System and method for device authentication with built-in tolerance

• US 8,316,421 B2
• Filed: 10/13/2010
• Issued: 11/20/2012
• Est. Priority Date: 10/19/2009
• Status: Active Grant

• Current Assignee: Atreus Labs LLC
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig S.
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): HERZOG, MADHURI R
• Application Number:
  US12/903,948
• Publication Number:
  US 20110093920A1
• Time in Patent Office: 769 Days
• Field of Search: 726 1- 4, 726 16- 21, 726 22- 30, 713168-170, 713180-187, 709217-219, 709223-229
• US Class Current: 726/4
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A system for building tolerance into authentication of a computing device includes a means for executing, from a computer-readable medium, computer-implementable steps of: (a) receiving and storing a first digital fingerprint of the device during a first boot of an authenticating software on the device, the first digital fingerprint based on a first set of device components, (b) receiving a second digital fingerprint from the device at a subsequent time, (c) comparing the second digital fingerprint with a plurality of stored digital fingerprints of known devices, (d) in response to the comparison indicating a mismatch between the second digital fingerprint and the plurality of stored digital fingerprints, generating a request code comprising instructions for the device to generate a third digital fingerprint using the first set of device components, (e) sending the request code to the remote device, (f) receiving the third digital fingerprint from the remote device in response to the request code, and (g) authenticating the device based on a comparison of the first and third digital fingerprints.

Claims

1. A method for building tolerance into authentication of a device, comprising:

receiving and storing a first digital fingerprint of the device during a first boot of an authenticating software on the device, the first digital fingerprint being based on a first set of device components;

receiving a second digital fingerprint from the device at a subsequent time;

comparing the second digital fingerprint with a plurality of stored digital fingerprints of known devices;

in response to the comparison indicating a mismatch between the second digital fingerprint and the plurality of stored digital fingerprints, generating a request code comprising instructions for the device to generate a third digital fingerprint using the first set of device components;

sending the request code to the remote device;

receiving the third digital fingerprint from the remote device in response to the request code;

generating a control metric by encoding one or more differences between the first and second digital fingerprints;

generating a second metric by encoding one or more differences between the first and third digital fingerprints, wherein each metric comprises data identifying, for each of the one or more differences encoded, a fingerprint portion and associated component portion, the associated component portion identifying a device component that caused a difference to occur during comparison of digital fingerprints, and

authenticating the device based on a comparison between the control metric and the second metric, wherein the device is validly authenticated when the comparison between the control metric and the second metric determines that an acceptable percentage of the associated components of the control metric and the associated components of the second metric match.

2. The method of claim 1, wherein the first set comprises components from at least one of a typical-upgrade list and a non-typical-upgrade list.

3. The method of claim 2, wherein the typical-upgrade list comprises one or more components selected from the group consisting of graphic card, random access memory, sound card, network adaptor, hard drive, CD/DVD drive, and Ethernet controller.

4. The method of claim 2, wherein the non-typical-upgrade list comprises one or more components selected from the group consisting of motherboard, USB host controller, central microprocessor, PCI Bus, and System CMOS Clock.

5. The method of claim 1, wherein the device is validly authenticated when the comparison of the first and third digital fingerprints yields an accuracy of at least 75%.

6. The method of claim 1, wherein the acceptable percentage is 100%.