Device authentication using device environment information

• US 9,143,496 B2
• Filed: 06/10/2013
• Issued: 09/22/2015
• Est. Priority Date: 03/13/2013
• Status: Active Grant

• Current Assignee: Atreus Labs LLC
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig S.
• Primary Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US13/914,584
• Publication Number:
  US 20140282933A1
• Time in Patent Office: 834 Days
• Field of Search: 713/168, 713/169, 713/170, 713/171
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

A device authentication server authenticates a remotely located device using a detailed history of movement of the device. Such movement history is represented by data representing a history of the external state of the device within a physical environment, examples of which include accelerometer logs, orientation logs, and magnetic field logs. To authentication of the device, the device authentication server sends a device key challenge to the device. The device key challenge specifies a randomized selection of device attribute parts to be collected from the device and the manner in which the device attribute parts are to be combined to form a device key. The device key is data that identifies and authenticates the device and includes a device identifier and device environmental data for comparison to reference device environmental data.

Claims

1. A method for identifying a remotely located device, the method comprising:

by a processor;

receiving device identification data from the device, where the device identification data includes;

a device identifier, where the device identifier is a unique identifier of one of a number of known devices; and

device environmental data, where the device environmental data represents one or more unique external states of the device within a physical environment, the external states including states of acceleration of the device in physical space;

determining that the device identifier identifies the device;

determining that the device environmental data is consistent with corresponding reference device environmental data previously stored for the device; and

authenticating the device as a recognized device upon determining that the device environmental data is consistent with the corresponding reference device environmental data;

where device identification data further comprises internal state data that represents one or more attributes of an internal state of the device and where authenticating the device as the recognized device is performed in response to also determining that the internal state data is consistent with previously stored reference internal state data for the device.

2. The method of claim 1 further comprising:

sending challenge data to the device, wherein the challenge data specifies a manner in which the device is to gather and form the device identification data, including at least a portion of a history of external states of the device.

3. The method of claim 1 further comprising:

in response to authenticating the device as the recognized device, adjusting the reference device environmental data in accordance with the device environmental data.

4. A non-transitory computer readable medium configured for use with a computer that includes one or more processors and a memory, the computer readable medium including computer instructions that are configured to cause the computer, by execution of the computer instructions in the one or more processors from the memory, to identify a remotely located device by at least:

receiving device identification data from the device, where the device identification data includes;

a device identifier, where the device identifier is a unique identifier of one of a number of known devices; and

device environmental data, where the device environmental data represents one or more unique external states of the device within a physical environment, the one or more external states including states of acceleration of the device in physical space;

determining that the device identifier identifies the device;

determining that the device environmental data is consistent with corresponding reference device environmental data previously stored for the device; and

authenticating the device as a recognized device upon determining that the device environmental data is consistent with the corresponding reference device environmental data;

where device identification data further comprises internal state data that represents one or more attributes of an internal state of the device and where authenticating the device as the recognized device is performed in response to also determining that the internal state data is consistent with previously stored reference internal state data for the device.

5. The computer readable medium of claim 4 wherein the computer instructions are configured to cause the computer to identify a remotely located device by at least also:

sending challenge data to the device, wherein the challenge data specifies a manner in which the device is to gather and form the device identification data, including at least a portion of a history of external states of the device.

6. The computer readable medium of claim 4 wherein the computer instructions are configured to cause the computer to identify a remotely located device by at least also:

in response to authenticating the device as the recognized device, adjusting the reference device environmental data in accordance with the device environmental data.

7. A computer system comprising:

at least one processor;

a computer readable medium that is operatively coupled to the at least one processor;

network access circuitry that is operatively coupled to the at least one processor; and

device identification logic (i) that executes at least in part in the at least one processor from the computer readable medium and (ii) that, when executed, causes the at least one processor to identify a remotely located device by at least configuring the processor to;

receive device identification data from the device, where the device identification data includes;

a device identifier, where the device identifier is a unique identifier of one of a number of known devices; and

device environmental data, where the device environmental data represents one or more unique external states of the device within a physical environment, the one or more external states including states of acceleration of the device in physical space;

determine that the device identifier identifies the device;

determine that the device environmental data is consistent with corresponding reference device environmental data previously stored for the device; and

authenticate the device as a recognized device upon determining that the device environmental data is consistent with the corresponding reference device environmental data;

where device identification data further comprises internal state data that represents one or more attributes of an internal state of the device and where authenticating the device as the recognized device is performed in response to also determining that the internal state data is consistent with previously stored reference internal state data for the device.

8. The computer system of claim 7 wherein the device identification logic causes the computer to identify a remotely located device by at least also:

sending challenge data to the device, wherein the challenge data specifies a manner in which the device is to gather and form the device identification data, including at least a portion of a history of external states of the device.

9. The computer system of claim 7 wherein the device identification logic causes the computer to identify a remotely located device by at least also:

in response to authenticating the device as the recognized device, adjusting the reference device environmental data in accordance with the device environmental data.