Authentication Using Device ID

A non-transitory computer-readable storage medium having computer-executable program instructions stored thereon that, when executed by a processor, cause the processor to:

• receive an authentication request, wherein the authentication request comprises device attributes;
• generate a device ID using the device attributes;
• create an authentication token, wherein the authentication token is signed with the device ID;
• transmit the authentication token;
• receive a request to access protected resources, wherein the request comprises the authentication token and device attributes;
• generate a comparison device ID based on the device attributes included in the request to access protected resources;
• decrypt the authentication token;
• retrieve the device ID generated from the decrypted authentication token;
• validate the authentication token, wherein the validating comprises determining whether the device ID matches the comparison device ID;
• and
• output a response.

An apparatus comprising:

• a memory;
• a processor, wherein the processor executes computer-executable program instructions which cause the processor to:
• receive an authentication request, wherein the authentication request comprises device attributes;
• generate a device ID using the device attributes;
• create an authentication token, wherein the authentication token is signed with the device ID;
• transmit the authentication token;
• receive a request to access protected resources, wherein the request comprises the authentication token and device attributes;
• generate a comparison device ID based on the device attributes included in the request to access protected resources;
• decrypt the authentication token;
• retrieve the device ID generated from the decrypted authentication token;
• validate the authentication token, wherein the validating comprises determining whether the device ID matches the comparison device ID;
• and
• output a response.