Fixed client identification system for positive identification of client to server

• US 8,683,561 B2
• Filed: 08/15/2011
• Issued: 03/25/2014
• Est. Priority Date: 10/25/2002
• Status: Active Grant

• Current Assignee: Mangas Gaming Malta Limited
• Original Assignee: Cambridge Interactive Development Corporation (Giga Media Limited)
• Inventors: Utin, Daniil
• Primary Examiner(s): CHEN, SHIN HON
• Application Number:
  US13/209,980
• Publication Number:
  US 20120084845A1
• Time in Patent Office: 953 Days
• Field of Search: None
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A tamperproof ClientID system to uniquely identify a client machine is invoked upon connection of a client application to a backend. Upon initial connection, the backend issues a unique ClientID containing a checksum. The client application prepares at least two different scrambled versions of the ClientID and stores them in respective predetermined locations on the client machine. Upon subsequent connection to the backend, the client application retrieves and unscrambles the values at the two locations, verifies the checksums and compares the values. If the checksums are both correct and the values match, the ClientID value is sent to the backend, otherwise the client application sends an error code.

Claims

1. A method comprising:

retrieving a first scrambled version and a second scrambled version of unique identifying data by executing a retrieval process, the first and second versions being produced by reversibly scrambling the unique identifying data in response to a client computing device establishing a connection with a backend computing device, wherein the first scrambled version of the unique identifying data is stored at a first predetermined location of the client computing device and the second scrambled version of the unique identifying data is stored at a second predetermined location of the client computing device, different from the first predetermined location;

unscrambling the retrieved first scrambled version to produce a first unscrambled version of the unique identifying data;

unscrambling the retrieved second scrambled version to produce a second unscrambled version of the unique identifying data;

comparing the first unscrambled version and second unscrambled version; and

sending data representative of the comparison to the backend computing device.

2. The method of claim 1, further comprising:

using the comparison data and a stored version of the unique identifying data to grant access of the client computing device to the backend computing device.

3. The method of claim 1, wherein the retrieving the first and second stored scrambled versions of the unique identifying data is based upon the client computing device establishing a subsequent connection with the backend computing device.

4. The method of claim 1, wherein the data representative of the comparison sent to the backend computing device includes the unique identifying data.

5. The method of claim 1, wherein the data representative of the comparison sent to the backend computing device includes an error message.

6. The method of claim 1, wherein the data representative of the comparison sent to the backend computing device includes a request for additional unique identifying data.

7. The method of claim 1, wherein the unique identifying data provides a unique identification for the client computing device.

8. The method of claim 1, wherein the unique identifying data includes a checksum.

9. The method of claim 1, wherein the unique identifying data is encrypted by the backend computing device.

10. The method of claim 1, wherein a first key is used to reversibly scramble the unique identifying data to produce the first scrambled version, and a second key, different than the first key, is used to reversibly scramble the unique identifying data to produce the second scrambled version.

11. A system comprising:

a client computing device configured to execute a retrieval process for retrieving a first scrambled version and a second scrambled version of unique identifying data, the first and second versions being produced by reversibly scrambling the unique identifying data in response to the client computing device establishing a connection with a backend computing device, wherein the first scrambled version of the unique identifying data is stored at a first predetermined location of the client computing device and the second scrambled version of the unique identifying data is stored at a second predetermined location of the client computing device, different from the first predetermined location, the client computing device is configured to unscramble the retrieved first scrambled version to produce a first unscrambled version of the unique identifying data, and, unscramble the retrieved second scrambled version to produce a second unscrambled version of the unique identifying data, the client computing device is further configured to compare the first unscrambled version and second unscrambled version, and send data representative of the comparison to the backend computing device.

12. The system of claim 11, wherein the backend computing device uses the comparison data and a stored version of the unique identifying data to grant the client computing device access.

13. The system of claim 11, wherein the client computing device unscrambles the first and second stored scrambled versions of the unique identifying data based upon the client computing device establishing a subsequent connection with the backend computing device.

14. The system of claim 11, wherein the data representative of the comparison sent to the backend computing device includes the unique identifying data.

15. The system of claim 11, wherein the data representative of the comparison sent to the backend computing device includes an error message.

16. The system of claim 11, wherein the data representative of the comparison sent to the backend computing device includes a request for additional unique identifying data.

17. The system of claim 11, wherein the unique identifying data provides a unique identification for the client computing device.

18. The system of claim 11, wherein the unique identifying data includes a checksum.

19. The system of claim 11, wherein the unique identifying data is encrypted by the backend computing device.

20. The system of claim 11, wherein the client computing device uses a first key to reversibly scramble the unique identifying data to produce the first scrambled version, and uses a second key, different than the first key, to reversibly scramble the unique identifying data to produce the second scrambled version.

21. A computer program product tangibly embodied in a non-transitory computer readable storage device and comprising instructions that when executed by a processor perform operations comprising:

retrieving a first scrambled version and a second scrambled version of unique identifying data by executing a retrieval process, the first and second versions being produced by reversibly scrambling the unique identifying data in response to a client computing device establishing a connection with a backend computing device, wherein the first scrambled version of the unique identifying data is stored at a first predetermined location of the client computing device and the second scrambled version of the unique identifying data is stored at a second predetermined location of the client computing device, different from the first predetermined location;

unscrambling the retrieved first scrambled version to produce a first unscrambled version of the unique identifying data;

unscrambling the retrieved second scrambled version to produce a second unscrambled version of the unique identifying data;

comparing the first unscrambled version and second unscrambled version; and

sending data representative of the comparison to the backend computing device.

22. The computer program product of claim 21, further comprising instructions that when executed by a processor perform operations comprising:

using the comparison data and a stored version of the unique identifying data to grant access of the client computing device to the backend computing device.