US 12,003,649 B2 · Anonymous event attestation with group signatures

Abstract

Methods, systems, and computer media provide attestation tokens that protect the integrity of communications transmitted from client devices, while at the same time avoiding the use of stable device identifiers that could be used to track client devices or their users. In one approach, client devices can receive anonymous certificates from a device integrity computing system signifying membership in a selected device trustworthiness group, and attestation tokens can be signed anonymously with the anonymous certificates using a group signature scheme. Client devices can include throttlers imposing limits on the quantity of attestation tokens created by the client device.

Claims21

Dependent claims

A method performed by a client device, comprising:

transmitting, to a device integrity computing system, a first request for an anonymous certificate, the request including device-level fraud detection signals for the client device;
receiving, from the device integrity computing system, the anonymous certificate, wherein the anonymous certificate corresponds to a given signature group selected from a set of device trustworthiness groups based at least on the device-level fraud detection signals, wherein each device trustworthiness group corresponds to a respective category of trustworthiness;
creating an anonymous attestation token comprising (i) a set of data comprising a second request and an attestation token creation timestamp indicating a time of creation of the anonymous attestation token, and (ii) a digital signature of the set of data generated by applying a group signature function to the set of data and the anonymous certificate;
and
transmitting the attestation token to a recipient.

2 more elements

A system, comprising:

one or more processors of a client device;
and
one or more memories having stored thereon computer readable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
transmitting, to a device integrity computing system, a first request for an anonymous certificate, the request including device-level fraud detection signals for the client device;
receiving, from the device integrity computing system, the anonymous certificate, wherein the anonymous certificate corresponds to a given signature group selected from a set of device trustworthiness groups based at least on the device-level fraud detection signals, wherein each device trustworthiness group corresponds to a respective category of trustworthiness;
creating an anonymous attestation token comprising (i) a set of data comprising a second request and an attestation token creation timestamp indicating a time of creation of the anonymous attestation token, and (ii) a digital signature of the set of data generated by applying a group signature function to the set of data and the anonymous certificate;
and
transmitting the attestation token to a recipient.

5 more elements

Dependencies are inferred from the claim text.

Anonymous event attestation with group signatures

Life of this patent

Anonymous event attestation with group signatures

Life of this patent

Abstract

Claims21