System and method for controlling use of a network resource

• US 8,165,078 B2
• Filed: 11/19/2008
• Issued: 04/24/2012
• Est. Priority Date: 11/19/2008
• Status: Active Grant

• Current Assignee: Quotient Technology Inc.
• Original Assignee: Quotient Technology Inc.
• Inventors: Walsh, Michael, Keswani, Ravi, Babu, Manicka, Reihaneh, Nahrin, Li, Bingwu
• Primary Examiner(s): Wu, Jianye
• Application Number:
  US12/274,348
• Publication Number:
  US 20100124235A1
• Time in Patent Office: 1,252 Days
• Field of Search: None
• US Class Current: 370/329
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0225 Avoiding frauds
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A system includes a control source that is provided on a server and control logic that executes on a terminal. The control logic executes on a terminal to (i) identify a plurality of attributes on the terminal, the attributes including an identifier for each of a plurality of terminal assets that include one or more of a hardware fixture, firmware, or operating system; and (ii) generate signature data from the plurality of attributes. The control source is configured to make a determination from the signature data as to whether the terminal is known or unknown.

Claims

1. A system for controlling use of a network resource, the system comprising:

a control source that is provided on a network server comprising a combination of one or more processors and memory resources to communicate with a plurality of terminals in order to control use of the network resource;

a control logic that executes on a terminal comprising a combination of processor and memory resources to identify a plurality of attributes of the terminal, one or more of the plurality of attributes including one or more of an identifier for a hardware fixture of the terminal, an identifier for firmware of the terminal, or an identifier for an operating system of the terminal, and to generate signature data that identifies the terminal based on combining the plurality of attributes; and

wherein the control source is configured to make a determination from the signature data as to whether the terminal is known or unknown;

wherein the control source is configured to enable or allow a requested use of the network resource by the terminal if the determination is that the terminal is unknown;

wherein the control source is configured to deny a requested use of the network resource by the terminal based on the determination being that the terminal is known.

2. The system of claim 1, wherein the control source is configured to identify historical data on the terminal'"'"'s past use of the network resource in response to determining that the terminal is known, and wherein the control source uses a set of usage rules to determine to enable or allow a requested use of the network resource based on the historical data and the set of usage rules.

3. The system of claim 1, wherein the control logic executes on the terminal to generate the signature data in response to each instance that a user of the terminal requests the resource or requests to use the network resource.

4. The system of claim 1, wherein the control source is configured to selectively signal a license to the terminal in order to enable the terminal to use the network resource based in part on the determination that the terminal is known or unknown.

5. The system of claim 4, wherein the network resource corresponds to an electronic coupon offer, and wherein the control logic is integrated or coupled to a print driver, and wherein the license corresponds to data that enables the print driver to use the electronic coupon offer to generate a print coupon that is redeemable at a merchant site.

6. The system of claim 5, wherein the control source is configured to signal the license when the terminal is unknown, or the terminal is known to have not over-requested the electronic coupon offer more than permitted by one or more usage rules associated with the electronic coupon offer.

7. The system of claim 1, wherein

the control logic executes on the terminal to generate signature data that includes a plurality of signature components, each signature component being derived from a corresponding identifier of one of the assets, a signature value that is based on at least a combination of at least some of the plurality of signature components;

and

the control source is configured to make the determination as to whether the terminal is known by comparing the signature value to a known signature value of a roster of known terminals, or if the signature value is not known, using at least some of the plurality of signature components to make a determination as to whether the signature components provide a reliable partial match to corresponding known signature components of terminals on the roster.

8. The system of claim 7, the control logic executes on the terminal to generate signature data that is hashed.

9. The system of claim 7, wherein the system includes a statistical analysis component that analyzes a sampling of signature components from a given population to assign a reliability parameter to individual signature components of signature data of the terminal that the determination is being made.

