Registration and authentication of computing devices using a digital skeleton key

• US 9,286,466 B2
• Filed: 03/15/2013
• Issued: 03/15/2016
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Atreus Labs LLC
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig S., Harjanto, Dono
• Primary Examiner(s): RAHIM, MONJUR
• Application Number:
  US13/832,982
• Publication Number:
  US 20140281561A1
• Time in Patent Office: 1,096 Days
• Field of Search: 713/182
• US Class Current: 1/1
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2103 Challenge-response

Abstract

A method for registering a computing device to a user account using at least one user-selected fingerprintable device externally accessible to the computing device including transmitting a registration information request to the computing device, receiving at least one device fingerprint of the at least one user-selected fingerprintable device accessible by the computing device, and primary identification data of the computing device, generating a skeleton key, recording the primary identification data, and associating the skeleton key and the primary identification data with the user account. A method for authenticating the computing device including transmitting an authentication information request to the computing device, receiving an encrypted identification data from the computing device, decrypting the encrypted identification data using a skeleton key associated with the user account, comparing the decrypted identification data with a primary identification data associated with the user account, and authenticating the computing device.

Claims

1. A non-transitory computer readable medium useful in association with a skeleton key server which includes one or more processors, and a memory, the computer readable medium including computer instructions which are configured to cause the skeleton key server, by execution of the computer instructions in the one or more processors from the memory, to implement authentication of a first device associated with a user account using at least one second device accessible by the first device, wherein the second device is user-selected and fingerprintable, by:

transmitting an authentication information request to the first device;

receiving an encrypted identification data from the first device which has been encrypted by at least one device fingerprint of at least one second device accessible by the first device, wherein the second device is user-selected and fingerprintable;

decrypting the encrypted identification data using a skeleton key associated with the user account;

wherein the skeleton key includes at least one stored device fingerprint, and the decrypting step further comprises using the at least one stored device fingerprint to decrypt the encrypted identification data;

comparing the decrypted identification data with a primary identification data associated with the user account; and

authenticating the computing device when the decrypted identification data matches the primary identification data.

2. The computer readable medium of claim 1 wherein the encrypted identification data has been encrypted by device fingerprints of a plurality of second devices accessible by the first device, wherein the second devices are user selected and fingerprintable.

3. The computer readable medium of claim 2 wherein the skeleton key includes a plurality of stored device fingerprints, and the decrypting step further comprises using the plurality of stored device fingerprints to decrypt the encrypted identification data.

4. The computer readable medium of claim 3 wherein the transmitting step includes transmitting a user prompt to be displayed on the first device that prompts the user to make accessible the second devices accessible by the first device.

5. The computer readable medium of claim 1 wherein the encrypted identification data has been encrypted by device fingerprints of the second device accessible by the computing device, wherein the second device is user-selected and fingerprintable.

6. The computer readable medium of claim 5 wherein the skeleton key includes a plurality of stored device fingerprints, and the decrypting step further comprises using the plurality of stored device fingerprints to decrypt the encrypted identification data.

7. The computer readable medium of claim 6 wherein the transmitting step includes transmitting a user prompt to be displayed on the first device that prompts the user to make accessible the second device accessible by the first device.