Hardware identification through cookies

• US 10,142,337 B2
• Filed: 01/26/2017
• Issued: 11/27/2018
• Est. Priority Date: 09/15/2011
• Status: Active Grant

• Current Assignee: Uniloc 2017 LLC (SoftBank Group Corp.)
• Original Assignee: Uniloc 2017 LLC (SoftBank Group Corp.)
• Inventors: Etchegoyen, Craig S.
• Primary Examiner(s): Moorthy, Aravind K
• Application Number:
  US15/416,920
• Publication Number:
  US 20170142107A1
• Time in Patent Office: 670 Days
• Field of Search: 726 3, 726 6, 713168, 713170, 713182
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Multiple cookies of a client device are used to form an identifier of the client device such that a change in one or even several browser cookies does not defeat proper device recognition. The cookies are included in the identifier such that individual cookies can be parsed for separate comparison with corresponding cookies of known devices. However, to protect privacy of all devices, individual parameters of the constituent cookies are represented with irreversible hashes of the respective parameters. Recognition involves quantification of a degree of correlation between the cookies and corresponding cookies of each of the known devices. To quantify the degree of correlation, the observed stability and uniqueness of each cookie, and each cookie attribute, is considered.

Claims

1. A computer system comprising:

at least one processor;

a computer readable medium that is operatively coupled to the processor; and

a first computing device recognition logic that (i) executes in the processor from the computer readable medium and (ii) when executed by the processor causes the computer system to recognize a given remotely-located device as either a known device or an unknown device by;

receiving, from the given device, a device identifier generated by hashing multiple cookies supplied from at least two different hosts which cookies are stored on the given device;

determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices; and

determining that the given device is a known device upon a condition in which the amount of correlation is at least a predetermined threshold.

2. The system of claim 1 wherein the device identifier includes an irreversible hash of host data of each of the browser cookies.

3. The system of claim 1 wherein the device identifier includes an irreversible hash of attribute value data of each of the browser cookies.

4. The system of claim 1 wherein determining an amount of correlation between the device identifier of the given device and corresponding identifiers of each of one or more other devices comprises:

using a degree of stability of each of the identifiers.

5. The system of claim 1 wherein determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices comprises:

using a degree of uniqueness of each of the device identifiers.

6. A non-transitory computer readable medium which includes one or more processors, and a memory, the computer readable medium including computer instructions which are configured to cause a server computer, by execution of the computer instructions in the one or more processors from the memory, to recognize a given remotely-located device as either a known device or an unknown device by:

receiving, from the given device, a device identifier generated by hashing multiple cookies supplied from at least two different hosts which cookies are stored on the given device;

determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices; and

determining that the given device is a known device upon a condition in which the amount of correlation is at least a predetermined threshold.

7. The computer-readable medium of claim 6 wherein the device identifier includes an irreversible hash of host data of each of the browser cookies.

8. The computer-readable medium of claim 6 wherein the device identifier includes an irreversible hash of attribute value data of each of the browser cookies.

9. The computer-readable medium of claim 6 wherein determining an amount of correlation between the device identifier of the given device and corresponding identifiers of each of one or more other devices comprises:

using a degree of stability of each of the identifiers.

10. The computer-readable medium of claim 6 wherein determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices comprises:

using a degree of uniqueness of each of the device identifiers.