Methods and systems for persistent cross-application mobile device identification

• US 10,341,344 B2
• Filed: 06/22/2018
• Issued: 07/02/2019
• Est. Priority Date: 03/22/2012
• Status: Active Grant

• Current Assignee: The 41st Parameter, Inc. (Experian plc)
• Original Assignee: The 41st Parameter, Inc. (Experian plc)
• Inventors: Eisen, Ori, Yalov, Raz
• Primary Examiner(s): Akonai, Olumide Ajibade
• Assistant Examiner(s): Mastrodonato, Margaret G
• Application Number:
  US16/016,337
• Publication Number:
  US 20190028472A1
• Time in Patent Office: 375 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/086 using security domains

Abstract

Systems and methods are provided for persistent cross-application mobile device identification. A mobile device may have a plurality of sandboxes in memory containing applications. The mobile device may have a shared storage which may accessible by applications from different sandboxes. A storage location identifier may be used to access information in shared storage. A universal device identifier may be stored in the shared storage to identify the mobile device and may be accessible by multiple applications and updates to applications. The universal device identifier may be used to track the mobile device for advertising, fraud detection, reputation tracking, or other purposes.

Claims

1. A system for persistently identifying a mobile device across applications, the system comprising:

a memory which comprises;

a first sandbox associated with a first application;

a second sandbox associated with a second application; and

a persistent shared storage configured to store a universal device identifier which identifies a mobile device across the first application and the second application; and

a processor programmed to;

execute the first application in the first sandbox, wherein the first application is restricted from accessing the second sandbox;

execute the second application in the second sandbox, wherein the second application is restricted from accessing the first sandbox;

receive a first request from the first application to access information associated with the mobile device, wherein the first request comprises the universal device identifier;

receive a second request from the second application to access the information associated with the mobile device, wherein the second request comprises the universal device identifier;

identify data associated with the first application indicative of a fraud;

link the data associated with the first application indicative of the fraud with the universal device identifier;

store the data associated with the first application indicative of the fraud in the persistent shared storage associated with the universal device identifier; and

in response to the second request from the second application to access information associated with the mobile device, access the persistent shared storage associated with the universal device identifier and return a data packet comprising the data associated with the first application indicative of the fraud to the second application.

2. The system of claim 1, wherein the universal device identifier is generated by the first application or the second application.

3. The system of claim 2, wherein the processor is further programmed to:

obtain the universal device identifier from the first application or the second application; and

store the universal device identifier in the persistent shared storage.

4. The system of claim 1, wherein the first request or the second request comprises a storage location identifier of the universal device identifier in the persistent shared storage.

5. The system of claim 1, wherein in response to the first request, the processor is programmed to generate the universal device identifier;

and wherein in response to the second request, the processor is programmed to communicate the universal device identifier generated in response to the first request to the second application.

6. The system of claim 1, wherein the universal device identifier is automatically generated by an operating system of the mobile device upon initialization of the mobile device or by a firmware process associated with a component of the mobile device.

7. The system of claim 1, wherein the persistent shared storage stores information that persists across the first sandbox, the first application, the second sandbox, and the second application.

8. A method for persistently identifying a mobile device across applications, the method comprising:

executing a first application in a first sandbox, wherein the first application is restricted from accessing a second sandbox;

executing a second application in a second sandbox, wherein the second application is restricted from accessing the first sandbox;

receiving a first request from the first application to access information associated with the mobile device, wherein the first request comprises a universal device identifier;

receiving a second request from the second application to access the information associated with the mobile device, wherein the second request comprises the universal device identifier;

identifying data associated with the first application indicative of a fraud;

linking the data associated with the first application indicative of the fraud with the universal device identifier;

storing the data associated with the first application indicative of the fraud in a persistent shared storage associated with the universal device identifier; and

in response to the second request from the second application to access information associated with the mobile device, accessing the persistent shared storage associated with the universal device identifier and returning a data packet comprising the data associated with the first application indicative of the fraud to the second application.

9. The method of claim 8, wherein the first application or the second application generating the universal device identifier.

10. The method of claim 9, further comprising:

obtaining the universal device identifier from the first application or the second application; and

storing the universal device identifier in the persistent shared storage.

11. The method of claim 8, wherein the first request or the second request comprising a storage location identifier of the universal device identifier in the persistent shared storage.

12. The method of claim 8, further comprising:

generating the universal device identifier on the mobile device in response to the first request; and

communicating the universal device identifier generated in response to the first request to the second application in response to the second request.

13. The method of claim 8, the mobile device including an operating system automatically generating the universal device identifier upon initialization of the mobile device or by a firmware process associated with a component of the mobile device.

14. The method of claim 8, the persistent shared storage storing information that persists across the first sandbox, the first application, the second sandbox, and the second application.

15. Non-transitory computer storage having stored thereon a computer program, the computer program including executable instructions that instruct a computer system to at least:

execute a first application in a first sandbox, wherein the first application is restricted from accessing a second sandbox;

execute a second application in a second sandbox, wherein the second application is restricted from accessing the first sandbox;

receive a first request from the first application to access information associated with the mobile device, wherein the first request comprises a universal device identifier;

receive a second request from the second application to access the information associated with the mobile device, wherein the second request comprises the universal device identifier;

identify data associated with the first application indicative of a fraud;

link the data associated with the first application indicative of the fraud with the universal device identifier;

store the data associated with the first application indicative of the fraud in a persistent shared storage associated with the universal device identifier; and

in response to the second request from the second application to access information associated with the mobile device, access the persistent shared storage associated with the universal device identifier and return a data packet comprising the data associated with the first application indicative of the fraud to the second application.

16. The non-transitory computer storage of claim 15, wherein the first application or the second application generates the universal device identifier.

17. The non-transitory computer storage of claim 16, wherein the executable instructions further instruct the computer system to:

obtain the universal device identifier from the first application or the second application; and

store the universal device identifier in the persistent shared storage.

18. The non-transitory computer storage of claim 15, wherein the first request or the second request comprises a storage location identifier of the universal device identifier in the persistent shared storage.

19. The non-transitory computer storage of claim 15, wherein the executable instructions further instruct the computer system to:

generate the universal device identifier on the mobile device in response to the first request; and

communicate the universal device identifier generated in response to the first request to the second application in response to the second request.

20. The non-transitory computer storage of claim 15, wherein the persistent shared storage stores information that persists across the first sandbox, the first application, the second sandbox, and the second application.