# US 12,225,137 B2 · Authentication and binding of multiple devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,137 B2 - Document ID: US12225137B2 - Status: Granted - Kind: B2 - Application number: 18/468,310 - Filed: 2023-09-15 - Published: 2024-01-18 - Granted: 2025-02-11 - Earliest claimed: 2011-08-17 - Assignees: Comcast Cable Communications, LLC - Applicants: Comcast Cable Communications, LLC - Inventors: James W. Fahrny; Kyong Park - Web page: https://patentgrep.com/patent/US12225137B2 ## CPC - H04L 9/3247: {involving digital signatures} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04L 63/102: {Entity profiles} - H04L 63/105: {Multiple levels of security} - H04L 63/126: {the source of the received data} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods are described that relate to authentication and/or binding of multiple devices with varying security profiles. In one aspect, a first device with a higher security profile may vouch for the authenticity of a second device with a lower security profile when the second device requests access for content from a content provider. The vouching process may be implemented by allowing the first device to overlay its digital signature on a registration request that has been signed and transmitted by the second device. The second device with the lower security profile may access content from the content provider or source for a predetermined time period, even when the second device does not access content through the first device. ## Claims ### Claim 1 A content provider device comprising: one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the content provider device to: receive a request to provide a first device with one or more access privileges, wherein the request comprises: a first digital signature based on a first security profile for the first device, wherein the first digital signature in the request is signed, by a second device, using a second digital signature, and wherein the second digital signature is based on a second security profile for the second device; determine, based on the first digital signature and the second digital signature, whether the first device should be temporarily granted access to content; and provide, based on determining that the first device should be temporarily granted access to the content, the first device access to the content by temporarily modifying the first security profile for the first device. ### Claim 2 (depends on 1) The content provider device of claim 1, wherein the instructions, when executed by the one or more processors, cause the content provider device to temporarily modify the first security profile for the first device by sending, to the first device, a response configured to provide the first device a new security profile. ### Claim 3 (depends on 1) The content provider device of claim 1, wherein the instructions, when executed by the one or more processors, cause the content provider device to provide the first device access to the content further based on determining that the first device does not possess an adequate security profile for access to the content. ### Claim 4 (depends on 1) The content provider device of claim 1, wherein the second security profile is based on a physical address associated with the second device. ### Claim 5 (depends on 1) The content provider device of claim 1, wherein the second security profile is based on a strength of an encryption algorithm used by the second device. ### Claim 6 (depends on 1) The content provider device of claim 1, wherein the second security profile is based on a structural security of the second device. ### Claim 7 (depends on 1) The content provider device of claim 1, wherein the second security profile is based on a strength of encrypted seed values used by the second device. ### Claim 8 A method comprising: receiving, by a content provider device, a request to provide a first device with one or more access privileges, wherein the request comprises: a first digital signature based on a first security profile for the first device, wherein the first digital signature in the request is signed, by a second device, using a second digital signature, and wherein the second digital signature is based on a second security profile for the second device; determining, by the content provider device and based on the first digital signature and the second digital signature, whether the first device should be temporarily granted access to content; and providing, by the content provider device and based on determining that the first device should be temporarily granted access to the content, the first device access to the content by temporarily modifying the first security profile for the first device. ### Claim 9 (depends on 8) The method of claim 8, wherein temporarily modifying the first security profile for the first device comprises sending, to the first device, a response configured to provide the first device a new security profile. ### Claim 10 (depends on 8) The method of claim 8, wherein the providing the first device access to the content is further based on determining that the first device does not possess an adequate security profile for access to the content. ### Claim 11 (depends on 8) The method of claim 8, wherein the second security profile is based on a physical address associated with the second device. ### Claim 12 (depends on 8) The method of claim 8, wherein the second security profile is based on a strength of an encryption algorithm used by the second device. ### Claim 13 (depends on 8) The method of claim 8, wherein the second security profile is based on a structural security of the second device. ### Claim 14 (depends on 8) The method of claim 8, wherein the second security profile is based on a strength of encrypted seed values used by the second device. ### Claim 15 One or more non-transitory computer-readable media storing instructions that, when executed, cause: receiving, by a content provider device, a request to provide a first device with one or more access privileges, wherein the request comprises: a first digital signature based on a first security profile for the first device, wherein the first digital signature in the request is signed, by a second device, using a second digital signature, and wherein the second digital signature is based on a second security profile for the second device; determining, by the content provider device and based on the first digital signature and the second digital signature, whether the first device should be temporarily granted access to content; and providing, by the content provider device and based on determining that the first device should be temporarily granted access to the content, the first device access to the content by temporarily modifying the first security profile for the first device. ### Claim 16 (depends on 15) The one or more non-transitory computer-readable media of claim 15, wherein the instructions, when executed, cause the providing the first device access to the content by temporarily modifying the first security profile for the first device by causing sending, to the first device, a response configured to provide the first device a new security profile. ### Claim 17 (depends on 15) The one or more non-transitory computer-readable media of claim 15, wherein the instructions, when executed, cause determining that the first device does not possess an adequate security profile for access to the content. ### Claim 18 (depends on 15) The one or more non-transitory computer-readable media of claim 15, wherein the second security profile is based on a physical address associated with the second device. ### Claim 19 (depends on 15) The one or more non-transitory computer-readable media of claim 15, wherein the second security profile is based on a strength of an encryption algorithm used by the second device. ### Claim 20 (depends on 15) The one or more non-transitory computer-readable media of claim 15, wherein the second security profile is based on a structural security of the second device.