using variable identification information, assigns a unique device identifier (“Tracing Key”), selected by using either:
generation of a static Tracing Key (“STK”) based on at least one of the following identifiers associated with the Targeted Device (including its software and firmware): a one-time tracing key, randomly generated one-time tracing key, and any other variable identification dataset, or
generation of a random or dynamically changing Tracing Key (“RTK”); and
Using a client application (herein, a sixth-sense client or, “SS Client”) on a broadcast device to conduct at least one of the following functions on the at least one Universal Network: detect the Tracing Key stored on at least one Targeted Device (“Detected Device”) and authenticate the at least one Detected Device based on its Tracing Key.

### Claim 4 (depends on 3)

A communications method described in claim 3, wherein a Targeted Device or a broadcast device (separately, a “First Device”) may be configured to enable at least one of the following targeting, privacy and security capabilities:
Encryption of metadata exchanged by the First Device;
Be in public mode wherein the First Device can detect the Tracing Key of the at least one other device (“Other Device”);
Periodically generate a random RTK (the “Periodic Tracing Key” or “PTK”);
Using the SS Client on the First Device to conduct at least one of the following functions: detect a Periodic Tracing Key stored on the at least one Other Device and authenticate the at least one Other Device based on its PTK;
Be in public mode wherein the First Device can detect on the at least one Other Device at least one of the following keys: at least one of a set comprised of one or more of its: STK, RTK, and PTK (jointly and separately herein, a “Base Tracing Key” or “BTK”); a key (“Derived Key”) on the said Other Device derived from its BTK; or a key (“Further-Derived Key”) on the Other Device derived from said Derived Key (Derived Key and Further-Derived Key jointly herein, “Derivative Key”);
Periodically generate a random RTK based on a Derivative Key of the said First Device (a “Random Derivative Key” or “RDK”);
Enabling the SS Client on the Other Device to detect at least one of the BTK, Derivative Key, and RDK (jointly and separately, an “AuthKey”) stored on the First Device and authenticate the First Device based on its AuthKey;
Authenticating the at least one Other Device by enabling the SS Client on the First Device to require both device and user authentication, by coupling an AuthKey for device-to-device authentication with receipt from the at least one Other Device of confirmation (a “UserAuth”) that its current user is authorized by the First Device to access the First Device based on at least one item (a “Biometric”) from a set comprised of facial recognition, fingerprinting and other biometric identifier; and
Authenticating the at least one Other Device by enabling the SS Client on the First Device to require both an AuthKey and an UserAuth confirmed by the at least one Other Device based on at least one item from the following set: a password, token, code received by the at least one Other Device from or on behalf of the First Device, and Biometric.

### Claim 5

A new privacy-preserving method for authenticating devices and their users communicating over at least one of the following type of networks (jointly herein, a “Universal Network”): the internet; public switched network; cellular or wireless digital network; wide-area network; local-area network; or any other wired or wireless network that is not a hyper-local or other proximity-based network (i.e., a distance-limited network based on NFC or bluetooth technology that covers only a user's vicinity, i.e., typically at most a few hundred meters), the method comprising:
Detection by a phone, tablet, watch, laptop, computer or other device (the “Inquiring Device”) of a unique device identifier (“Matching Key”) generated by at least one third-party device (a “Responding Device”) communicating over the least one Universal Network based on at least one item from a set comprised of at least one of the following identifiers (such set of identifiers herein the “Match Set”): any part or all of an alphabetized, numeric, or alphanumeric letter, digit, character, word, phrase, number, sequence, password, code, puzzle, listing, display, shape, symbol, image, equation, formula, music, audio clip, content, media or other dataset; and
Authentication by the Inquiring Device of the at least one Responding Device if a software or firmware client on the Inquiring Device determines that the Matching Key from the at least one such Responding Device matches, completes, solves, precedes, succeeds, derives from, or relates to (jointly herein, “Matches”, or in the case of use in the gerund form, “Matching”) a private key (the “Host Key”) derived from the same Match Set stored on or accessible to the Inquiring Device.

### Claim 6 (depends on 5)

A communications authentication method described in claim 5, wherein the Inquiring Device may be configured to enable at least one of the following authentication, privacy and security capabilities:
Authenticate the Responding Device by Matching two or more Matching Keys periodically generated by the Responding Device with an equal number of Host Keys derived by the Inquiring Device from the same Match Set stored on or accessible to the Inquiring Device;
Authenticate the Responding Device by Matching two or more Match Keys randomly generated by the Responding Device with an equal number of Host Keys derived by the Inquiring Device from the same Match Set stored on or accessible to the Inquiring Device;
Authenticating the Responding Device by enabling the SS Client on the Inquiring Device to require both device and user authentication, by coupling a Match Key or Match Keys for device-to-device authentication with receipt from the Responding Device of confirmation (a “UserAuth”) that its current user is authorized by the Inquiring Device to access the Inquiring Device based on at least one item (a “Biometric”) from a set comprised of facial recognition, fingerprinting and other biometric identifier;
Authenticating the Responding Device by enabling the SS Client on the Inquiring Device to require both the Match Key or Match Keys and a UserAuth confirmed by the Responding Device based on at least one item (a “Second ID”) from the following set: a password; token; code received by the Responding Device from or on behalf of the Inquiring Device; and Biometric; and
Authenticating the Responding Device by enabling the SS Client on the Inquiring Device to require two or more items from a set comprised of: the Match Key or Match Keys, Second ID, and a static or random tracing key generated by the Responding Device.