# US 2022/0286288 A1 · System and method for detecting compromised devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2022/0286288 A1
- Document ID: US20220286288A1
- Status: Published application
- Kind: A1
- Application number: 17/193,569
- Filed: 2021-03-05
- Published: 2022-09-08
- Earliest claimed: 2021-03-05
- Assignees: Eclypses, Inc.
- Applicants: Eclypses, Inc.
- Inventors: Robert E. Nelson; Aron J. Seader
- Web page: https://patentgrep.com/patent/US20220286288A1

## CPC

- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics}
- H04L 9/0869: {involving random numbers or seeds}
- H04L 9/12: Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
- H04L 2209/34: Encoding or coding, e.g. Huffman coding or error correction
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

According to one example, a system includes a first computing device that performs one or more tests that indicate whether the first computing device is compromised. In response to a determination that the first computing device passed the one or more tests, the first computing device manipulates an authentication code to generate a first seed value. In response to a determination that the first computing device failed the one or more tests, the first computing device manipulates the authentication code to generate a second seed value. The first computing device also determine data for transmittal to a second computing device, modifies the data using the first seed value or the second seed value, and transmits the modified data for receipt by the second computing device.

## Claims

### Claim 1

A system, comprising:
a first computing device comprising:
one or more first memory units; and
one or more first processors coupled to the first memory units and configured, upon executing one or more first instructions, to:
determine an authentication code;
perform one or more tests that indicate whether the first computing device is compromised;
in response to a determination that the first computing device passed the one or more tests, manipulate the authentication code to generate a first seed value;
in response to a determination that the first computing device failed the one or more tests, manipulate the authentication code to generate a second seed value;
determine data for transmittal to a second computing device;
modify the data using the first seed value or the second seed value; and
transmit the modified data for receipt by the second computing device.

### Claim 2 (depends on 1)

The system of claim 1, wherein the second computing device is configured to:
receive the modified data transmitted by the first computing device;
determine the authentication code;
manipulate the authentication code to generate a third seed value that matches the first seed value;
de-modify the modified data using the third seed value;
determine whether the de-modification was successful;
in response to a determination that the de-modification was not successful, discard the data; and
in response to a determination that the de-modification was successful, transmit the data for use.

### Claim 3 (depends on 1)

The system of claim 1, wherein, to perform the one or more tests and manipulate the authentication code to generate the first seed value or the second seed value, the one or more first processors are further configured, upon executing the one or more first instructions, to:
for each test of the one or more tests:
perform the respective test;
in response to a determination that the first computing device passed the respective test, perform a respective first mathematical method on one or more numbers included in the authentication code; and
in response to a determination that the first computing device failed the respective test, perform a respective second mathematical method on the one or more numbers included in the authentication code; and
perform a seed generation method on the authentication code to generate the first seed value or the second seed value, wherein the authentication code has been manipulated based on the determination for each test of the one or more tests.

### Claim 4 (depends on 1)

The system of claim 1, wherein, to modify the data using the first seed value or the second seed value, the one or more first processors are further configured, upon executing the one or more first instructions, to:
generate a first encryption key using the first seed value or the second seed value; and
encrypt, using the first encryption key, the data to form the modified data.

### Claim 5 (depends on 1)

The system of claim 1, wherein, to modify the data using the first seed value or the second seed value, the one or more first processors are further configured, upon executing the one or more first instructions, to:
determine one or more transmittal tokens;
break the data into one or more portions; and
replace each of the one or more portions of the data with a transmittal token of the one or more transmittal tokens to form the modified data.

### Claim 6 (depends on 1)

The system of claim 1, wherein the first computing device is a mobile telephone, and wherein the one or more tests indicate whether the mobile device is jailbroken or rooted.

### Claim 7 (depends on 1)

The system of claim 1, wherein, to modify the data using the first seed value or the second seed value, the one or more first processors are further configured, upon executing the one or more first instructions, to:
determine a size of the data;
in response to a determination that the size of the data is below a predetermined threshold, select a first data modification method;
in response to a determination that the size of the data is equal to or greater than the predetermined threshold, select a second data modification method; and
modify the data using the first seed value or the second seed value, and further using the first data modification method or the second data modification method.

### Claim 8 (depends on 1)

The system of claim 1, further comprising:
the second computing device comprising:
one or more second memory units; and
one or more second processors coupled to the second memory units and configured, upon executing one or more second instructions, to:
receive the modified data transmitted by the first computing device;
determine the authentication code;
manipulate the authentication code to generate a third seed value that matches the first seed value;
de-modify the modified data using the third seed value;
determine whether the de-modification was successful;
in response to a determination that the de-modification was not successful, discard the data; and
in response to a determination that the de-modification was successful, transmit the data for use.

