Method of identifying an electronic device by browser versions and cookie scheduling

• US 8,984,612 B1
• Filed: 09/04/2014
• Issued: 03/17/2015
• Est. Priority Date: 09/04/2014
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Gat, Yoram, Shuba, Yaniv, Wyrobnik, David
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US14/477,351
• Time in Patent Office: 194 Days
• Field of Search: 726/4, 726/9, 709/224
• US Class Current: 726/9
• CPC Class Codes: G06F 16/954 Navigation, e.g. using categorised browsing
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A web service provider identifies electronic devices that are associated with a particular user by using device parameters, and user agents strings to cluster the user'"'"'s web service requests determine whether the requests in each cluster originated from a single device or multiple devices. For any cluster having requests from multiple devices, the provider will analyze the scheduling cookies associated with each request to determine how many devices submitted the requests in each cluster. The system will then store identified devices and their characteristics in a profile for the user. Then, when the user submits a new web service request, the web service provider can compare data in the request such as device parameters, user agent strings and/or cookies to identify the device from which the new request originated.

Claims

1. A method of identifying a device that requests access to a web service, comprising, by one or more processors of a provider of the web service:

receiving, from a registered user of the web service, a first group of requests to access one or more web service functions;

receiving, in connection each of the requests in the first group, one or more data points about an electronic device from which the request originated;

analyzing the data points and grouping the requests into a plurality of clusters so that each cluster comprises requests that originate from either a single electronic device or from a plurality of electronic devices having one or more similar properties;

using the clusters to identify a set of devices that are used by the registered user by;

for each cluster, determining whether the cluster'"'"'s requests originated from a single electronic device or a plurality of electronic devices,

generating a profile for the registered user so that the profile includes characteristics of the user'"'"'s identified electronic devices, and

storing the profile in a data store;

receiving, from the requesting user via a requesting device, an additional request to access one of the more of the web service functions;

analyzing the additional request to determine whether the requesting device is one of the devices in the registered user'"'"'s profile;

upon determining that the requesting device is one of the electronic devices in the user'"'"'s profile, providing the web service functions of the additional request to the requesting device.

2. The method of claim 1:

further comprising receiving, by the one or more processors of the web service provider in connection with each of the requests in the first group, a user agent string that corresponds to a client application from which the request originated; and

wherein determining whether the cluster'"'"'s requests originated from a single electronic device or a plurality of electronic devices comprises analyzing the user agent strings to determine whether each request in the cluster can originate from a single electronic device.

3. The method of claim 2, wherein, for any cluster, analyzing the user agent strings to determine whether each request in the cluster can originate from a single electronic device comprises:

analyzing a client application version identifier in each user agent string to determine whether the client application version identifiers show a regression to a prior version over time; and

if the client application version identifiers show a regression to a prior version over time then determining that the cluster'"'"'s requests originated from a plurality of electronic devices, otherwise concluding that the cluster'"'"'s requests originated from a single electronic device.

4. The method of claim 2, wherein upon determining that any cluster'"'"'s requests may have originated from a plurality of electronic devices, then the method also comprises, for that cluster:

for each request in that cluster, identifying a scheduling cookie associated with the electronic device from which the request originated, wherein each scheduling cookie has an associated type and a time;

applying interval scheduling to the associated types and times of each scheduling cookie to determine a number of devices that could have used the scheduling cookies without any single device in the cluster using at least two scheduling cookies of the same type at the same time; and

including the determined number of devices in the profile.

5. The method of claim 4, further comprising, for each device in the determined number of devices, returning a report of a web service function that corresponds to that device'"'"'s request.

6. The method of claim 1, wherein:

the one or more data points received about each electronic device comprise one of the following;

an operating system identifier,

a client application version, or

a screen resolution; and

generating the profile includes including the one or more data points for each electronic device in the profile.

7. The method of claim 1, wherein the additional request includes one or more parameters of the requesting device, and the method further comprises, by the one or more processors of the web service provider:

using the one or more parameters to match the electronic device from which the additional request originated with one of the electronic devices in the registered user'"'"'s profile;

identifying one or more characteristics of the matched electronic device;

using the identified characteristics to select a parameter for one or more of the web service functions of the additional request; and

when providing the web service functions of the additional request to the requesting device, delivering those web service functions with the selected parameter.

