IP Library Granted Patent US 8,205,080
Granted Patent B2
US 8,205,080 · App. 11/801,967 · Granted Jun 19, 2012

Over the air communication authentication using a device token

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,205,080
App. No.
11/801,967
Granted
Jun 19, 2012
Kind
B2
Abstract

A system and method are described for securing over the air communications between a service and a communication device. For example, one embodiment of a method for creating a security token on a communication device for communication between the communication device and a service includes combining a device identification of the communication device with a device capability to create a device information, the device capability known by the service. The method further includes encrypting the device information.

Claims (25)

1. A method comprising:

combining a timestamp from an internal clock of a communication device with predetermined random data known by a service to create random data:

combining a device identification of the communication device with at least one device capability of the communication device to create device information, the at least one device capability known by the service and stored in a device information database of the service, and the at least one device capability comprising at least one of a screen size of the communication device, a graphics capability of the communication device, an audio capability of the communication device, available memory of the communication device, processing power of the communication device, or a user preference of the communication device;

combining the device information with the random data to create a data string;

creating a cipher key from characteristics of the communication device by performing a hash on a string of the characteristics, the characteristics known by the communication device and the service, and the characteristics including one or more of an international mobile equipment identity (IMEI), an international mobile subscriber identity (IMSI), a version number of an operating system of the communication device, a version number of firmware of the communication device, a user identifier, an integrated circuit card identifier (ICC ID), a Bluetooth identifier, a mobile station international subscriber directory number (MSISDN), an IP number, a version of a recovery ROM, a version number of a software library, or a label of a software build configuration;

encrypting the data string with the cipher key; and

encoding the encrypted data string to create a device token.

2. The method of claim 1 , wherein the encrypting comprises symmetrically encrypting the data string with the cipher key.

3. A communication device configured to communicate with a service, the communication device comprising:

a processor; and

computer-readable storage media having stored thereon computer-executable instructions that, when executed by the processor, perform a method comprising:

combining a timestamp from an internal clock of the communication device with predetermined random data known by the service to create random data;

combining at least one device identification of the communication device with at least one device capability of the communication device to create device information, the at least one device capability known by the service and stored in a device information database of the service, and the at least one device capability comprising at least one of a screen size of the communication device, a graphics capability of the communication device, an audio capability of the communication device, available memory of the communication device, processing power of the communication device, or a user preference of the communication device;

combining the device information with the random data to create a data string;

creating a cipher key from characteristics of the communication device by performing a hash on a string of the characteristics, the characteristics known by the communication device and the service, and the characteristics including one or more of an international mobile equipment identity (IMEI), an international mobile subscriber identity (IMSI), a version number of an operating system of the communication device, a version number of firmware of the communication device, a user identifier, an integrated circuit card identifier (ICC ID), a Bluetooth identifier, a mobile station international subscriber directory number (MSISDN), an IP number, a version of a recovery ROM, a version number of a software library, or a label of a software build configuration;

encrypting the data string with the cipher key; and

encoding the encrypted data string to create a device token.

4. The communication device of claim 3 , wherein the encrypting comprises symmetrically encrypting the data string with the cipher key.

5. Machine-readable storage media, the machine-readable storage media excluding propagation media, having stored thereon computer-executable instructions that, when executed by a processor, perform a method comprising:

combining a timestamp from an internal clock of a communication device with predetermined random data known by a service to create random data;

combining a device identification of the communication device with a device capability of the communication device to create device information, the device capability known by the service and stored in a device information database of the service, and the device capability comprising at least one of a screen size of the communication device, a graphics capability of the communication device, an audio capability of the communication device, available memory of the communication device, processing power of the communication device, or a user preference of the communication device;

combining the device information with the random data to create a data string;

creating a cipher key from characteristics of the communication device by performing a hash on a string of the characteristics, the characteristics known by the communication device and the service, and the characteristics including one or more of an international mobile equipment identity (IMEI), an international mobile subscriber identity (IMSI), a version number of an operating system of the communication device, a version number of firmware of the communication device, a user identifier, an integrated circuit card identifier (ICC ID), a Bluetooth identifier, a mobile station international subscriber directory number (MSISDN), an IP number, a version of a recovery ROM, a version number of a software library, or a label of a software build configuration;

encrypting the data string with the cipher key; and encoding the encrypted data string to create a device token.

6. The machine-readable storage media of claim 5 , wherein the encrypting comprises symmetrically encrypting the data string with the cipher key.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 9, 2014
From: MICROSOFT CORPORATION
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 034542/0001 →
MERGER Recorded Oct 10, 2011
From: DANGER, INC.
To: MICROSOFT CORPORATION
Reel/Frame 027039/0009 →