Registration and authentication of computing devices using a digital skeleton key

• US 9,740,849 B2
• Filed: 02/19/2016
• Issued: 08/22/2017
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Atreus Labs LLC
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig S., Harjanto, Dono
• Primary Examiner(s): RAHIM, MONJUR
• Application Number:
  US15/048,466
• Publication Number:
  US 20160180075A1
• Time in Patent Office: 550 Days
• Field of Search: 713182
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2103 Challenge-response

Abstract

A method for registering a computing device to a user account using at least one user-selected fingerprintable device externally accessible to the computing device including transmitting a registration information request to the computing device, receiving at least one device fingerprint of the at least one user-selected fingerprintable device accessible by the computing device, and primary identification data of the computing device, generating a skeleton key, recording the primary identification data, and associating the skeleton key and the primary identification data with the user account. A method for authenticating the computing device including transmitting an authentication information request to the computing device, receiving an encrypted identification data from the computing device, decrypting the encrypted identification data using a skeleton key associated with the user account, comparing the decrypted identification data with a primary identification data associated with the user account, and authenticating the computing device.

Claims

1. A method for registering a first computing device to a user account using at least one user-selected fingerprintable second device externally accessible to the first computing device comprising:

transmitting a registration information request to the first computing device;

receiving at least one device fingerprint of the at least one user-selected fingerprintable second device accessible by the first computing device, and primary identification data of the first computing device;

generating a skeleton key using the at least one device fingerprint of the at least one user-selected fingerprintable second computing device;

recording the primary identification data; and

associating the skeleton key and the primary identification data with the user account;

wherein the receiving step further comprises receiving device fingerprints of a plurality of user-selected fingerprintable second computing devices accessible by the first computing device; and

wherein the generating step includes generating the skeleton key based on an order in which the device fingerprints of the plurality of user-selected fingerprintable second computing devices accessible by the first computing device are received.

2. The method of claim 1 wherein the registration information request specifies a number of user-selected fingerprintable second computing devices accessible by the first computing device.

3. The method of claim 2 wherein the transmitting step includes transmitting a user prompt to be displayed on the first computing device that prompts the user to make accessible the user-selected fingerprintable second computing devices accessible by the first computing device.

4. A non-transitory computer readable medium useful in association with a skeleton key server which includes one or more processors, and a memory, the computer readable medium including computer instructions which are configured to cause the skeleton key server, by execution of the computer instructions in the one or more processors from the memory, to implement registration of a first computing device to a user account using at least one user-selectable fingerprintable second computing device externally accessible to the first computing device by:

transmitting a registration information request to the first computing device;

receiving at least one device fingerprint of the at least one user-selected fingerprintable second computing device accessible by the first computing device, and primary identification data of the first computing device;

generating a skeleton key using the at least one device fingerprint of the at least one user-selected fingerprintable second computing device;

recording the primary identification data; and

associating the skeleton key and the primary identification data with the user account;

wherein the receiving step further comprises receiving device fingerprints of a plurality of user-selected fingerprintable second computing devices accessible by the first computing device; and

wherein the generating step includes generating the skeleton key based on an order in which the device fingerprints of the plurality of user-selected fingerprintable second computing devices accessible by the first computing device are received.

5. The computer readable medium of claim 4 wherein the registration information request specifies a number of user-selected fingerprintable second computing devices accessible by the first computing device.

6. The computer readable medium of claim 5 wherein the transmitting step includes transmitting a user prompt to be displayed on the first computing device that prompts the user to make accessible the user-selected fingerprintable second computing devices accessible by the first computing device.

7. A computer system comprising:

at least one hardware processor;

a non-transitory computer readable medium that is operatively coupled to the hardware processor; and

a first computing device registration logic that (i) executes in the processor from the computer readable medium and (ii) when executed by the processor causes the computer system to implement registration of a first computing device to a user account using at least one user-selected fingerprintable second computing device externally accessible to the first computing device by;

transmitting a registration information request to the first computing device;

receiving at least one device fingerprint of the at least one user-selected fingerprintable second computing device accessible by the first computing device, and primary identification data of the first computing device;

generating a skeleton key using the at least one device fingerprint of the at least one user-selected fingerprintable second computing device;

recording the primary identification data; and

associating the skeleton key and the primary identification data with the user account;

wherein the receiving step further comprises receiving device fingerprints of a plurality of user-selected fingerprintable second computing devices accessible by the first computing device; and

wherein the generating step includes generating the skeleton key based on an order in which the device fingerprints of the plurality of user-selected fingerprintable second computing devices accessible by the first computing device are received.

