Computer Hardware Identity Tracking Using Characteristic Parameter-Derived Data

• US 20110093503A1
• Filed: 10/13/2010
• Published: 04/21/2011
• Est. Priority Date: 10/19/2009
• Status: Abandoned Application

• Current Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig S.
• Application Number:
  US12/903,991
• Publication Number:
  US 20110093503A1
• Time in Patent Office: Days
• US Class Current: 707/780
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

A method for computer identity tracking may be implemented by executing software, for example, from a server, for generating a baseline machine fingerprint for a client device by reading data indicating current configuration states of hardware making up the client device and processing the data to generate the baseline machine fingerprint, storing the baseline machine fingerprint in a database of stored machine fingerprints, subsequently generating a working machine fingerprint for the client device, the working machine fingerprint derived from a portion of the data, the portion determined according to a sampling protocol, querying the database of stored machine fingerprints using the working machine fingerprint and the sampling protocol to determine whether the working machine fingerprint matches a machine fingerprint previously stored in the database, and providing an indication of results from querying the database.

Claims

1. A method for computer identity tracking, comprising:

generating a baseline machine fingerprint for a client device having a processor and memory, at least in part by reading data indicating current configuration states of hardware making up the client device and processing the data to generate the baseline machine fingerprint;

storing the baseline machine fingerprint in a database of stored machine fingerprints;

generating, subsequently, a working machine fingerprint for the client device, the working machine fingerprint derived from a portion of the data, the portion determined according to a sampling protocol;

querying the database of stored machine fingerprints using the working machine fingerprint and the sampling protocol to determine whether the working machine fingerprint matches a machine fingerprint previously stored in the database; and

providing an indication of results from querying the database.

2. The method of claim 1 wherein the querying step further comprises applying the sampling protocol to a stored machine fingerprint to generate a temporary fingerprint for comparison as a potential match to the working machine fingerprint.

3. The method of claim 2 further comprising, where the comparison yields no match, generating additional temporary fingerprints from the remaining stored machine fingerprints and comparing each temporary fingerprint, in succession, to the working machine fingerprint until a match is found or until all temporary fingerprints yield no match.

4. The method of claim 1 wherein the sampling protocol comprises a data filter specifying selection of designated portions of the baseline machine fingerprint for inclusion in the working machine fingerprint.

5. The method of claim 1 wherein the sampling protocol changes each time a working machine fingerprint is generated for the client device.

6. The method of claim 1 wherein the sampling protocol is provided to the client device from a remote source.

7. The method of claim 1 performed by a server in remote communication with the client device.

8. The method of claim 7, further comprising retrieving, using the server, raw configuration data from the client device for use in generating the baseline machine fingerprint.

9. The method of claim 8, further comprising transmitting an application from the server to the client, the application configured for retrieving the raw configuration data.

10. The method of claim 1 performed by a server remote from the client device, wherein the sampling protocol is provided to the client device from a trusted source remote from the server and the client device.

11. The method of claim 1, further comprising registering, in the database of stored machine fingerprints, the baseline machine fingerprint in association with current parameter information for the client device.

12. A method for computer identity tracking, comprising:

generating a baseline machine fingerprint for a hardware component using an algorithm, the algorithm processing characteristic configuration data determined from the hardware component as input, wherein the baseline machine fingerprint is capable of being generated from the hardware component so long as the characteristic configuration data of the hardware component is unchanged;

transmitting the baseline machine fingerprint for storage in a computer-readable data structure;

generating, subsequently, a working machine fingerprint for the hardware component, the working machine fingerprint derived from a portion of the characteristic configuration data, the portion determined according to a sampling protocol; and

generating a data signal, in response to a query comprising the working machine fingerprint and the sampling protocol received at a time after the baseline machine fingerprint was generated, indicating whether the working machine fingerprint matches the baseline fingerprint stored in the computer-readable data structure.

13. The method of claim 12 further comprising, in response to receiving the query, applying the sampling protocol to the stored baseline machine fingerprint to generate a temporary fingerprint for comparison as a potential match to the working machine fingerprint.

14. The method of claim 12 wherein the sampling protocol comprises a data filter specifying selection of designated portions of the baseline machine fingerprint for inclusion in the working machine fingerprint.

15. The method of claim 12 wherein the sampling protocol changes each time a working machine fingerprint is generated for the client device.

16. The method of claim 12, further comprising serving an application from a server in response to the query, the application configured to generate the working machine fingerprint on the hardware component and cause transmission of the working machine fingerprint to the server.

17. The method of claim 12, further comprising retrieving raw configuration data from the hardware component for use in generating the working machine fingerprint.

18. The method of claim 17, further comprising transmitting an application from a server to the hardware component, the application configured for retrieving the raw configuration data.

19. The method of claim 12 wherein the sampling protocol is provided to the client device from a remote source.

20. A computer-readable medium encoded with instructions configured to cause a computer to:

generate a baseline machine fingerprint for a hardware component using an algorithm, the algorithm processing characteristic configuration data determined from the hardware component as input, wherein the baseline fingerprint is capable of being generated from the hardware component so long as the characteristic configuration data of the hardware component is unchanged;

transmit the baseline machine fingerprint for storage in a computer-readable data structure;

generate, subsequently, a working machine fingerprint for the hardware component, the working machine fingerprint derived from a portion of the characteristic configuration data, the portion determined according to a sampling protocol; and

generate a data signal, in response to a query comprising the working machine fingerprint and the sampling protocol received at a time after the baseline machine fingerprint was generated, indicating whether the working machine fingerprint matches the baseline fingerprint stored in the computer-readable data structure.