Hardware identification through cookies

• US 9,571,492 B2
• Filed: 09/17/2012
• Issued: 02/14/2017
• Est. Priority Date: 09/15/2011
• Status: Active Grant

• Current Assignee: Uniloc 2017 LLC (SoftBank Group Corp.)
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig Stephen
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): MEJIA, FELICIANO S
• Application Number:
  US13/621,809
• Publication Number:
  US 20130167195A1
• Time in Patent Office: 1,611 Days
• Field of Search: 709222-225, 709/229, 713/168, 713/176, 713/180, 713/170, 713/480, 726/4, 726/3
• US Class Current: 1/1
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Multiple cookies of a client device are used to form an identifier of the client device such that a change in one or even several browser cookies does not defeat proper device recognition. The cookies are included in the identifier such that individual cookies can be parsed for separate comparison with corresponding cookies of known devices. However, to protect privacy of all devices, individual parameters of the constituent cookies are represented with irreversible hashes of the respective parameters. Recognition involves quantification of a degree of correlation between the cookies and corresponding cookies of each of the known devices. To quantify the degree of correlation, the observed stability and uniqueness of each cookie, and each cookie attribute, is considered.

Claims

1. A method for recognizing a given remotely-located device as either a known device or an unknown device, the method comprising:

receiving, from the given device, a device identifier generated by hashing multiple cookies supplied from at least two different hosts which cookies are stored on the given device;

determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices; and

determining that the given device is a known device upon a condition in which the amount of correlation is at least a predetermined threshold.

2. The method of claim 1 wherein the device identifier includes an irreversible hash of host data of each of the browser cookies.

3. The method of claim 1 wherein the device identifier includes an irreversible hash of attribute value data of each of the browser cookies.

4. The method of claim 1 wherein determining an amount of correlation between the device identifier of the given device and corresponding identifiers of each of one or more other devices comprises:

using a degree of stability of each of the identifiers.

5. The method of claim 1 wherein determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices comprises:

using a degree of uniqueness of each of the device identifiers.