Systems and methods for pairing a credential to a device identifier

• US 9,178,889 B2
• Filed: 09/27/2013
• Issued: 11/03/2015
• Est. Priority Date: 09/27/2013
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Metral, Max Edward
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US14/039,124
• Publication Number:
  US 20150095992A1
• Time in Patent Office: 767 Days
• Field of Search: 726/5, 726/1, 726/7, 726/21, 726/24
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Systems and methods are disclosed which may allow a user having a mobile device to automatically authenticate to a server using a device identifier associated with the mobile device. An access point may be configured to send the device identifier as well as additional identifying information to the server so that the device identifier can be accurately matched to the mobile device. Then, when the mobile device submits a credential during authentication, the device identifier and the credential may be matched such that the next time the server receives the device identifier from the access point, the mobile device may be automatically authenticated.

Claims

1. A system comprising:

a network interface component configured to;

receive a request to authenticate including a credential;

send a first plurality of packets with a first predetermined timing and length associated with the credential; and

receive information including a device identifier associated with a second plurality of packets with a second predetermined timing and length from;

one or more processors configured to;

generate the first plurality of packets; and

pair the received credential to the received device identifier when the first plurality of packets and the first predetermined timing and length match the second plurality of packets and the second predetermined timing and length; and

a memory storing the paired device identifier and credential.

2. The system of claim 1, wherein the device identifier comprises at least one of a media access control (MAC) address and an International Mobile Station Equipment Identity (IMEI) number.

3. The system of claim 1, wherein:

the one or more processors are further configured to automatically authenticate a device having the device identifier using the stored credential paired to the device identifier when the network interface component receives the device identifier.

4. The system of claim 1, wherein the information including the device identifier is received from an access point.

5. The system of claim 4, wherein the access point comprises at least one of a wireless access point and a mobile phone base station.

6. A method comprising:

receiving, by a server, a request to authenticate to the server, the request to authenticate including a credential;

sending, by the server, in response to the request to authenticate, a first plurality of packets with a first predetermined timing and length associated with the credential;

receiving, by the server, information including a device identifier of a device associated with a second plurality of packets with a second predetermined timing and length; and

pairing, by the server, the received credential to the device identifier when the first plurality of packets and the first predetermined timing and length match the second plurality of packets and the second predetermined timing and length.

7. The method of claim 6, wherein receiving information including a device identifier comprises receiving at least one of a media access control (MAC) address and an International Mobile Station Equipment Identity (IMEI) number of a device in communication with an access point.

8. The method of claim 6, wherein receiving information including a device identifier comprises receiving the device identifier from at least one of a wireless access point and a mobile phone base station.

9. The method of claim 6, further comprising:

automatically authenticating a device having the device identifier using the stored credential paired to the device identifier when the device identifier is received.

10. The method of claim 9, wherein receiving information including the device identifier comprises receiving a packet including the device identifier.

11. The method of claim 6, wherein receiving information including a device identifier comprises receiving the device identifier from an access point.

12. The method of claim 6, wherein sending a stream of packets comprises sending the stream of packets to the device via an access point.

13. A method comprising:

receiving, by a server, a request to authenticate to the server, the request to authenticate including a credential;

sending, by the server, in response to the request to authenticate, executable instructions associated with a first plurality of packets with a first predetermined timing and length;

receiving, by the server, a device identifier and a second plurality of packets with a second predetermined timing and length from a device executing the executable instructions; and

pairing, by the server, the received credential to the device identifier when the first plurality of packets and the first predetermined timing and length match the second plurality of packets and the second predetermined timing and length.

14. The method of claim 13, wherein receiving a device identifier comprises receiving at least one of a media access control (MAC) address and an International Mobile Station Equipment Identity (IMEI) number of the device.

15. The method of claim 13, wherein receiving a device identifier comprises receiving the device identifier from at least one of a wireless access point and a mobile phone base station.

16. The method of claim 13, further comprising automatically authenticating a device having the device identifier using the stored credential paired to the device identifier when the device identifier is received.

17. The method of claim 13, wherein the executable instructions are configured to execute on the device and send the device identifier of the device and the first plurality of packets with the first predetermined timing and length to the server.

18. The method of claim 17, wherein the executable instruction are further configured to request permission before executing on the device.