Methods and systems for device authentication

Patent metadata

Field	Value
Publication number	US-12562919-B2
Application number	US-202318473465-A
Country	US
Kind code	B2
Filing date	Sep 25, 2023
Priority date	Jan 18, 2012
Publication date	Feb 24, 2026
Grant date	Feb 24, 2026

Abstract

A method for disabling a device associated with a virtual identity may include receiving, from the device, a request to use the virtual identity, where the request that may include a passcode guess and a device identifier. The method may also include determining that the passcode guess does not authorize use of the virtual identity and incrementing a number of incorrect passcode guesses received within a time interval. The method may additionally include determining that the number of incorrect passcode guesses received within the time interval is greater than or equal to a threshold. The method may further include storing an indication that subsequent requests associated with the device identifier should not authorize use of the virtual identity.

First claim

What is claimed is:

1 . A method for disabling a device associated with a virtual identity, the method comprising:
receiving, from the device, a request to register the device, the request comprising a passcode guess; determining whether the passcode guess authorizes registration of the device based on a number of incorrect passcode guesses received from a user of the device within the time interval being greater than or equal to a threshold; upon determining the passcode guess does not authorize registration of the device due to the number of incorrect passcode guesses received being greater than or equal to the threshold, determining the device has been compromised and sending an indication to the device that the request was successful in order to obtain further information from the user of the device regarding a location of the device; upon receipt of the further information, storing the further information; and preventing future registration attempts by the device.

2 . The method of claim 1 , wherein the passcode guess is based on a PIN.

3 . The method of claim 1 , wherein the passcode guess comprises a hash of a salted password.

4 . The method of claim 1 , further comprising incrementing the number of incorrect passcode guesses by a predetermined value for each incorrect passcode guess based on a type of device.

5 . The method of claim 1 , wherein the threshold varies based on a type of device.

6 . The method of claim 1 , further comprising sending a further indication to further devices reporting that the device is prevented from future registration attempts.

7 . The method of claim 1 , further comprising tracking further attempts by the device to register the device.

8 . A non-transitory computer readable medium storing instructions for disabling a device associated with a virtual identity, wherein when the instructions are executed by one or more processors of a computing system, the instructions perform operations comprising:
receiving a request to register a device, the request comprising a passcode guess; determining whether the passcode guess authorizes registration of the device based on a number of incorrect passcode guesses received from a user of the device within the time interval being greater than or equal to a threshold; upon determining the passcode guess does not authorize registration of the device due to the number of incorrect passcode guesses received being greater than or equal to the threshold, determining the device has been compromised and sending an indication to the device that the request was successful in order to obtain further information from the user of the device regarding a location of the device; upon receipt of the further information, storing the further information; and preventing future registration attempts by the device.

9 . The non-transitory computer readable medium of claim 8 , wherein the passcode guess is based on a PIN.

10 . The non-transitory computer readable medium of claim 8 , wherein the passcode guess comprises a hash of a salted password.

11 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise incrementing the number of incorrect passcode guesses by a predetermined value for each incorrect passcode guess based on a type of device.

12 . The non-transitory computer readable medium of claim 8 , wherein the threshold varies based on a type of device.

13 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise sending a further indication to further devices reporting that the device is prevented from future registration attempts.

14 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise tracking further attempts by the device to register the device.

15 . A computing system for disabling a device associated with a virtual identity comprising:
one or more processors; and one or more memories coupled to the one or more processors, having instructions stored thereon, which, when executed by the one or more processors, cause the one or more processors to perform operations comprising: receiving a request to register a device, the request comprising a passcode guess, determining whether the passcode guess authorizes registration of the device based on a number of incorrect passcode guesses received from a user of the device within the time interval being greater than or equal to a threshold, upon determining the passcode guess does not authorize registration of the device due to the number of incorrect passcode guesses received being greater than or equal to the threshold, determining the device has been compromised and sending an indication to the device that the request was successful in order to obtain further information from the user of the device regarding a location of the device, upon receipt of the further information, storing the further information, and preventing future registration attempts by the device.

16 . The computing system of claim 15 , wherein the passcode guess is based on a PIN.

17 . The computing system of claim 15 , wherein the passcode guess comprises a hash of a salted password.

18 . The computing system of claim 15 , wherein the operations further comprise incrementing the number of incorrect passcode guesses by a predetermined value for each incorrect passcode guess based on a type of device.

19 . The computing system of claim 15 , wherein the threshold varies based on a type of device.

20 . The computing system of claim 15 , wherein the operations further comprise:
sending a further indication to further devices reporting that the device is prevented from future registration attempts; or tracking further attempts by the device to register the device.

Assignees

• Neustar Inc

Inventors

• Kirsch Steven Todd

Classifications

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title