### Claim 9

A method, comprising:
determining, by one or more processors of a first computing device, an authentication code;
performing, by the one or more processors of the first computing device, one or more tests that indicate whether the first computing device is compromised;
in response to a determination that the first computing device passed the one or more tests, manipulating, by the one or more processors of the first computing device, the authentication code to generate a first seed value;
in response to a determination that the first computing device failed the one or more tests, manipulating, by the one or more processors of the first computing device, the authentication code to generate a second seed value;
determining, by the one or more processors of the first computing device, data for transmittal to a second computing device;
modifying, by the one or more processors of the first computing device, the data using the first seed value or the second seed value; and
transmitting, by the one or more processors of the first computing device, the modified data for receipt by the second computing device.

### Claim 10 (depends on 9)

The method of claim 9, further comprising:
receiving, by one or more processors of the second computing device, the modified data transmitted by the first computing device;
determining, by the one or more processors of the second computing device, the authentication code;
manipulating, by the one or more processors of the second computing device, the authentication code to generate a third seed value that matches the first seed value;
de-modifying, by the one or more processors of the second computing device, the modified data using the third seed value;
determining, by the one or more processors of the second computing device, whether the de-modification was successful;
in response to a determination that the de-modification was not successful, discarding, by the one or more processors of the second computing device, the data; and
in response to a determination that the de-modification was successful, transmitting, by the one or more processors of the second computing device, the data for use.

### Claim 11 (depends on 9)

The method of claim 9, wherein performing the one or more tests and manipulating the authentication code to generate the first seed value or the second seed value comprises:
for each test of the one or more tests:
performing the respective test;
in response to a determination that the first computing device passed the respective test, performing a respective first mathematical method on one or more numbers included in the authentication code; and
in response to a determination that the first computing device failed the respective test, performing a respective second mathematical method on the one or more numbers included in the authentication code; and
performing a seed generation method on the authentication code to generate the first seed value or the second seed value, wherein the authentication code has been manipulated based on the determination for each test of the one or more tests.

### Claim 12 (depends on 9)

The method of claim 9, wherein modifying the data using the first seed value or the second seed value comprises:
generating a first encryption key using the first seed value or the second seed value; and
encrypting, using the first encryption key, the data to form the modified data.

### Claim 13 (depends on 9)

The method of claim 9, wherein modifying the data using the first seed value or the second seed value comprises:
determining one or more transmittal tokens;
breaking the data into one or more portions; and
replacing each of the one or more portions of the data with a transmittal token of the one or more transmittal tokens to form the modified data.

### Claim 14 (depends on 9)

The method of claim 9, wherein the first computing device is a mobile telephone, and wherein the one or more tests indicate whether the mobile device is jailbroken or rooted.

### Claim 15

A tangible non-transitory computer readable medium comprising logic configured, when executed by one or more processors of a first computing device, to:
determine an authentication code;
perform one or more tests that indicate whether the first computing device is compromised;
in response to a determination that the first computing device passed the one or more tests, manipulate the authentication code to generate a first seed value;
in response to a determination that the first computing device failed the one or more tests, manipulate the authentication code to generate a second seed value;
determine data for transmittal to a second computing device;
modify the data using the first seed value or the second seed value; and
transmit the modified data for receipt by the second computing device.

### Claim 16 (depends on 15)

The tangible non-transitory computer readable medium of claim 15, wherein the second computing device is configured to:
receive the modified data transmitted by the first computing device;
determine the authentication code;
manipulate the authentication code to generate a third seed value that matches the first seed value;
de-modify the modified data using the third seed value;
determine whether the de-modification was successful;
in response to a determination that the de-modification was not successful, discard the data; and
in response to a determination that the de-modification was successful, transmit the data for use.

### Claim 17 (depends on 15)

The tangible non-transitory computer readable medium of claim 15, wherein, to perform the one or more tests and manipulate the authentication code to generate the first seed value or the second seed value, the logic is further configured, when executed by the one or more processors of the first computing device, to:
for each test of the one or more tests:
perform the respective test;
in response to a determination that the first computing device passed the respective test, perform a respective first mathematical method on one or more numbers included in the authentication code; and
in response to a determination that the first computing device failed the respective test, perform a respective second mathematical method on the one or more numbers included in the authentication code; and
perform a seed generation method on the authentication code to generate the first seed value or the second seed value, wherein the authentication code has been manipulated based on the determination for each test of the one or more tests.

### Claim 18 (depends on 15)

The tangible non-transitory computer readable medium of claim 15, wherein, to modify the data using the first seed value or the second seed value, the logic is further configured, when executed by the one or more processors of the first computing device, to:
generate a first encryption key using the first seed value or the second seed value; and
encrypt, using the first encryption key, the data to form the modified data.

### Claim 19 (depends on 15)

The tangible non-transitory computer readable medium of claim 15, wherein, to modify the data using the first seed value or the second seed value, the logic is further configured, when executed by the one or more processors of the first computing device, to:
determine one or more transmittal tokens;
break the data into one or more portions; and
replace each of the one or more portions of the data with a transmittal token of the one or more transmittal tokens to form the modified data.

### Claim 20 (depends on 15)

The tangible non-transitory computer readable medium of claim 15, wherein the first computing device is a mobile telephone, and wherein the one or more tests indicate whether the mobile device is jailbroken or rooted.