10. A computer-implemented method, executable on a server, for controlling use of a resource over a network, the method comprising:

making a control logic available on the network to control use of the resource;

enabling each of a plurality of terminals that execute the control logic to request use of the resource;

configuring the control logic to operate on each of the plurality terminals in order to generate, for each terminal of the plurality of terminals, signature data that identifies that terminal, the signature data being based on a plurality of terminal attributes of that terminal, one or more terminal attributes of the plurality of terminal attributes including an identifier corresponding to a hardware fixture of the terminal, an identifier corresponding to firmware of the terminal, or an identifier corresponding to an operating system of the terminal, and to communicate the signature data to the server;

making an identification determination of each of the plurality of terminals, wherein for each of at least some of the plurality of terminals, making the identification determination is performed without use of cookie data or data footprints on that terminal;

responsive to receiving a request to use the resource from any of the plurality of terminals, using the identification determination of that terminal to enable or deny a specific use of the resource by the terminal;

wherein the specific use of the resource by that terminal is enabled if the terminal is unknown;

wherein the specific use of the resource by that terminal is denied based on the identification determination of that terminal being that that terminal is known.

11. The method of claim 10, wherein configuring the control logic includes incorporating instructions into the control logic to cause at least some of the plurality of terminals to individually identify attribute identifiers corresponding to at least two of a hardware fixture identifier, a firmware identifier, or an operating system identifier.

12. The method of claim 10, wherein configuring the control logic includes incorporating instructions into the control logic to cause at least some of the terminals of the plurality of terminals to individually identify attribute identifiers of multiple hardware fixtures.

13. A computer-implemented method for controlling a terminal in using a resource, the method being performed by a combination of one or more processors and memory, the method comprising:

programmatically scanning a terminal for a plurality of attribute identifiers, wherein one or more attribute identifiers of the plurality of attribute identifiers corresponds to a hardware fixture of the terminal, firmware of the terminal, or operating system of the terminal;

generating signature data based in part from the plurality of attribute identifiers;

making a determination, on a control source that is remote to the terminal, as to whether the terminal is known or unknown to the control source, the determination being made using the signature data;

controlling, from the control source, performance of a print operation by the terminal on the resource based at least in part on the determination;

wherein the control source allows performance of the print operation by the terminal on the resource if the determination is that the terminal is unknown.

14. The method of claim 13, wherein generating the signature data includes performing a one-way hash on the one or more attribute identifiers, then communicating the signature data to the control source so that the plurality of attribute identifiers used to generate the signature data are not known to the control source.

15. The method of claim 13, wherein the resource corresponds to an electronic coupon offer, and wherein the method further comprises selectively enabling the print operation to be performed on the electronic coupon offer, so as to enable a user of the terminal to produce a print coupon from the electronic coupon offer.

16. The method of claim 13, wherein making a determination as to whether the terminal is known or unknown includes comparing at least a portion of the signature data to other signatures of known terminals.

17. The method of claim 16,

wherein generating the signature data includes generating multiple signature components that separately correspond to one of the plurality of attribute identifiers, and a signature value based on a combination of at least some of the signature components;

and

wherein making the determination includes determining one of the signature value matches a signature value of one of the known terminals, or one or more signature components individually match corresponding signature components of one of the known terminals and are reliable in uniquely belonging to the one of the known terminals.

18. The method of claim 13, further comprising:

responsive to making the determination that the terminal is known, determining historical information about the terminal'"'"'s past use of the resource, the historical information being determinative of whether the terminal to be enabled or allowed to perform the print operation.

19. A system for controlling use of a resource, the system comprising:

a terminal comprising one or more processors configured to execute logic that causes the one or more processors to;

programmatically scan the terminal for a plurality of attribute identifiers, wherein one or more attribute identifiers of the plurality of attribute identifiers corresponds to a hardware fixture of the terminal, firmware of the terminal, or operating system of the terminal;

generate signature data based in part from the one or more attribute identifiers;

communicate the signature data to a control source over the network;

the control source that is provided on a network server comprising a combination of one or more processors and memory resources and that is coupled to the terminal over the network, wherein the control source is configured to;

use the signature data from the terminal to make a determination as to whether the terminal is known or unknown;

signal instruction data to the terminal to either enable or preclude performance of a print operation based on the determination;

wherein the control source enables performance of the print operation if the determination is that the terminal is unknown.

20. The system of claim 19, wherein the one or more processors of the terminal are further configured to generate the signature data by hashing the one or more attribute identifiers, so that the one or more attribute identifiers are not determinable from the control source.

21. The system of claim 19, wherein the one or more processors of the terminal are further configured to programmatically scan the terminal for one or more attribute identifiers of a firmware or operating system assets of the terminal.

22. The system of claim 19, wherein the resource corresponds to an electronic coupon offer, and wherein the control source is configured to control the print operation to create a coupon from the electronic coupon offer.