8. The system of claim 7 wherein the registration information request specifies a number of user-selected fingerprintable second computing devices accessible by the first computing device.

9. The system of claim 8 wherein the transmitting step includes transmitting a user prompt to be displayed on the first computing device that prompts the user to make accessible the user-selected fingerprintable second computing devices accessible by the first computing device.

10. A method for authenticating a first computing device associated with a user account using at least one user-selected fingerprintable second computing device accessible by the first computing device, the method comprising:

transmitting an authentication information request to the first computing device;

receiving an encrypted identification data from the first computing device wherein the encrypted identification data has been encrypted by device fingerprints device fingerprints of a plurality of second computing devices accessible by the first computing device;

decrypting the encrypted identification data using a skeleton key associated with the user account;

wherein the skeleton key is generated based on an order in which the device fingerprints of the plurality of user selected fingerprintable second computing devices accessible by the first computing device are received and includes at least one stored device fingerprint, and the decrypting step further comprises using the at least one stored device fingerprint to decrypt the encrypted identification data;

comparing the decrypted identification data with a primary identification data associated with the user account; and

authenticating the first computing device when the decrypted identification data matches the primary identification data.

11. The method of claim 10 wherein the skeleton key includes a plurality of stored device fingerprints, and the decrypting step further comprises using the plurality of stored device fingerprints to decrypt the encrypted identification data.

12. The method of claim 11 wherein the transmitting step includes transmitting a user prompt to be displayed on the first computing device that prompts the user to make second computing devices accessible by the first computing device.

19. The method of claim 10 wherein the encrypted identification data has been encrypted by multiple device fingerprints of at least one of the at least one second computing device accessible by the first computing device.

20. The method of claim 19 wherein the skeleton key includes a plurality of stored device fingerprints, and the decrypting step further comprises using the plurality of stored device fingerprints to decrypt the encrypted identification data.

21. The method of claim 20 wherein the transmitting step includes transmitting a user prompt to be displayed on the first computing device that prompts the user to make the second computing device accessible by the first computing device.

13. A non-transitory computer readable medium useful in association with a skeleton key server which includes one or more processors, and a memory, the computer readable medium including computer instructions which are configured to cause the skeleton key server, by execution of the computer instructions in the one or more processors from the memory, to implement authentication of a first computing device associated with a user account using at least one second computing device accessible by the first computing device by:

transmitting an authentication information request to the first computing device;

receiving an encrypted identification data from the first computing device wherein the encrypted identification data has been encrypted by device fingerprints device fingerprints of a plurality of second computing devices accessible by the first computing device;

decrypting the encrypted identification data using a skeleton key associated with the user account;

wherein the skeleton key is generated based on an order in which the device fingerprints of the plurality of user selected fingerprintable second computing devices accessible by the first computing device are received and includes at least one stored device fingerprint, and the decrypting step further comprises using the at least one stored device fingerprint to decrypt the encrypted identification data;

comparing the decrypted identification data with a primary identification data associated with the user account; and

authenticating the first computing device when the decrypted identification data matches the primary identification data.

14. The computer readable medium of claim 13 wherein the skeleton key includes a plurality of stored device fingerprints, and the decrypting step further comprises using the plurality of stored device fingerprints to decrypt the encrypted identification data.

15. The computer readable medium of claim 14 wherein the transmitting step includes transmitting a user prompt to be displayed on the first computing device that prompts the user to make second computing devices accessible by the first computing device.

16. The computer readable medium of claim 13 wherein the encrypted identification data has been encrypted by multiple device fingerprints of at least one of the at least one second computing device accessible by the first computing device.

17. The computer readable medium of claim 13 wherein the skeleton key includes a plurality of stored device fingerprints, and the decrypting step further comprises using the plurality of stored device fingerprints to decrypt the encrypted identification data.

18. The computer readable medium of claim 17 wherein the transmitting step includes transmitting a user prompt to be displayed on the first computing device that prompts the user to make the second computing device accessible by the first computing device.