US 9,756,035 B2Granted

Device fingerprint registration for single sign on authentication

AssigneeSecureAuth Corporation

InventorsGarret Florian Grajek, Chihwei Liu, Allen Yu Quach, Jeffrey Chiwai Lo

Life of this patent

Estimating the term…

Loading patent…

Abstract

A device fingerprinting system provides an additional factor of authentication. A user device may be redirected, along with user ID parameters, to authentication system. The user device may be sent instructions to execute that collect and send back device characteristic information to the authentication system. The authentication can create a unique fingerprint of the device, and determine if the fingerprint has been seen before. If seen before, the authentication system may send back an authentication token indicating the additional factor of authentication was a success. If the fingerprint has not been seen previously, the authentication system may conduct a one-time password authentication as the additional factor. If successful, the fingerprint may be stored in association with the user device for future authentication as an additional factor.

Claims22

Dependent claims

A computerized fingerprint-based authentication system comprising:

one or more hardware processors configured to cause the authentication system to:
receive, over a network, a request for authentication of a user computing device associated with a user, the request resulting from a redirection operation sent to the user computing device;
communicate a one-time password to the user for an initial authentication;
receive, over the network, the one-time password from the user computing device;
send, over the network, to the user computing device capture instructions, the capture instructions configured to cause the user computing device to collect a plurality of characteristic values of the user computing device, the plurality of the characteristic values representing at least two attributes of the user computing device;
receive, over the network, the plurality of characteristic values of the user computing device;
create a device fingerprint value associated with the user computing device based on the plurality of characteristics of the user computing device;
store the device fingerprint value and the plurality of characteristics in data storage;
and
transmit an authentication token to the user computing device, the authentication token indicating that the user computing device has been authenticated by a fingerprinting mechanism.

7 more elements

A computerized method for registering a device fingerprint for a user computing device, the method comprising:

by one or more hardware computer processors:
receiving, over a network, a request for authentication for a user computing device associated with a user, the request resulting from a redirection operation sent to the user computing device;
communicate a one-time password to the user for an initial authentication;
receiving, over the network, the one-time password from the user computing device;
sending, over the network, to the user computing device capture instructions, the capture instructions configured to cause the user computing device to collect a plurality of characteristic values of the user computing device, the plurality of the characteristic values representing at least two attributes of the user computing device;
receiving, over the network, the plurality of characteristic values of the user computing device;
generating a device fingerprint value associated with the user computing device based on the plurality of characteristics of the user computing device;
storing the device fingerprint value and the plurality of characteristics in data storage;
and
transmitting an authentication token to the user computing device, the authentication token indicating that the user computing device was authenticated by a fingerprinting mechanism.

7 more elements

A non-transitory computer storage medium which stores a program comprising executable code that directs a computing device to perform a process that registers a fingerprint for a user computing device, comprising:

receiving, over a network, a request to authenticate a user computing device associated with a user, the request resulting from a redirection operation sent to the user computing device;
communicate a one-time password to the user for an initial authentication;
receiving, over the network, the one-time password from the user computing device;
sending, over the network, to the user computing device capture instructions, the capture instructions configured to cause the user computing device to collect a plurality of characteristic values of the user computing device, the plurality of the characteristic values representing at least two attributes of the user computing device;
receiving, over the network, the plurality of characteristic values of the user computing device;
generating a device fingerprint value associated with the user computing device based on the plurality of characteristics of the user computing device;
and
storing the device fingerprint value and the plurality of characteristics in data storage.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/621,845Filed 13 Feb 2015 · us provisional application
Priority: 18 Feb 2014
Published: US 2015/0237039 A120 Aug 2015
Granted: 5 Sep 2017
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 63/0815
For authentication of entities: providing single-sign-on or federations
G06F 21/64
Protecting data: protecting data integrity, e.g. using checksums, certificates or signatures
H04L 63/0807
For authentication of entities: using tickets, e.g. Kerberos
H04L 63/0838
Using passwords: using one-time-passwords