# US 9,438,595 B2 · Network resource access control methods and systems using transactional artifacts > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,438,595 B2 - Document ID: US9438595B2 - Status: Granted - Kind: B2 - Application number: 13/592,212 - Filed: 2012-08-22 - Published: 2012-12-13 - Granted: 2016-09-06 - Earliest claimed: 2007-09-24 - Assignees: Cheng Holdings, LLC - Applicants: Thomas W. Lynch - Inventors: Thomas W. Lynch - Web page: https://patentgrep.com/patent/US9438595B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - G06F 21/31: User authentication - H04L 63/10: {for controlling access to devices or network resources} - G06F 2221/2101: Auditing as a secondary aspect - G06F 2221/2129: Authenticate client device independently of the user - H04L 2463/101: applying security measures for digital rights management - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Methods and systems are provided for use with digital data processing systems to control or otherwise limit access to networked resources based, at least in part, on transactional artifacts and/or derived artifacts. ## Claims ### Claim 1 A method for allowing access to access controlled network resources, the method comprising: receiving, with a first device associated with a service provider, a credential generated by a second device associated with a user; generating, with the first device, a verifier by processing a first device artifact based on a transactional history between the first device and the second device as observed by the first device; initiating, with the first device, a transaction process in response to a transaction request by the second device; comparing the credential and the verifier to determine whether to permit the transaction process; and allowing access to the access controlled network resources if the comparing indicates the credential and the verifier are based on a same transactional history, and wherein the credential is based in part on a second device artifact maintained by the second device and processed by the second device based on a transactional history between the first device and the second device as observed by the second device, and wherein the second device artifact is modified by the second device subsequent to a previous transaction between the user and the service provider before the credential is received by the first device for authentication during the transaction process. ### Claim 2 (depends on 1) The method of claim 1, wherein said processing the first device artifact includes updating the first device artifact using account name related data, password related data, personal identification related data, biometric information related data, device identifier related data, network address identification related data, relationship identification related data, user identification related data, payment related data, encryption related data, random related data, pseudo random related data, or combinations thereof. ### Claim 3 (depends on 1) The method of claim 1, wherein said generating the verifier includes processing the first device artifact using a first function different than a second function used by the second device to generate the credential. ### Claim 4 (depends on 3) The method of claim 3, wherein said comparing includes accounting for differences between the first function and the second function. ### Claim 5 (depends on 1) The method of claim 1, wherein said processing includes modifying the first device artifact using a first function comprising a unity function, a hash function, a shift register function, or combinations thereof. ### Claim 6 (depends on 1) The method of claim 1, wherein said processing includes encrypting the first device artifact, incrementing the first device artifact, using the first device artifact as a seed in a pseudo random generator, using the first device artifact as a state in a state machine, or using the first device artifact as a set of residues in a polynomial generator. ### Claim 7 (depends on 1) The method of claim 1, wherein the credential includes data associated with the user, data associated with the second device, or combinations thereof. ### Claim 8 (depends on 1) The method of claim 1, further comprising maintaining, with the first device, a third device artifact based on a second transactional history between the first device and a third device associated with another user as observed by the first device, and generating a second verifier based on the second transactional history. ### Claim 9 (depends on 8) The method of claim 8, further comprising: receiving a second credential generated by the third device, and denying access to the access controlled network resources if a comparison between the second credential and the second verifier indicates that the second credential is not based on a transactional history corresponding to the second transactional history.