Multi-tiered anti-abuse registration for a mobile device user

• US 8,620,315 B1
• Filed: 09/29/2006
• Issued: 12/31/2013
• Est. Priority Date: 09/29/2006
• Status: Expired due to Fees

• Current Assignee: R2 Solutions LLC (Acacia Research Corporation)
• Original Assignee: Yahoo! Inc. (Apollo Global Management, Inc.)
• Inventors: Merritt, Arthur, Jiang, Zhaowei Charlie, Liang, James
• Primary Examiner(s): SAMS, MATTHEW C
• Application Number:
  US11/536,975
• Time in Patent Office: 2,650 Days
• Field of Search: 455/435.1, 455/403, 455/410, 455/411, 709217-219, 709227-229, 380247-249
• US Class Current: 455/435.1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

Various embodiments are directed to providing a multi-tiered anti-abuse approach to registration of a mobile device user. A registration service may determine whether communications with the mobile device is through a trusted carrier gateway, and if so, then a mobile device identifier may be used to automatically register the mobile device. Otherwise, a determination may be made whether the mobile device is configured to support a challenge-response image. In one embodiment, such determination may be based, in part, on information received from the mobile device through a user agent, or the like. If the mobile device is capable of supporting a challenge-response image, one may be sent to the mobile device to enable registration. If, however, the mobile device does not support the challenge-response image and the carrier gateway is not trusted, the mobile device may be directed to employ an SMS mechanism to complete registration.

Claims

1. A method comprising:

receiving, at a computing device over a network, a request for registration from a mobile device;

determining, via the computing device, that a carrier gateway associated with the mobile device is trustable, said trustable determination comprising receiving information corresponding to a mobile device identifier from the carrier gateway, said information comprising at least one item of information chosen from a group of information items consisting of a Mobile Identification Number, an Electronic Serial Number, and an application serial number;

automatically registering, via the computing device, the mobile device based on the mobile device identifier when the carrier gateway associated with the mobile device is determined trustable;

facilitating registration, via the computing device, of the mobile device based on the determination that the carrier gateway is untrustable and a determination that the mobile device supports a display of a challenge-response image, wherein said untrustable determination is based on a failure to receive said information; and

facilitating registration, via the computing device, of the mobile device by employing a text-message mechanism when the challenge-response image is unsupportable on the mobile device.

2. The method of claim 1, further comprising:

if the mobile device has attempted to register more than a predetermined number of times within a defined time period, denying another registration attempt by the mobile device.

3. The method of claim 1, wherein the Mobile Identification Number, the Electronic Serial Number, and the application serial number each are useable as the mobile device identifier.

4. The method of claim 1, wherein employing a text-messaging mechanism further comprises:

receiving a mobile-originated text message from the mobile device, wherein the text message includes an access code; and

if the mobile device has not attempted to register more than a determined number of times within a defined time period, registering a user of the mobile device.

5. The method of claim 1, wherein employing a text-messaging mechanism further comprises:

sending a message-terminated text message to the mobile device, wherein the text message includes an access code;

receiving the access code from the mobile device; and

if the mobile device has not attempted to register more than a determined number of times within a defined time period, using the access code to register a user of the mobile device.

6. A non-transitory computer-readable storage medium tangibly encoded with computer-executable instructions, that when executed by a processor associated with a computing device, performs a method comprising:

receiving, over a network, a request for registration from a mobile device;

determining that a carrier gateway associated with the mobile device is trustable, said trustable determination comprising receiving information corresponding to a mobile device identifier from the carrier gateway, said information comprising at least one item of information chosen from a group of information items consisting of a Mobile Identification Number, an Electronic Serial Number, and an application serial number;

registering the mobile device based on the mobile device identifier when the carrier gateway associated with the mobile device is determined trustable, said registration is independent of an action from a user of the mobile device if the mobile device is unregistered;

facilitating registration of the mobile device_based on the determination that the carrier gateway is untrustable and a determination that the mobile device supports a display of a challenge-response image, wherein said untrustable determination is based on a failure to receive said information; and

facilitating registration of the mobile device by employing a text-message mechanism when the challenge-response image is unsupportable on the mobile device.

7. The non-transitory computer-readable storage medium of claim 6, further comprising:

denying registration if the mobile device has attempted to register more than a predetermined number of times within a defined time period.

8. The non-transitory computer-readable storage medium of claim 6, wherein the challenge-response image comprises employing at least one distorted image.

9. The non-transitory computer-readable storage medium of claim 6, wherein employing a text-messaging mechanism comprises communicating an access code to the mobile device in a Short Message Service (SMS) message, and registering the mobile device upon recognition of the access code being entered into a webpage from the mobile device.

10. The non-transitory computer-readable storage medium of claim 6, wherein said determination that the mobile device supports a display of a challenge-response image comprises:

determining if the mobile device is configured to display an image with a screen resolution above a defined resolution.