Temporal adjustment of identifiers

• US 9,641,641 B1
• Filed: 04/21/2014
• Issued: 05/02/2017
• Est. Priority Date: 04/21/2014
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Krahn, Darren David, Engedy, Balzs Csaba, Yu, Chiahsing
• Primary Examiner(s): Dailey, Thomas
• Assistant Examiner(s): ABDERRAHMEN, CHOUAT
• Application Number:
  US14/257,836
• Time in Patent Office: 1,107 Days
• Field of Search: 713171, 713168, 713169, 713150, 713155, 713156, 713176, 709227, 709217, 709206, 709203, 709245, 709229, 709224, 709223, 709219, 709228, 726 27, 726 28, 726 26, 726 2, 726 4, 726 5, 726 6, 726 7, 726 21, 726 3, 726 14, 726 18, 726 19, 726 17
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Aspects of the subject technology relate to systems and methods for providing temporally adjusted identifiers. A first identifier is received. A second identifier is determined based on time parameters and the first identifier. The time parameters include at least a period, where the period is a minimum duration of time prior to providing a computing device with a new identifier. The second identifier is provided for transmission to at least one computing device.

Claims

1. A computer-implemented method, comprising:

receiving, from a first computing device and by a second computing device, a first identifier of an entity, the entity being associated with the first computing device;

generating a first time value based on a calculation using and one or more time parameters and a predetermined period of time associated with the entity;

generating a second time value based on the first time value and a parameter associated with a service provider for the entity, the service provider being different than the entity;

generating, by the second computing device, a second identifier of the entity from a one-way function having a first input based on the received first identifier, and a second input based on the second time value;

providing the second identifier to the first computing device or a third computing device associated with the service provider for the entity;

certifying, for the third computing device associated with the service provider, that the second identifier is a legitimate identifier; and

generating a new identifier for the entity when the predetermined period of time is elapsed,

wherein the predetermined period of time is a minimum duration of time prior to providing a new identifier.

2. The method of claim 1, further comprising:

receiving, from the first computing device and by the second computing device, a third identifier;

determining whether a time duration greater than the predetermined period of time has elapsed since the second identifier was provided to the first computing device or the third computing device;

responsive to the determining that the time duration greater than the predetermined period of time has elapsed, generating a fourth identifier based on the third identifier, the predetermined period of time, and a third time value; and

providing the fourth identifier to the first computing device or the third computing device.

3. The method of claim 2, wherein the first identifier and the third identifier are the same.

4. The method of claim 1, wherein the first time value is based on one or more clock values associated with the second computing device.

5. The method of claim 1, wherein the generating comprises:

determining the first time value based on one or more clock values associated with the second computing device and the predetermined period of time; and

determining a message authentication code using the first identifier as a key and the second time value as a message, wherein the second identifier is the message authentication code.

6. The method of claim 1, further comprising receiving, from the first computing device and by the second computing device, an index value, wherein:

the first identifier is associated with a plurality of index values, the plurality of index values comprising the received index value, and

the generating the second identifier is further based on the received index value.

7. The method of claim 6, wherein the first time value is based on one or more clock values of the second computing device, the predetermined period of time, and the received index value.

8. The method of claim 6, wherein the generating comprises:

determining the second time value based on one or more clock values of the second computing device, the predetermined period of time, and the received index value; and

determining a message authentication code using the first identifier as a key and the second time value as a message, wherein the second identifier is the message authentication code.

9. The method of claim 1, further comprising receiving a requester identifier associated with a requester device, the requester device being configured to receive the second identifier, wherein the generating the second identifier is further based on the requester identifier.

10. The method of claim 9, wherein the providing the second identifier comprises providing the second identifier from the second computing device to the requester device.

