Systems and methods for device verification and authentication

• US 10,057,269 B1
• Filed: 04/21/2017
• Issued: 08/21/2018
• Est. Priority Date: 04/21/2017
• Status: Active Grant

• Current Assignee: Qwerx Incorporated
• Original Assignee: infOsci, LLC
• Inventors: Ellingson, John
• Primary Examiner(s): To, Baotran N
• Application Number:
  US15/493,572
• Time in Patent Office: 487 Days
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

In methods, systems, and computing devices configured to implement methods of authenticating a computing device, a first computing device and a second computing device may share a dynamically updated shared data set. The first computing device may select elements of the shared data set stored at the first computing device and may generate a rule set for extracting the selected elements from the shared data set. The first computing device may send the rule set to the second computing device, and may generate a first result using the selected elements. The second computing device may extract the selected elements from the shared data set using the rule set, may generate a second result, and may send the second result to the first computing device. The first computing device may determine whether the second computing device is authenticated based on whether the first result matches the second result.

Claims

1. A system for authenticating computing devices, comprising:

a first computing device, comprising;

a first memory; and

a first processor configured with processor-executable instructions to perform operations comprising;

selecting first elements from a shared data set stored at the first computing device, wherein the shared data set is also stored at the second computing device;

generating a first rule set for extracting the selected first elements from the shared data set;

transforming the selected first elements to generate a first result; and

sending the first rule set to the second computing device; and

a second computing device, comprising;

a communication interface;

a second memory; and

a second processor coupled to the communication interface and configured with processor-executable instructions to perform operations comprising;

receiving the first rule set from the first computing device;

extracting the selected first elements from the shared data set stored at the second computing device using the rule set;

transforming the extracted first elements to generate a second result;

sending the generated second result to the first computing device;

selecting second elements from the shared data set stored at the second computing device;

generating a second rule set for extracting the selected second elements from the shared data set; and

sending the second rule set to the first computing device;

wherein the processor of the first computing device is further configured with processor-executable instructions to perform operations comprising;

extracting the selected second elements from the shared data set stored at the first computing device using the second rule set;

transforming the extracted second elements to generate a third result;

sending the generated third result to the second computing device;

determining whether the first result matches the second result; and

determining whether the second computing device is authenticated based on whether the first result matches the second result; and

wherein the processor of the second computing device is further configured with processor-executable instructions to perform operations comprising;

transforming the selected second elements to generate a fourth result;

determining whether the third result matches the fourth result; and

determining whether the first computing device is authenticated based on whether the third result matches the fourth result.

2. The system of claim 1, wherein the processor of the first computing device is configured with processor-executable instructions to perform operations such that the generating a first rule set for extracting the selected first elements from the shared data set is performed prior to the selecting first elements from the shared data set.

3. The system of claim 1, wherein the processor of the first computing device is configured with processor-executable instructions to perform operations further comprising:

sending to the second computing device an indication of whether the second computing device is authenticated based on whether the first result matches the second result.

4. The system of claim 1, wherein the processor of the first computing device is configured with processor-executable instructions to perform operations such that selecting first elements from the shared data set stored at the first computing device, wherein the shared data set is further stored at the second computing device comprises:

selecting one or more portions of the shared data set; and

selecting two or more first elements from among the one or more portions of the shared data set.

5. The system of claim 4, wherein the processor of the first computing device is configured with processor-executable instructions to perform operations such that selecting first elements from the shared data set stored at the first computing device, wherein the shared data set is further stored at the second computing device comprises:

selecting one of the two or more first elements as a primary element.

6. The system of claim 4, wherein the processor of the first computing device is configured with processor-executable instructions to perform operations such that generating a first rule set for extracting the selected elements from the shared data set further comprises:

determining one or more relationships between the selected two or more first elements; and

generating the rule set based on the determined one or more relationships between the selected two or more first elements.

7. The system of claim 1, wherein the processor of the second computing device is configured with processor-executable instructions to perform operations such that extracting the selected first elements from the shared data set stored at the second computing device using the rule set comprises:

identifying one or more first elements of the shared data set indicated in the rule set;

identifying one or more relationships between the selected two or more first elements indicated in the rule set; and

extracting the one or more first elements from the shared data set using the identified one or more first elements and the one or more relationships.

8. The system of claim 1, wherein the shared data set comprises one or more transitory identities.

9. The system of claim 1, wherein the processor of the second computing device is configured with processor-executable instructions to perform operations such that the generating a second rule set for extracting the selected second elements from the shared data set is performed prior to the selecting second elements from the shared data set.

