Encrypting a unique identification header to create different transactional identifiers

Patent metadata

Field	Value
Publication number	US-9930037-B2
Application number	US-201514735776-A
Country	US
Kind code	B2
Filing date	Jun 10, 2015
Priority date	May 22, 2012
Publication date	Mar 27, 2018
Grant date	Mar 27, 2018

Abstract

A system may receive a content request associated with a user device. The content request may include information that identifies a subscriber associated with the user device and information that identifies a content provider associated with the content request. The system may determine a unique identification header (UIDH), associated with the subscriber, based on the content request. The system may determine randomized information associated with encrypting the UIDH. The system may encrypt the UIDH to create a transactional identifier. The UIDH may be encrypted based on the randomized information and a shared key. The system may insert the transactional identifier and the randomized information in the content request to create a modified content request. The system may provide the modified content request including the transactional identifier and the randomized information.

First claim

What is claimed is:

1. A system, comprising:
one or more devices to:
receive a content request associated with a user device,
the content request including information that identifies a subscriber associated with the user device, and
the content request including information that identifies a content provider associated with the content request;

generate, based on receiving the content request, a unique identification header (UIDH) by encoding the information that identifies the subscriber;
determine randomized information associated with encrypting the UIDH,
the randomized information being unique to the content request;

encrypt the UIDH to create a transactional identifier,
the UIDH being encrypted using the randomized information and a shared key;

insert the transactional identifier and the randomized information in the content request to create a modified content request; and
provide the modified content request including the transactional identifier and the randomized information.

2. The system of claim 1 , where the one or more devices are further to:
determine, based on the information that identifies the content provider associated with the content request, that the transactional identifier is to be inserted in the content request; and
where the one or more devices, when generating the UIDH, are to:
generate the UIDH based on determining that the transactional identifier is to be inserted in the content request.

3. The system of claim 1 , where the one or more devices are further to:
determine that the UIDH is a valid UIDH before encrypting the UIDH to create the transactional identifier.

4. The system of claim 1 , where the content request is a hypertext transfer protocol (HTTP) request.

5. The system of claim 1 , where the one or more devices are further to:
combine the UIDH and the randomized information; and
where the one or more devices, when encrypting the UIDH to create the transactional identifier, are to:
encrypt the combination of the UIDH and the randomized information using the shared key,
the transactional identifier being a result of encrypting the combination of the UIDH and the randomized information using the shared key.

6. The system of claim 1 , where the shared key includes a string of characters derived based on applying a cryptographic hash function to a random value.

7. The system of claim 1 , where the content request is a first content request, the randomized information is first randomized information, the transactional identifier is a first transactional identifier, and the modified content request is a first modified content request,
where the one or more devices are further to:
receive a second content request associated with the user device,
the second content request including the information that identifies the subscriber associated with the user device;

determine second randomized information associated with encrypting the UIDH,
the second randomized information being different from the first randomized information;

encrypt the UIDH to create a second transactional identifier,
the UIDH being encrypted based on the second randomized information and the shared key, and
the second transactional identifier being different from the first transactional identifier;

insert the second transactional identifier and the second randomized information in the second content request to create a second modified content request; and
provide the second modified content request including the second transactional identifier and the second randomized information.

8. A non-transitory computer-readable medium storing instructions, the instructions comprising:
one or more instructions that, when executed by one or more processors, cause the one or more processors to:
receive a request associated with a user device,
the request including information associated with a subscriber associated with the user device, and
the request including information that identifies a destination associated with the request;

generate, based on receiving the request, an identifier, by encoding the information associated with the subscriber;
determine randomized information associated with encrypting the identifier,
the randomized information being unique to the request;

encrypt the identifier to create a transactional identifier,
the identifier being encrypted using the randomized information and a shared key;

insert the transactional identifier and the randomized information in the request to create a modified request; and
provide the modified request including the transactional identifier and the randomized information.

9. The non-transitory computer-readable medium of claim 8 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
determine, based on the information that identifies the destination associated with the request, that the transactional identifier is to be inserted in the request; and
where the one or more instructions, that cause the one or more processors to generate the identifier, cause the one or more processors to:
generate the identifier based on determining that the transactional identifier is to be inserted in the request.

10. The non-transitory computer-readable medium of claim 8 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
determine that the identifier is a valid identifier before encrypting the identifier to create the transactional identifier.

11. The non-transitory computer-readable medium of claim 8 , where the identifier includes at least one of:
a unique identification header (UIDH);
a mobile directory number (MDN);
a landline director number (LDN);
a subscriber identity module (SIM) uniform resource identifier (URI);
a mobile identification number (MIN);
an international mobile subscriber identity (IMSI);
a mobile subscriber integrated services digital network (MSISDN) identifier; or
a national access identifier (NAI).

12. The non-transitory computer-readable medium of claim 8 , where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
combine the identifier and the randomized information; and
where the one or more instructions, that cause the one or more processors to encrypt the identifier to create the transactional identifier, cause the one or more processors to:
encrypt the combination of the identifier and the randomized information using the shared key,
the transactional identifier being a result of encrypting the combination of the identifier and the randomized information.

13. The non-transitory computer-readable medium of claim 8 , where the shared key includes a string of characters derived based on applying a non-deterministic function to a value.

14. The non-transitory computer-readable medium of claim 8 , where the request is a first request, the randomized information is first randomized information, the transactional identifier is a first transactional identifier, and the modified request is a first modified request,
where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
receive a second request associated with the user device,
the second request including the information associated with the subscriber associated with the user device;

determine second randomized information associated with encrypting the identifier,
the second randomized information being different from the first randomized i

Assignees

• Verizon Patent & Licensing Inc

Inventors

• Libonate Brian
• Atreya Praveen
• Haynes Thomas W

Classifications

• H04L43/16

  Threshold monitoring · CPC title

• H04L63/168

  above the transport layer · CPC title

• H04L63/0892

  by using authentication-authorization-accounting [AAA] servers or protocols · CPC title

• H04L63/068

  using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088) · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title