11. The method of claim 1, wherein the second identifier is provided to the first computing device.

12. A system, comprising:

one or more processors; and

a non-transitory computer-readable medium comprising instructions stored therein, which when executed by the one or more processors, cause the one or more processors to perform operations comprising;

receiving, from a first computing device, a first identifier of an entity, the entity being associated with the first computing device;

generating a first time value based on a calculation using and one or more time parameters and a predetermined period of time associated with the entity, at least one of the one or more time parameters being based a first set of one or more clock values associated with the system;

generating a second time value based on the first time value and a parameter associated with a service provider for the entity, the service provider being different than the entity;

generating a second identifier of the entity from a one-way function having a first input based on the first identifier, and a second input based on the second time value;

providing the second identifier to the first computing device or a second computing device associated with the service provider for the entity;

certifying, for the second computing device associated with the service provider, that the second identifier is a legitimate identifier; and

generating a new identifier for the entity when the predetermined period of time is elapsed,

wherein the predetermined period of time is a minimum duration of time prior to providing the first computing device with a new identifier.

13. The system of claim 12, wherein the instructions, when executed by the one or more processors, cause the one or more processors to perform operations further comprising:

receiving, from the first computing device, a third identifier;

determining whether a time duration greater than the predetermined period of time has elapsed since the second identifier was provided to the first computing device or the s computing device;

responsive to the determining that the time duration greater than the predetermined period of time has elapsed, generating a fourth identifier based on the third identifier, the predetermined period of time, and a second set of one or more clock values; and

providing the fourth identifier to the first computing device or the second computing device.

14. The system of claim 12, the first set of one or more clock values comprising at least a first clock value and a second clock value, wherein the first time value is based on the predetermined period of time and a difference between the first clock value and the second clock value.

15. The system of claim 12, wherein the instructions, when executed by the one or more processors, cause the one or more processors to perform operations further comprising receiving, from the first computing device, an index value, and wherein:

the first identifier is associated with a plurality of index values, the plurality of index values comprising the received index value, and

the generating the second identifier is further based on the received index value.

16. The system of claim 12, wherein the parameter associated with the service provider is a requester identifier associated with the second computing device, and wherein the instructions, when executed by the one or more processors, cause the one or more processors to perform operations further comprising:

receiving, from the first computing device, the requester identifier.

17. A non-transitory machine-readable medium comprising instructions stored therein, which when executed by a machine, cause the machine to perform operations comprising:

receiving, from a first computing device, a first identifier of an entity, the entity being associated with the first computing device;

generating a first time value based on a calculation using and one or more time parameters and a predetermined period of time associated with the entity;

generating a second time value based on the first time value and a parameter associated with a service provider for the entity, the service provider being different than the entity;

generating a second identifier of the entity from a one-way function having a first input based on the first identifier, and a second input based on the second time value;

providing the second identifier to the first computing device or a second computing device associated with the service provider for the entity;

certifying, for the second computing device associated with the service provider, that the second identifier is a legitimate identifier; and

generating a new identifier for the entity when the predetermined period of time is elapsed,

wherein the predetermined period of time is a minimum duration of time prior to providing the first computing device with a new identifier.

18. The non-transitory machine-readable medium of claim 17, wherein the instructions, when executed by one or more processors, cause the one or more processors to perform operations further comprising:

receiving, from the first computing device, a third identifier;

determining whether a time duration greater than the predetermined period of time has elapsed since the second identifier was provided to the first computing device or the second computing device;

responsive to the determining whether a time duration greater than the predetermined period of time has elapsed since the second identifier was provided, generating a fourth identifier based on the third identifier, the predetermined period of time, and a third time value; and

providing the fourth identifier to the first computing device or the second computing device.

19. The non-transitory machine-readable medium of claim 17, wherein the instructions, when executed by one or more processors, cause the one or more processors to perform operations further comprising receiving, from the first computing device, an index value, and wherein:

the first identifier is associated with a plurality of index values, the plurality of index values comprising the received index value, and

the generating the second identifier is further based on the received index value.

20. The non-transitory machine-readable medium of claim 17, wherein the parameter associated with the service provider is a requester identifier associated with the second computing device, and wherein the instructions, when executed by one or more processors, cause the one or more processors to perform operations further comprising:

receiving, from the first computing device, the requester identifier.