10. The system of claim 1, wherein the processor of the second computing device is configured with processor-executable instructions to perform operations further comprising:

sending to the first computing device an indication of whether the first computing device is authenticated based on whether the third result matches the fourth result.

11. The system of claim 1, wherein the processor of the second computing device is configured with processor-executable instructions to perform operations such that selecting second elements from the shared data set stored at the second computing device comprises:

selecting one or more portions of the shared data set; and

selecting two or more second elements from among the one or more portions of the shared data set.

12. The system of claim 11, wherein the processor of the second computing device is configured with processor-executable instructions to perform operations such that selecting second elements from the shared data set stored at the second computing device comprises:

selecting one of the two or more second elements as a primary element.

13. The system of claim 11, wherein the processor of the first computing device is configured with processor-executable instructions to perform operations such that generating a second rule set for extracting the selected second elements from the shared data set further comprises:

determining one or more relationships between the selected two or more second elements; and

generating the rule set based on the determined one or more relationships between the selected two or more second elements.

14. The system of claim 1, wherein the processor of the first computing device is configured with processor-executable instructions to perform operations such that extracting the selected second elements from the shared data set stored at the first computing device using the second rule set comprises:

identifying one or more second elements of the shared data set indicated in the rule set;

identifying one or more relationships between the selected two or more second elements indicated in the rule set; and

extracting the one or more second elements from the shared data set using the identified one or more second elements and the one or more relationships.

15. A method for authenticating computing devices, comprising:

selecting, by a first processor of a first computing device, first elements from a shared data set stored at the first computing device, wherein the shared data set is also stored at a second computing device;

generating, by the first processor, a first rule set for extracting the selected first elements from the shared data set;

transforming, by the first processor, the selected first elements to generate a first result;

sending, by the first processor, the first rule set to the second computing device;

receiving, by a second processor of the second computing device, the first rule set from the first computing device;

extracting, by the second processor, the selected first elements from the shared data set stored at the second computing device using the rule set;

transforming, by the second processor, the extracted first elements to generate a second result;

sending, by the second processor, the generated second result to the first computing device;

selecting, by the second processor, second elements from the shared data set stored at the second computing device;

generating, by the second processor, a second rule set for extracting the selected second elements from the shared data set;

sending, by the second processor, the second rule set to the second computing device;

extracting, by the first processor, the selected second elements from the shared data set stored at the first computing device using the second rule set;

transforming, by the first processor, the extracted second elements to generate a third result;

sending, by the first processor, the generated third result to the second computing device;

determining, by the first processor, whether the first result matches the second result;

determining, by the first processor, whether the second computing device is authenticated based on whether the first result matches the second result;

transforming, by the second processor, the selected second elements to generate a fourth result;

determining, by the second processor, whether the third result matches the fourth result; and

determining, by the second processor, whether the first computing device is authenticated based on whether the third result matches the fourth result.

16. A non-transitory processor-readable storage medium having stored thereon processor-executable instructions configured to cause a processor of a computing device to perform operations for authenticating computing devices, comprising:

selecting, by a first processor of a first computing device, first elements from a shared data set stored at the first computing device, wherein the shared data set is also stored at a second computing device;

generating, by the first processor, a first rule set for extracting the selected first elements from the shared data set;

transforming, by the first processor, the selected first elements to generate a first result; and

sending, by the first processor, the first rule set to the second computing device;

receiving, by a second processor of the second computing device, the first rule set from the first computing device;

extracting, by the second processor, the selected first elements from the shared data set stored at the second computing device using the rule set;

transforming, by the second processor, the extracted first elements to generate a second result;

sending, by the second processor, the generated second result to the first computing device;

selecting, by the second processor, second elements from the shared data set stored at the second computing device;

generating, by the second processor, a second rule set for extracting the selected second elements from the shared data set;

sending, by the second processor, the second rule set to the second computing device;

extracting, by the first processor, the selected second elements from the shared data set stored at the first computing device using the second rule set;

transforming, by the first processor, the extracted second elements to generate a third result;

sending, by the first processor, the generated third result to the second computing device;

determining, by the first processor, whether the first result matches the second result;

determining, by the first processor, whether the second computing device is authenticated based on whether the first result matches the second result;

transforming, by the second processor, the selected second elements to generate a fourth result;

determining, by the second processor, whether the third result matches the fourth result; and

determining, by the second processor, whether the first computing device is authenticated based on whether the third result matches the fourth result.