Method and system for facilitating terminal identifiers

• US 10,073,916 B2
• Filed: 09/13/2017
• Issued: 09/11/2018
• Est. Priority Date: 08/04/2014
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Xia, Jupeng
• Primary Examiner(s): Hailu, Teshome
• Application Number:
  US15/703,875
• Publication Number:
  US 20180004852A1
• Time in Patent Office: 363 Days
• Field of Search: 726 1
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Embodiments of the present application disclose a method for providing a terminal identifier to a terminal. During operation, a security server receives a registration information set from the terminal, in which the registration information set includes multiple pieces of equipment information from the terminal. The security server then generates a terminal identifier based on the multiple pieces of equipment information in the registration information set. The security server then returns the terminal identifier to the terminal.

Claims

1. A computer-implemented method for providing a terminal identifier, comprising:

receiving, from a terminal device, a set of equipment-related information associated with multiple components residing on the terminal device;

searching through a plurality of mapping relationships between information sets and terminal identifiers to obtain an information set that has similarity exceeding a predetermined threshold with the set of equipment-related information, wherein a respective mapping relationship maps a respective information set to a respective terminal identifier;

selecting, based on the search through the plurality of mapped relationships, a terminal identifier mapped to the obtained information set;

sending the selected terminal identifier to the terminal device;

receiving, from the terminal device, an authentication information set comprising an updated set of equipment-related information associated with the multiple components;

updating the obtained information set based on information from the authentication information set;

receiving a new authentication information set;

searching through the plurality of mapping relationships for a second information set that matches the new authentication information set;

selecting, based on the search through the plurality of mapped relationships, a second terminal identifier mapped to the new authentication information set; and

sending the second terminal identifier to the terminal device.

2. The method of claim 1, wherein the terminal identifier is generated by performing operations comprising:

generating a character string based on a particular set of equipment-related information associated with the multiple components;

generating a signature based on the character string and a key of a security server; and

generating the terminal identifier based on the character string and the signature.

3. The method of claim 1, further comprising:

sending the selected terminal identifier to the terminal device at a plurality of predetermined time slots.

4. The method of claim 1, wherein the set of equipment-related information is a first set of equipment-related information, and wherein the method further comprises:

receiving a second set of equipment-related information associated with the multiple components residing on the terminal device;

responsive to determining that the second set of equipment-related information is different from the first set of equipment-related information;

storing data representing the second set of equipment-related information; and

storing data representing a new mapping relationship between the second set of equipment-related information and the terminal identifier, wherein the terminal identifier is generated based on the first set of equipment-related information.

5. The method of claim 1, wherein searching through the plurality of mapping relationships further comprises using the set of equipment-related information as a search key.

6. The method of claim 1, wherein sending the selected terminal identifier to the terminal device allows the terminal device to apply a signature embedded within the terminal identifier to verify an authenticity of the terminal identifier.

7. The method of claim 1, wherein the terminal identifier is generated by performing operations comprising:

receiving, from the terminal device, an initial set of equipment-related information associated with the multiple components residing on the terminal device; and

generating the terminal identifier based on the initial set of equipment-related information.

8. A device, comprising:

one or more processors;

a memory; and

a non-transitory computer-readable storage medium coupled to the one or more processors storing instructions stored that, when executed by the one or more processors, cause the device to perform a method for providing a terminal identifier, comprising;

receiving, from a terminal device, a set of equipment-related information associated with multiple components residing on the terminal device;

searching through a plurality of mapping relationships between information sets and terminal identifiers to obtain an information set that has similarity exceeding a predetermined threshold with the set of equipment-related information, wherein a respective mapping relationship maps a respective information set to a respective terminal identifier;

selecting, based on the search through the plurality of mapped relationships, a terminal identifier mapped to the obtained information set;

sending the selected terminal identifier to the terminal device;

receiving, from the terminal device, an authentication information set comprising an updated set of equipment-related information associated with the multiple components;

updating the obtained information set based on information from the authentication information set;

receiving a new authentication information set;

searching through the plurality of mapping relationships for a second information set that matches the new authentication information set;

selecting, based on the search through the plurality of mapped relationships, a second terminal identifier mapped to the new authentication information set; and

sending the second terminal identifier to the terminal device.

9. The device of claim 8, wherein the terminal identifier is generated by performing operations comprising:

generating a character string based on a particular set of equipment-related information associated with the multiple components;

generating a signature based on the character string and a key of a security server; and

generating the terminal identifier based on the character string and the signature.

10. The device of claim 8, wherein the method further comprises:

sending the selected terminal identifier to the terminal device at a plurality of predetermined time slots.

11. The device of claim 8, wherein the set of equipment-related information is a first set of equipment-related information, and wherein the method further comprises:

receiving a second set of equipment-related information associated with the multiple components residing on the terminal device;

responsive to determining that the second set of equipment-related information is different from the first set of equipment-related information;

storing data representing the second set of equipment-related information; and

storing data representing a new mapping relationship between the second set of equipment-related information and the terminal identifier, wherein the terminal identifier is generated based on the first set of equipment-related information.

12. The device of claim 8, wherein searching through the plurality of mapping relationships further comprises using the set of equipment-related information as a search key.

13. The device of claim 8, wherein the terminal identifier is generated by performing operations comprising:

receiving, from the terminal device, an initial set of equipment-related information associated with the multiple components residing on the terminal device; and

generating the terminal identifier based on the initial set of equipment-related information.

14. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for providing a terminal identifier, the method comprising:

receiving, from a terminal device, a set of equipment-related information associated with multiple components residing on the terminal device;

searching through a plurality of mapping relationships between information sets and terminal identifiers to obtain an information set that has similarity exceeding a predetermined threshold with the set of equipment-related information, wherein a respective mapping relationship maps a respective information set to a respective terminal identifier;

selecting, based on the search through the plurality of mapped relationships, a terminal identifier mapped to the obtained information set;

sending the selected terminal identifier to the terminal device;

receiving, from the terminal device, an authentication information set comprising an updated set of equipment-related information associated with the multiple components;

updating the obtained information set based on information from the authentication information set;

receiving a new authentication information set;

searching through the plurality of mapping relationships for a second information set that matches the new authentication information set;

selecting, based on the search through the plurality of mapped relationships, a second terminal identifier mapped to the new authentication information set; and

sending the second terminal identifier to the terminal device.

15. The storage medium of claim 14, wherein the terminal identifier is generated by performing operations comprising:

generating a character string based on a particular set of equipment-related information associated with the multiple components;

generating a signature based on the character string and a key of a security server; and

generating the terminal identifier based on the character string and the signature.

16. The storage medium of claim 14, wherein the method further comprises:

sending the selected terminal identifier to the terminal device at a plurality of predetermined time slots.

17. The storage medium of claim 14, wherein the set of equipment-related information is a first set of equipment-related information, and wherein the method further comprises:

receiving a second set of equipment-related information associated with the multiple components residing on the terminal device;

responsive to determining that the second set of equipment-related information is different from the first set of equipment-related information;

storing data representing the second set of equipment-related information; and

storing data representing a new mapping relationship between the second set of equipment-related information and the terminal identifier, wherein the terminal identifier is generated based on the first set of equipment-related information.