Device authentication using display device irregularity

• US 8,695,068 B1
• Filed: 06/06/2013
• Issued: 04/08/2014
• Est. Priority Date: 04/25/2013
• Status: Active Grant

• Current Assignee: Atreus Labs LLC
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Harjanto, Dono, Etchegoyen, Craig S.
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US13/911,574
• Time in Patent Office: 306 Days
• Field of Search: 726/5
• US Class Current: 726/5
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A device authentication server authenticates a remotely located device using data representing pixel irregularities of a display of the device. Since each display will deteriorate in a unique and randomized way, a unique mapping of pixel irregularities of a display of a device will be unique. By combining unique map of pixel irregularities of a display of the remotely located device, the device can be distinguished from similar devices when other attributes alone are insufficient to uniquely identify the device.

Claims

1. A method for identifying a remotely located device, the method comprising:

receiving device identification data from the device, wherein the device identification data includes;

a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices; and

pixel irregularity data, wherein the pixel irregularity represents one or more pixel irregularities of at least one monitor of the device and wherein the pixel irregularity data is derived by the remotely located device by, for each of one or more pixels of a display of the remotely located device;

(i) writing test data to the pixel, (ii) reading display data from the pixel, wherein the display data specifies a color currently displayed for the pixel, and (iii) comparing the test data to the display data to identify an irregularity of the pixel;

determining that the device identifier identifies the device;

comparing the pixel irregularity data to corresponding reference pixel irregularity data previously stored for the device;

determining that the pixel irregularity data is consistent with the corresponding reference pixel irregularity data if the pixel irregularity data (i) does not indicate less pixel irregularity than the reference pixel irregularity data, (ii) does not indicate the absence of any pixel irregularity previously observed in the reference pixel irregularity data, and (iii) does not indicate greater pixel irregularity than the reference pixel irregularity data by more than a predetermined rate of deterioration; and

authenticating the device as a recognized device upon determining that the pixel irregularity data is consistent with the corresponding reference pixel irregularity data.

2. The method of claim 1 wherein the pixel irregularity data represents one or more failed sub-pixels of a display of the remotely located device.

3. The method of claim 1 wherein the pixel irregularity data is in the form of a losslessly compressed image format.

4. A non-transitory computer readable medium useful in association with a computer that includes one or more processors and a memory, the computer readable medium including computer instructions that are configured to cause the computer, by execution of the computer instructions in the one or more processors from the memory, to identify a remotely located device by at least:

receiving device identification data from the device, wherein the device identification data includes;

a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices; and

pixel irregularity data, wherein the pixel irregularity represents one or more pixel irregularities of at least one monitor of the device and wherein the pixel irregularity data is derived by the remotely located device by, for each of one or more pixels of a display of the remotely located device;

(i) writing test data to the pixel, (ii) reading display data from the pixel, wherein the display data specifies a color currently displayed for the pixel, and (iii) comparing the test data to the display data to identify an irregularity of the pixel;

determining that the device identifier identifies the device;

comparing the pixel irregularity data to corresponding reference pixel irregularity data previously stored for the device;

determining that the pixel irregularity data is consistent with the corresponding reference pixel irregularity data if the pixel irregularity data (i) does not indicate less pixel irregularity than the reference pixel irregularity data, (ii) does not indicate the absence of any pixel irregularity previously observed in the reference pixel irregularity data, and (iii) does not indicate greater pixel irregularity than the reference pixel irregularity data by more than a predetermined rate of deterioration; and

authenticating the device as a recognized device upon determining that the pixel irregularity data is consistent with the corresponding reference pixel irregularity data.

5. The computer readable medium of claim 4 wherein the pixel irregularity data represents one or more failed sub-pixels of a display of the remotely located device.

6. The computer readable medium of claim 4 wherein the pixel irregularity data is in the form of a losslessly compressed image format.

7. A computer system comprising:

at least one processor;

a computer readable medium that is operatively coupled to the processor;

network access circuitry that is operatively coupled to the processor; and

device identification logic (i) that executes at least in part in the processor from the computer readable medium and (ii) that, when executed, causes the processor to identify a remotely located device by at least;

receiving device identification data from the device, wherein the device identification data includes;

a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices; and

pixel irregularity data, wherein the pixel irregularity represents one or more pixel irregularities of at least one monitor of the device and wherein the pixel irregularity data is derived by the remotely located device by, for each of one or more pixels of a display of the remotely located device;

(i) writing test data to the pixel, (ii) reading display data from the pixel, wherein the display data specifies a color currently displayed for the pixel, and (iii) comparing the test data to the display data to identify an irregularity of the pixel;

determining that the device identifier identifies the device;

comparing the pixel irregularity data to corresponding reference pixel irregularity data previously stored for the device;

determining that the pixel irregularity data is consistent with the corresponding reference pixel irregularity data if the pixel irregularity data (i) does not indicate less pixel irregularity than the reference pixel irregularity data, (ii) does not indicate the absence of any pixel irregularity previously observed in the reference pixel irregularity data, and (iii) does not indicate greater pixel irregularity than the reference pixel irregularity data by more than a predetermined rate of deterioration; and

authenticating the device as a recognized device upon determining that the pixel irregularity data is consistent with the corresponding reference pixel irregularity data.

8. The computer system of claim 7 wherein the pixel irregularity data represents one or more failed sub-pixels of a display of the remotely located device.

9. The computer system of claim 7 wherein the pixel irregularity data is in the form of a losslessly compressed image format.