8. The method of claim 1, wherein:

when analyzing the additional request, if the analyzing does not conclude that the additional request originated from one of the electronic devices in the registered user'"'"'s profile, then the method also includes;

causing a client application from which the additional request originated to generate a prompt to provide an additional authentication credential; and

only providing the additional request'"'"'s web service functions to the requesting device after the web service receives the additional authentication credential.

9. A web service provider system, comprising:

a processor; and

a computer-readable medium containing programming instructions configured to cause the processor to identify a device that requests access to a web service by;

receiving, from a registered user of the web service, a first group of requests to access one or more web service functions;

receiving, in connection each of the requests in the first group, one or more data points about an electronic device from which the request originated;

analyzing the data points and grouping the requests into a plurality of clusters so that each cluster comprises requests that originate from either a single electronic device or from a plurality of electronic devices having one or more similar properties;

using the clusters to identify a set of devices that are used by the registered user by;

for each cluster, determining whether the cluster'"'"'s requests originated from a single electronic device or a plurality of electronic devices,

generating a profile for the registered user so that the profile includes characteristics of the user'"'"'s identified electronic devices, and

storing the profile in a data store;

receiving, from the requesting user via a requesting device, an additional request to access one of the more of the web service functions;

analyzing the additional request to determine whether the requesting device is one of the devices in the registered user'"'"'s profile;

upon determining that the requesting device is one of the electronic devices in the user'"'"'s profile, providing the web service functions of the additional request to the requesting device.

10. The system of claim 9, further comprising additional programming instructions configured to cause the processor to:

receive, in connection with each of the requests in the first group, a user agent string that corresponds to a client application from which the request originated; and

when determining whether the cluster'"'"'s requests originated from a single electronic device or a plurality of electronic devices, analyze the user agent strings to determine whether each request in the cluster can originate from a single electronic device.

11. The system of claim 10, wherein, for any cluster, the instructions to analyze the user agent strings to determine whether each request in the cluster can originate from a single electronic device comprise instructions to:

analyze a client application version identifier in each user agent string to determine whether the client application version identifiers show a regression to a prior version over time; and

if the client application version identifiers show a regression to a prior version over time then determine that the cluster'"'"'s requests originated from a plurality of electronic devices, otherwise conclude that the cluster'"'"'s requests originated from a single electronic device.

12. The system of claim 10, further comprising instructions to, upon determining that any cluster'"'"'s requests may have originated from a plurality of electronic devices, then:

for each request in that cluster, identify a scheduling cookie associated with the electronic device from which the request originated, wherein each scheduling cookie has an associated type and a time;

apply interval scheduling to the associated types and times of each scheduling cookie to determine a number of devices that could have used the scheduling cookies without any single device in the cluster using at least two scheduling cookies of the same type at the same time; and

include the determined number of devices in the profile.

13. The system of claim 12, further comprising additional programming instructions configured to cause the processor to, for each device in the determined number of devices, return a report of a web service function that corresponds to that device'"'"'s request.

14. The system of claim 9, further comprising additional instructions to, when generating the profile, including one or more of the following data points for each electronic device in the profile:

an operating system identifier,

a client application version, or

a screen resolution.

15. The system of claim 9, further comprising additional programming instructions configured to cause the processor to:

identify, from the request, one or more parameters of the requesting device and use the identified one or more parameters to match the electronic device from which the additional request originated with one of the electronic devices in the registered user'"'"'s profile;

identify one or more characteristics of the matched electronic device;

use the identified characteristics to select a parameter for one or more of the web service functions of the additional request; and

when providing the web service functions of the additional request to the requesting device, deliver those web service functions with the selected parameter.

16. The system of claim 9, further comprising additional programming instructions configured to cause the processor to:

when analyzing the additional request, if the analyzing does not conclude that the additional request originated from one of the electronic devices in the registered user'"'"'s profile, then also;

cause a client application from which the additional request originated to generate a prompt to provide an additional authentication credential; and

only provide the additional request'"'"'s web service functions to the requesting device after the web service receives the additional authentication credential.

17. A method of identifying a group of devices that correspond to a registered of a web service, comprising, by one or more processors of a provider of the web service:

receiving, from a registered user of the web service, a first group of requests to access one or more web service functions;

receiving, in connection each of the requests in the first group;

one or more data points about an electronic device from which the request originated, and

a user agent string that corresponds to a client application from which the request originated;

analyzing the data points and grouping the requests into a plurality of clusters so that each cluster comprises requests that originate from either a single electronic device or from a plurality of single electronic devices having one or more similar properties;

using the clusters to identify a set of devices that are used by the registered user by;

for each cluster, determining whether the cluster'"'"'s requests originated from a single electronic device or a plurality of electronic devices by analyzing the user agent strings to determine whether each request in the cluster may have originated from a single electronic device,

generating a profile for the registered user so that the profile includes characteristics of each of the user'"'"'s identified electronic devices, and

storing the profile in a data store.

