Hardware identification through cookies
View Patent ↗Multiple cookies of a client device are used to form an identifier of the client device such that a change in one or even several browser cookies does not defeat proper device recognition. The cookies are included in the identifier such that individual cookies can be parsed for separate comparison with corresponding cookies of known devices. However, to protect privacy of all devices, individual parameters of the constituent cookies are represented with irreversible hashes of the respective parameters. Recognition involves quantification of a degree of correlation between the cookies and corresponding cookies of each of the known devices. To quantify the degree of correlation, the observed stability and uniqueness of each cookie, and each cookie attribute, is considered.
1. A method for recognizing a given remotely-located device as either a known device or an unknown device, the method comprising:
receiving, from the given device, a device identifier generated by hashing multiple cookies supplied from at least two different hosts which cookies are stored on the given device;
determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices; and
determining that the given device is a known device upon a condition in which the amount of correlation is at least a predetermined threshold.
2. The method of claim 1 wherein the device identifier includes an irreversible hash of host data of each of the browser cookies.
3. The method of claim 1 wherein the device identifier includes an irreversible hash of attribute value data of each of the browser cookies.
4. The method of claim 1 wherein determining an amount of correlation between the device identifier of the given device and corresponding identifiers of each of one or more other devices comprises:
using a degree of stability of each of the identifiers.
5. The method of claim 1 wherein determining an amount of correlation between the device identifier of the given device and corresponding previously stored identifiers of each of one or more other devices comprises:
using a degree of uniqueness of each of the device identifiers.