MULTI-FACTOR DEVICE AUTHENTICATION

• US 20150012752A1
• Filed: 09/21/2014
• Published: 01/08/2015
• Est. Priority Date: 01/24/2011
• Status: Abandoned Application

• Current Assignee: PRIMA Cinema, Inc.
• Original Assignee: PRIMA Cinema, Inc.
• Inventors: PRIYADARSHI, SHAIWAL, WEHR, NICHOLAS PAUL, OSBORNE, ROLAND P.
• Application Number:
  US14/492,054
• Publication Number:
  US 20150012752A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 2209/127 Trusted platform modules [TPM]
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/79 Radio fingerprint
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A method and system for the secure delivery of data to a remote device that has been registered and which requires authentication through the use of a multifactor signature profile is disclosed, and in particular according to certain disclosed aspects, a method and system for ensuring that an authenticated remote device remains authenticated.

Claims

1. A computerized method for authenticating a media playback device across a computer network, comprising the steps of:

determining, at a multi-factor authentication device capable of communicating with said media playback device across said computer network, the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device;

forming an initial multi-factor installation signature based on a result of said determining step;

recording said initial multi-factor installation signature on a device accessible across said computer network;

determining a subsequent multi-factor installation signature based on the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device;

comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile; and

generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.

2. The method of claim 1, wherein said initial multi-factor installation signature comprises a X.509 certificate.

3. The method of claim 1, wherein said initial multi-factor installation signature comprises one or more network addresses associated with said media playback device.

4. The method of claim 3, wherein said initial multi-factor installation signature comprises a geographical location based on said one or more network addresses.

5. The method of claim 1, wherein said initial multi-factor installation signature comprises an input from at least one accelerometer.

6. The method of claim 1, wherein said initial multi-factor installation signature comprises network topology data associated with a network path between said media playback device and a media content provider.

7. A computerized method for authenticating a media playback device across a computer network, comprising the steps of:

determining, at a multi-factor authentication device capable of communicating with said media playback device across said computer network, the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback;

forming an initial multi-factor installation signature based on a result of said determining step;

recording said initial multi-factor installation signature on a device accessible across said computer network;

determining a subsequent multi-factor installation signature based on the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback;

comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile; and

generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.

8. The method of claim 7, wherein said one or more items of auxiliary equipment comprise a HDCP-compliant device coupled to said media playback device via a high-definition multimedia interface (“

HDMI”

), wherein at least one unique HDCP or HDMI parameter is utilized in the generation and verification of the multi-factor installation signature.

9. The method of claim 7, wherein the unique identifiers of the auxiliary equipment are utilized in the generation and verification of the multi-factor installation signature.

10. A computerized method for authenticating a media playback device across a computer network, comprising the steps of:

determining, at a multi-factor authentication device capable of communicating with said media playback device across said computer network, characteristics of the environment associated with said media playback device based on one or more electromagnetic sensors integrated into said media playback device and capable of measuring and sending data to said multi-factor authentication device across said computer network;

forming an initial multi-factor installation signature based on a result of said determining step;

recording said initial multi-factor installation signature on a device accessible across said computer network;

determining, at said multi-factor authentication device, a subsequent multi-factor installation signature based on data received from said one or more electromagnetic sensors;

comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile; and

generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.

11. The method of claim 10, wherein said one or more electromagnetic sensors comprise a radio signal strength sensor.

12. A system for authenticating a media playback device across a computer network, comprising:

a multi-factor authentication device coupled to said media playback device across said computer network, comprising means for determining the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device, means for forming an initial multi-factor installation signature based on a result of said determining means, means for recording said initial multi-factor installation signature on a device accessible across said computer network;

means for determining a subsequent multi-factor installation signature based on the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device, means for comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile, and means for generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.

13. The system of claim 12, wherein said initial multi-factor installation signature comprises a X.509 certificate.

14. The system of claim 12, wherein said initial multi-factor installation signature comprises a network address associated with said media playback device.

15. The system of claim 14, wherein said initial multi-factor installation signature comprises a geographical location based on said network address.

16. The system of claim 12, wherein said initial multi-factor installation signature comprises an input from at least one accelerometer.

17. The system of claim 12, wherein said initial multi-factor installation signature comprises network topology data associated with a network path between said media playback device and a media content provider.

18. A system for authenticating a media playback device across a computer network, comprising the steps of:

a multi-factor authentication device coupled with said media playback device across said computer network, comprising means for determining the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback, means for forming an initial multi-factor installation signature based on a result of said determining means, means for recording said initial multi-factor installation signature on a device accessible across said computer network, means for determining a subsequent multi-factor installation signature based on the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback, means for comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile, and means for generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.

19. The system of claim 18, wherein said one or more items of auxiliary equipment comprise a HDCP-compliant device coupled to said media playback device via a high-definition multimedia interface (“

HDMI”

).

20. A system for authenticating a media playback device across a computer network, comprising:

a multi-factor authentication device coupled to said media playback device across said computer network, comprising means for determining characteristics of the environment associated with said media playback device based on one or more electromagnetic sensors integrated into said media playback device and capable of measuring and sending data to said multi-factor authentication device across said computer network, means for forming an initial multi-factor installation signature based on a result of said determining means, means for recording said initial multi-factor installation signature on a device accessible across said computer network, means for determining, at said multi-factor authentication device, a subsequent multi-factor installation signature based on data received from said one or more electromagnetic sensors, means for comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile, and means for generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.

21. The system of claim 20, wherein said one or more electromagnetic sensors comprise a radio signal strength sensor.