# US 8,782,746 B2 · System and method for supporting multiple identities for a secure identity device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,782,746 B2 - Document ID: US8782746B2 - Status: Granted - Kind: B2 - Application number: 12/267,838 - Filed: 2008-11-10 - Published: 2010-04-22 - Granted: 2014-07-15 - Earliest claimed: 2008-10-17 - Assignees: Comcast Cable Communications, LLC - Applicants: Steven J Reynolds - Inventors: Steven J Reynolds - Web page: https://patentgrep.com/patent/US8782746B2 ## CPC - H04N 21/42684: {Client identification by a unique number or address, e.g. serial number, MAC address, socket ID (network arrangements, protocols or services for addressing or naming H04L61/00)} - H04L 61/00: Network arrangements, protocols or services for addressing or naming - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04N 21/25816: {involving client authentication (restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06)} - H04N 21/647: Control signaling between network components and server or clients; Network processes for video distribution between server and clients, e.g. controlling the quality of the video stream, by dropping packets, protecting content from unauthorised alteration within the network, monitoring of network load, bridging between two different networks, e.g. between IP and wireless {(real-time session protocols H04L65/1101)} - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A multiple-identity secure device (MISD) persistently stores a single identification code (a “seed identity”). The seed identity need not be a network address, and may be stored in an integral memory of the device, or on an interchangeable card received in a physical interface of the MISD. The MISD is provided with a transformation engine, in hardware or software form, that is subsequently used to generate one or more unique identities (e.g., network addresses) from the stored seed identity using predefined logic. The generated identities may be dynamically generated, e.g., in real-time as needed after deployment of a device into possession of a subscriber/customer/user, etc., or may be securely stored in the MISD for subsequent retrieval. The transformation engine may generate a unique identity in accordance with an addressing scheme identified as a default setting, a global/network setting, or as determined from a received data transmission. ## Claims ### Claim 1 One or more non-transitory computer-readable medium storing computer-readable instructions that, when executed by a processor, cause the processor to: receive a data transmission comprising recipient identity data; determine an addressing scheme used to direct the data transmission; retrieve a seed identity comprising an identification code; generate a unique identity based on the seed identity and the determined addressing scheme; extract the recipient identity data from the received data transmission; and determine whether the generated unique identity corresponds to the recipient identity data. ### Claim 2 (depends on 1) The one or more non-transitory computer-readable medium of claim 1, storing additional computer-readable instructions that, when executed by the processor, cause the processor to: if the generated unique identity does not correspond to the recipient identity data, discard the data transmission; and if the generated unique identity corresponds to the recipient identity data, use data from the data transmission. ### Claim 3 (depends on 1) The one or more non-transitory computer-readable medium of claim 1, wherein generating the unique identity comprises generating the unique identity in compliance with the determined addressing scheme. ### Claim 4 A device comprising: a microprocessor; and memory storing computer-readable instructions that, when executed by the microprocessor, cause the device to: receive a data transmission comprising recipient identity data; determine an addressing scheme used to direct the data transmission; retrieve a seed identity comprising an identification code; generate a unique identity based on the seed identity and the determined addressing scheme; extract the recipient identity data from the received data transmission; and determine whether the generated unique identity corresponds to the recipient identity data. ### Claim 5 (depends on 4) The device of claim 4, wherein the memory comprises: a read-only memory (ROM) operatively connected to the microprocessor, the ROM configured to securely store the seed identity; and a non-volatile storage memory operatively connected to the microprocessor, the non-volatile storage memory storing a transformation engine configured to generate the unique identity. ### Claim 6 (depends on 4) The device of claim 4, further comprising: a data communication port configured to receive a secure identity card, wherein the secure identity card is configured to store the seed identity. ### Claim 7 (depends on 6) The device of claim 6, wherein the secure identity card comprises one of a CableCARD, a PCMCIA card, a SIM card, and a Smart Card. ### Claim 8 (depends on 5) The device of claim 5, wherein the ROM comprises one of a programmable read only memory (PROM) and a one-time-programmable (OTP) memory. ### Claim 9 (depends on 4) The device of claim 4, wherein the memory stores additional computer-readable instructions that, when executed by the microprocessor, cause the device to: if the recipient identity data does not correspond to the generated unique identity, discard the data transmission; and if the recipient identity data corresponds to the generated unique identity, use data from the data transmission. ### Claim 10 (depends on 4) The device of claim 4, wherein the memory stores additional computer-readable instructions that, when executed by the microprocessor, cause the device to: store the unique identity in non-volatile storage memory; receive a second data transmission directed using the addressing scheme; and retrieve, from the non-volatile storage memory, the stored unique identity based on a determination that the stored unique identity is compliant with the addressing scheme. ### Claim 11 (depends on 4) The device of claim 4, wherein generating the unique identity is performed in response to receiving the data transmission. ### Claim 12 (depends on 4) The device of claim 4, wherein the memory stores additional computer-readable instructions that, when executed by the microprocessor, cause the device to: provide, to a transformation engine, information identifying the addressing scheme, wherein generating the unique identity comprises generating the unique identity in compliance with the addressing scheme. ### Claim 13 (depends on 4) The device of claim 4, wherein the memory stores additional computer-readable