23. The system of claim 22, wherein the control source is configured to:

signal the instruction data to the terminal to enable the print operation when the determination is that the terminal is unknown;

determine instances of past print operations on the electronic coupon offer by the terminal when the determination is that the terminal is known, then (a) signal the instruction data to the terminal to enable the print operation if a number of the past instances is less than a predetermined limit, or (b) preclude the print operation if the number of the past instances is more than the predetermined limit.

24. A non-transitory computer-readable medium storing one or more sequences of instructions for controlling use of a resource over a network that, when executed by one or more processors, causes the processors to perform:

making available on the network a control logic to control use of the resource;

enabling each of a plurality of terminals that execute the control logic to request use of the resource;

configuring the control logic to operate on each of the plurality terminals in order to generate, for each terminal of the plurality of terminals, signature data that identifies that terminal, the signature data being based on a plurality of terminal attributes of that terminal, one or more terminal attributes of the plurality of terminal attributes including an identifier corresponding to a hardware fixture of the terminal, an identifier corresponding to firmware of the terminal, or an identifier corresponding to an operating system of the terminal, and to communicate the signature data to a server;

making an identification determination of each of the plurality of terminals, wherein for each of at least some of the plurality of terminals, making the identification determination is performed without use of cookie data or data footprints on that terminal;

responsive to receiving a request to use the resource from any of the plurality of terminals, using the identification determination of that terminal to enable or deny a specific use of the resource by the terminal;

wherein the specific use of the resource by that terminal is enabled if the terminal is unknown;

wherein the specific use of the resource by that terminal is denied based on the identification determination of that terminal being that that terminal is known.

25. The non-transitory computer-readable medium of claim 24, wherein the instructions that cause configuring the control logic include instructions that cause incorporating instructions into the control logic to cause at least some of the terminals of the plurality of terminals to individually identify attribute identifiers corresponding to at least two of a hardware fixture identifier, a firmware identifier, or an operating system identifier.

26. The non-transitory computer-readable medium of claim 24, wherein the instructions that cause configuring the control logic include instructions that cause incorporating instructions into the control logic to cause at least some of the terminals of the plurality of terminals to individually identify attribute identifiers of multiple hardware fixtures.

27. A non-transitory computer-readable medium storing instructions for controlling a terminal in using a resource, wherein the instructions, when executed by one or more processors, causes:

programmatically scanning a terminal for a plurality of attribute identifiers, wherein one or more attribute identifiers of the plurality of attribute identifiers corresponds to a hardware fixture of the terminal, firmware of the terminal, or operating system of the terminal;

generating signature data based in part from the plurality of attribute identifiers;

making a determination, on a control source that is remote to the terminal, as to whether the terminal is known or unknown to the control source, the determination being made using the signature data;

controlling, from the control source, performance of a print operation by the terminal on the resource based at least in part on the determination;

wherein the control source allows performance of the print operation by the terminal on the resource if the determination is that the terminal is unknown.

28. The non-transitory computer-readable medium of claim 27, wherein generating the signature data includes performing a one-way hash on the one or more attribute identifiers and communicating the signature data to the control source so that the plurality of attribute identifiers used to generate the signature data are not known to the control source.

29. The non-transitory computer-readable medium of claim 27, wherein:

the resource corresponds to an electronic coupon offer; and

the instructions, when executed by the one or more processors, further cause selectively enabling the print operation to be performed on the electronic coupon offer, so as to enable a user of the terminal to produce a print coupon from the electronic coupon offer.

30. The non-transitory computer-readable medium of claim 27, wherein the instructions that cause making a determination as to whether the terminal is known or unknown include instructions that cause comparing at least a portion of the signature data to other signatures of known terminals.

31. The non-transitory computer-readable medium of claim 30, wherein:

generating the signature data includes generating multiple signature components that separately correspond to one of the plurality of attribute identifiers, and a signature value based on a combination of at least some of the signature components;

making the determination includes determining one of the signature value matches a signature value of one of the known terminals, or one or more signature components individually match corresponding signature components of one of the known terminals and are reliable in uniquely belonging to the one of the known terminals.

32. The non-transitory computer-readable medium of claim 27, wherein the instructions, when executed by the one or more processors, further cause, responsive to making the determination that the terminal is known, determining historical information about the terminal'"'"'s past use of the resource, the historical information being determinative of whether the terminal to be enabled or allowed to perform the print operation.