Device authentication using inter-person message metadata

• US 9,578,502 B2
• Filed: 03/04/2014
• Issued: 02/21/2017
• Est. Priority Date: 04/11/2013
• Status: Active Grant

• Current Assignee: Atreus Labs LLC
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig S.
• Primary Examiner(s): Shehni, Ghazal
• Application Number:
  US14/196,083
• Publication Number:
  US 20140310774A1
• Time in Patent Office: 1,085 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A device authentication server authenticates a remotely located device using unique data associated with the user of the device stored on a remotely located server that has an established relationship with the device, such as client logic installed on the device and authentication data of the user stored on the device. The unique data can be unique metadata associated with inter-person messages. Since each user receives and sends a unique collection of messages, the unique message meta-data associated with a user'"'"'s account is, in aggregate, unique.

Claims

1. A method for identifying a remotely located device, the method comprising:

receiving device identification data from the device, wherein the device identification data includes;

a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices; and

message metadata, wherein the message metadata represents one or more metadata of one or more inter-person messages associated with the device, wherein the one or more inter-person message is a message composed by one person and intended to be received by one or more other persons;

determining that the device identifier identifies the device;

determining that the message metadata is consistent with corresponding reference message metadata previously stored for the device; and

authenticating the device as a recognized device upon determining that the message metadata is consistent with the corresponding reference message metadata.

2. The method of claim 1 wherein the message metadata is retrieved by the remotely located device from a remotely located server that provides a social networking service.

3. The method of claim 1 wherein the device identification data also includes internal state data that represents one or more attributes of an internal state of the device;

and

wherein authenticating the device as the recognized device is performed in response to also determining that the internal state data is consistent with previously stored reference internal state data for the device.

4. The method of claim 1 further comprising:

sending challenge data to the device, wherein the challenge data specifies the manner in which the device is to gather and form the device identification data, including the message metadata.

5. The method of claim 1 further comprising:

in response to authenticating the device as the recognized device, adjusting the reference message metadata in accordance with the message metadata.

6. A non-transitory computer readable medium useful in association with a computer that includes one or more processors and a memory, the computer readable medium including computer instructions that are configured to cause the computer, by execution of the computer instructions in the one or more processors from the memory, to identify a remotely located device by at least:

receiving device identification data from the device, wherein the device identification data includes;

a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices; and

message metadata, wherein the message metadata represents one or more metadata of one or more inter-person messages associated with the device, wherein the one or more inter-person message is a message composed by one person and intended to be received by one or more other persons;

determining that the device identifier identifies the device;

determining that the message metadata is consistent with corresponding reference message metadata previously stored for the device; and

authenticating the device as a recognized device upon determining that the message metadata is consistent with the corresponding reference message metadata.

7. The computer readable medium of claim 6 wherein the message metadata is retrieved by the remotely located device from a remotely located server that provides a social networking service.

8. The computer readable medium of claim 6 wherein the device identification data also includes internal state data that represents one or more attributes of an internal state of the device;

and

wherein authenticating the device as the recognized device is performed in response to also determining that the internal state data is consistent with previously stored reference internal state data for the device.

9. The computer readable medium of claim 6 wherein the computer instructions are configured to cause the computer to identify a remotely located device by at least also:

sending challenge data to the device, wherein the challenge data specifies the manner in which the device is to gather and form the device identification data, including the message metadata.

10. The computer readable medium of claim 6 wherein the computer instructions are configured to cause the computer to identify a remotely located device by at least also:

in response to authenticating the device as the recognized device, adjusting the reference message metadata in accordance with the message metadata.

11. A computer system comprising:

at least one processor;

a computer readable medium that is operatively coupled to the processor;

network access circuitry that is operatively coupled to the processor; and

device identification logic (i) that executes at least in part in the processor from the computer readable medium and (ii) that, when executed, causes the processor to identify a remotely located device by at least;

receiving device identification data from the device, wherein the device identification data includes;

a device identifier, wherein the device identifier is a unique identifier of one of a number of known devices; and

message metadata, wherein the message metadata represents one or more metadata of one or more inter-person message associated with the device, wherein the one or more inter-person message is a message composed by one person and intended to be received by one or more other persons;

determining that the device identifier identifies the device;

determining that the message metadata is consistent with corresponding reference message metadata previously stored for the device; and

authenticating the device as a recognized device upon determining that the message metadata is consistent with the corresponding reference message metadata.

12. The computer system of claim 11 wherein the message metadata is retrieved by the remotely located device from a remotely located server that provides a social networking service.

13. The computer system of claim 11 wherein the device identification data also includes internal state data that represents one or more attributes of an internal state of the device;

and

wherein authenticating the device as the recognized device is performed in response to also determining that the internal state data is consistent with previously stored reference internal state data for the device.

14. The computer system of claim 11 wherein the device identification logic is configured to cause the processor to identify a remotely located device by at least also:

sending challenge data to the device, wherein the challenge data specifies the manner in which the device is to gather and form the device identification data, including the message metadata.

15. The computer system of claim 11 wherein the device identification logic is configured to cause the processor to identify a remotely located device by at least also:

in response to authenticating the device as the recognized device, adjusting the reference message metadata in accordance with the message metadata.