instructions that, when executed by the microprocessor, cause the device to: store the unique identity in a secure area of the memory. ### Claim 14 (depends on 4) The device of claim 4, wherein the memory stores a plurality of unique identities, and wherein the plurality of unique identities includes the unique identity. ### Claim 15 (depends on 4) The device of claim 4, wherein the unique identity comprises a network address. ### Claim 16 (depends on 4) The device of claim 4, wherein generating the unique identity comprises applying a predefined bit mask to the seed identity. ### Claim 17 (depends on 4) The device of claim 4, wherein generating the unique identity comprises adding a predefined offset to the seed identity. ### Claim 18 (depends on 4) The device of claim 4, wherein generating the unique identity comprises generating the unique identity by a first method if a first condition exists and generating the unique identity by a second method if a second condition exists. ### Claim 19 A method comprising: receiving, at a secure identity device, a data transmission comprising recipient identity data; determining an addressing scheme used to direct the data transmission; retrieving a seed identity from a secure memory; generating, at the secure identity device, a unique identity based on the seed identity and the determined addressing scheme; extracting the recipient identity data from the received data transmission; and determining whether the generated unique identity corresponds to the recipient identity data. ### Claim 20 (depends on 19) The method of claim 19, wherein the unique identity comprises a first unique identity, the method further comprising: generating, at the secure identity device, a second unique identity based on the seed identity, wherein the second unique identity is different from the first unique identity. ### Claim 21 (depends on 19) The method of claim 19, wherein the secure memory comprises a first secure memory, the method further comprising: storing the unique identity in a second secure memory of the secure identity device, wherein the second secure memory is different from the first secure memory. ### Claim 22 (depends on 19) The method of claim 19, further comprising: storing the seed identity in a secure identity card having the secure memory; and receiving the secure identity card in a physical interface of the secure identity device. ### Claim 23 A method comprising: receiving, at a secure device, identity data; obtaining, from a secure memory area of the secure device, a unique identity for the secure device, wherein the unique identity is based on a seed identity stored in the secure device, predefined logic stored in the secure device, and an addressing scheme used to direct the identity data; determining, at the secure device, whether the unique identity corresponds to the identity data; if the unique identity does not correspond to the identity data, discarding the identity data; and if the unique identity corresponds to the identity data, using data from the identity data. ### Claim 24 (depends on 23) The method of claim 23, wherein obtaining the unique identity comprises: in response to receiving the identity data, generating, at a transformation engine of the secure device, the unique identity based on the seed identity, the predefined logic, and the addressing scheme. ### Claim 25 (depends on 24) The method of claim 24, wherein: obtaining the unique identity comprises: determining, at the secure device and based on the identity data, the addressing scheme used to direct the identity data; and receiving, at the transformation engine of the secure device, the determined addressing scheme; and generating the unique identity comprises generating the unique identity in compliance with the determined addressing scheme. ### Claim 26 (depends on 23) The method of claim 23, further comprising: generating a first unique identity and a second unique identity based on the seed identity and the predefined logic, the first unique identity being compliant with a first addressing scheme and the second unique identity being compliant with a second addressing scheme different from the first addressing scheme, wherein obtaining the unique identity comprises: determining, at the secure device, the addressing scheme used to direct the identity data; and in response to determining the addressing scheme, selecting, as the unique identity for the secure device, one of the first unique identity and the second unique identity that is compliant with the addressing scheme. ### Claim 27 A system comprising: a first device comprising: a first microprocessor; first predefined logic; and first memory storing computer-readable instructions that, when executed by the first microprocessor, cause the first device to: receive a data transmission comprising recipient identity data; determine an addressing scheme used to direct the data transmission; retrieve a first seed identity comprising an identification code; generate a unique identity based on the first seed identity and the determined addressing scheme; extract the recipient identity data from the received data transmission; and determine whether the generated unique identity corresponds to the recipient identity data; a second device comprising: a second microprocessor; and second memory storing computer-readable instructions that, when executed by the second microprocessor, cause the second device to: store a second seed identity and a second predefined logic, wherein the second seed identity is different from the first seed identity, and wherein the second predefined logic is the same as the first predefined logic. ### Claim 28 A system comprising: a first device comprising: a first microprocessor; first predefined logic; and first memory storing computer-readable instructions that, when executed by the first microprocessor, cause the first device to: receive a data transmission comprising recipient identity data; determine an addressing scheme used to direct the data transmission; retrieve a first seed identity comprising an identification code; generate a unique identity based on the first seed identity and the determined addressing scheme; extract the recipient identity data from the received data transmission; and determine whether the generated unique identity corresponds to the recipient identity data a second device comprising: a second microprocessor; and second memory storing computer-readable instructions that, when executed by the second microprocessor, cause the second device to: store a second seed identity and a second predefined logic, wherein the second seed identity is the same as the first seed identity, and wherein the second predefined logic is different from the first predefined logic.