18. The method of claim 17, wherein, for any cluster, analyzing the user agent strings to determine whether each request in the cluster may have originated from a single electronic device comprises:

analyzing a client application version identifier in each user agent string to determine whether the client application version identifiers show a regression to a prior version over time; and

if the client application version identifiers show a regression to a prior version over time then determining that the cluster'"'"'s requests originated from a plurality of electronic devices, otherwise concluding that the cluster'"'"'s requests originated from a single electronic device.

19. The method of claim 17, wherein upon determining that any cluster'"'"'s requests may have originated from a plurality of electronic devices, then the method also comprises, for that cluster:

for each request in that cluster, identifying a scheduling cookie associated with the electronic device from which the request originated, wherein each scheduling cookie has an associated type and a time;

analyzing the associated types and times of each scheduling cookie to determine a number of devices that could have used the scheduling cookies without any single device in the cluster using at least two scheduling cookies of the same type at the same time; and

including the determined number of devices in the profile.

20. The method of claim 19, further comprising, for each device in the determined number of devices, including in the profile a web service function that corresponds to that device'"'"'s request.

21. The method of claim 19, wherein determining the number of devices that could have used the scheduling cookies without any single device using at least two scheduling cookies of the same type at the same time in the cluster comprises:

for each request in that cluster, analyzing a persistent cookie and a non-persistent cookie;

applying a first rule that that no single device may be associated with two different persistent cookies that overlap in time; and

applying a second rule that no single device may be associated with two different non-persistent cookies at the same time.

22. A web service provider system, comprising:

a processor; and

a computer-readable medium containing programming instructions configured to cause the processor to identify a device that requests access to a web service by;

receiving, from a registered user of the web service, a first group of requests to access one or more web service functions;

receiving, in connection each of the requests in the first group;

one or more data points about an electronic device from which the request originated, and

a user agent string that corresponds to a client application from which the request originated;

analyzing the data points and grouping the requests into a plurality of clusters so that each cluster comprises requests that originate from either a single electronic device or from a plurality of single electronic devices having one or more similar properties;

using the clusters to identify a set of devices that are used by the registered user by;

for each cluster, determining whether the cluster'"'"'s requests originated from a single electronic device or a plurality of electronic devices by analyzing the user agent strings to determine whether each request in the cluster may have originated from a single electronic device,

generating a profile for the registered user so that the profile includes characteristics of each of the user'"'"'s identified electronic devices, and

storing the profile in a data store.

23. The system of claim 22, wherein the instructions to analyze the user agent strings for any cluster to determine whether each request in the cluster may have originated from a single electronic device comprise instructions to:

analyze a client application version identifier in each user agent string to determine whether the client application version identifiers show a regression to a prior version over time; and

if the client application version identifiers show a regression to a prior version over time then determine that the cluster'"'"'s requests originated from a plurality of electronic devices, otherwise conclude that the cluster'"'"'s requests originated from a single electronic device.

24. The system of claim 22, further comprising additional instructions to, upon determining that any cluster'"'"'s requests may have originated from a plurality of electronic devices, then also causing the processor to:

for each request in that cluster, identify a scheduling cookie associated with the electronic device from which the request originated, wherein each scheduling cookie has an associated type and a time;

analyze the associated types and times of each scheduling cookie to determine a number of devices that could have used the scheduling cookies without any single device in the cluster using at least two scheduling cookies of the same type at the same time; and

include the determined number of devices in the profile.

25. The system of claim 24, further comprising additional instructions to, for each device in the determined number of devices, include in the profile a web service function that corresponds to that device'"'"'s request.

26. The system of claim 24, wherein the instructions to determine the number of devices that could have used the scheduling cookies without any single device using at least two scheduling cookies of the same type at the same time in the cluster comprise instructions to:

for each request in that cluster, analyze a persistent cookie and a non-persistent cookie;

apply a first rule that that no single device may be associated with two different persistent cookies that overlap in time; and

apply a second rule that no single device may be associated with two different non-persistent cookies at the same time.