Authenticating devices via tokens and verification computing devices

Patent metadata

Field	Value
Publication number	US-11811754-B2
Application number	US-202117339072-A
Country	US
Kind code	B2
Filing date	Jun 4, 2021
Priority date	Sep 18, 2018
Publication date	Nov 7, 2023
Grant date	Nov 7, 2023

Abstract

Aspects of the disclosure relate to a system and method for securely authenticating a device via token(s) and/or verification computing device(s). A verification computing device may generate a pseudorandom number or sequence. Based on the pseudorandom number or sequence, the verification computing device may select a first plurality of parameters associated with a user of a device to be authenticated. The verification computing device may transmit, to the device, the pseudorandom number or sequence, and the device may select a second plurality of parameters. The device may generate a token based on the second plurality of parameters. The device may send the token to another device, and the other device may send the token to the verification computing device. The verification computing device may authenticate the device based on the token.

First claim

What is claimed is:

1. A method comprising:
receiving, by a first device associated with a user and from a verification computing device, a pseudorandom sequence;
based on the pseudorandom sequence, selecting, by the first device and from a database, a plurality of parameters associated with the user;
generating, by the first device and based on the plurality of parameters, a token;
transmitting, by the first device and to a second device, the token for authenticating the first device.

2. The method of claim 1 , further comprising, after transmitting the token:
receiving, by the first device and from the verification computing device, information indicating the first device is authenticated.

3. The method of claim 1 , further comprising, after transmitting the token:
receiving, from the verification computing device, information indicating the first device is authenticated.

4. The method of claim 3 , further comprising, after transmitting the token:
transmitting, by the first device and to the second device, the information indicating the first device is authenticated.

5. The method of claim 1 , further comprising:
synchronizing parameters associated with the user stored in the database with parameters associated with the user stored in a second database associated with the verification computing device.

6. The method of claim 1 , further comprising:
updating the database with one or more of the token, metadata generated during generation of the token, or transaction information between the first device and the second device.

7. The method of claim 1 , wherein selecting the plurality of parameters comprises selecting, by a proxy associated with the first device, the plurality of parameters, and wherein generating the token comprises generating, by the proxy associated with the first device, the token.

8. One or more non-transitory computer readable media storing instructions which, when executed by one or more processors of a first device associated with a user, cause the one or more processors to:
receive, from a verification computing device, a pseudorandom sequence;
based on the pseudorandom sequence, select, from a database, a plurality of parameters associated with the user;
generate, based on the plurality of parameters, a token;
transmit, to a second device, the token for authenticating the first device.

9. The one or more non-transitory computer readable media of claim 8 , storing instructions which, when executed by one or more processors, cause the one or more processors to, after transmitting the token:
receive, from the verification computing device, information indicating the first device is authenticated.

10. The one or more non-transitory computer readable media of claim 9 , storing instructions which, when executed by one or more processors, cause the one or more processors to, after transmitting the token:
receive, from the verification computing device, information indicating the first device is authenticated.

11. The one or more non-transitory computer readable media of claim 10 , storing instructions which, when executed by one or more processors, cause the one or more processors to, after transmitting the token:
transmit, to the second device, the information indicating the first device is authenticated.

12. The one or more non-transitory computer readable media of claim 8 , storing instructions which, when executed by one or more processors, cause the one or more processors to:
synchronize parameters associated with the user stored in the database with parameters associated with the user stored in a second database associated with the verification computing device.

13. The one or more non-transitory computer readable media of claim 8 , storing instructions which, when executed by one or more processors, cause the one or more processors to:
update the database with one or more of the token, metadata generated during generation of the token, or transaction information between the first device and the second device.

14. The one or more non-transitory computer readable media of claim 8 , wherein selecting the plurality of parameters comprises selecting, by a proxy associated with the first device, the plurality of parameters, and wherein generating the token comprises generating, by the proxy associated with the first device, the token.

15. A device comprising:
one or more processors;
memory storing instructions which, when executed by the one or more processors, cause the device to:
receive, from a verification computing device, a pseudorandom sequence;
based on the pseudorandom sequence, select, from a database, a plurality of parameters associated with a user;
generate, based on the plurality of parameters, a token;
transmit, to a second device, the token for authenticating the device.

16. The device of claim 15 , the memory storing instructions which, when executed by the one or more processors, cause the device to, after transmitting the token:
receive, from the verification computing device, information indicating the device is authenticated.

17. The device of claim 15 , the memory storing instructions which, when executed by the one or more processors, cause the device to, after transmitting the token:
receive, from the verification computing device, information indicating the device is authenticated; and
transmit, to the second device, the information indicating the device is authenticated.

18. The device of claim 15 , the memory storing instructions which, when executed by the one or more processors, cause the device to:
synchronize parameters associated with the user stored in the database with parameters associated with the user stored in a second database associated with the verification computing device.

19. The device of claim 15 , the memory storing instructions which, when executed by the one or more processors, cause the device to:
update the database with one or more of the token, metadata generated during generation of the token, or transaction information between the device and the second device.

20. The device of claim 15 , wherein selecting the plurality of parameters comprises selecting, by a proxy associated with the device, the plurality of parameters, and wherein generating the token comprises generating, by the proxy associated with the device, the token.

Assignees

• Allstate Insurance Co

Inventors

• Parkinson John
• Park Jason
• Harris David

Classifications

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• G06F16/27

  Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor · CPC title

• G06F21/44

  Program or device authentication · CPC title

• H04L9/0869

  involving random numbers or seeds · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title