Granted Patent B2

US 8,910,254 · App. 13/714,745 · Granted Dec 9, 2014

Abstract

Claims (86)

1. A computer-implemented method, comprising:

identifying session information associated with a request to access a function of a web server, the session information being associated with an Internet Protocol address and comprising an identifier of a user and a device identifier associated with the request;

determining, using at least one processor, whether the request is associated with a trusted device profile based on the at least the session information;

providing access to the requested function, when the request is associated with a trusted device profile;

using the at least one processor, determining (i) whether a number of day sessions associated with the Internet Protocol address exceeds a first threshold value and (ii) whether a number of trusted Internet Protocol addresses associated with the trusted device profile exceeds a second threshold value; and

establishing, using the at least one processor, the Internet Protocol address as a trusted Internet Protocol address, when the number of day sessions does not exceed the first threshold value and the number of trusted Internet Protocol addresses does not exceed the second threshold value.

2. The method of claim 1 , wherein the device identifier corresponds to at least one of (i) a numerical value assigned to a client device accessible to the user or (ii) a numerical value associated with an application executed by the client device.

3. The method of claim 1 , wherein:

the method further comprises receiving the request to access the function of the web server; and

the identifying comprises extracting the session information from the received request.

4. The method of claim 1 , wherein the determining comprises:

obtaining a candidate trusted device profile associated with the user identifier;

determining whether the candidate trusted device profile is associated with the device identifier; and

establishing the candidate trusted device profile as the trusted device profile associated with the request, when the candidate trusted device profile is associated with the device identifier.

5. The method of claim 1 , wherein the identifying further comprises obtaining the Internet Protocol address associated with the session information.

6. The method of claim 5 , wherein the determining further comprises;

obtaining a candidate trusted device profile associated with the user identifier;

determining whether the candidate trusted device profile is associated with the device identifier and the Internet Protocol address; and

establishing the candidate trusted device profile as the trusted device profile associated with the request, when the obtained candidate trusted device profile is associated with the device identifier and the Internet Protocol address.

7. The method of claim 5 , further comprising

based on the trusted device profile, identifying the number of day session associated with the Internet Protocol address and the number of trusted Internet Protocol addresses associated with the trusted device profile.

8. The method of claim 1 , further comprising determining whether the session information corresponds to a pending device profile, when the request fails to be associated with a trusted device profile.

9. The method of claim 8 , further comprising:

when the session information corresponds to the pending device profile, determining whether the pending device profile is associated with a threshold number of day sessions within a corresponding time period; and

establishing the pending device profile as a trusted device profile, when the pending device profile is associated with the threshold number of day sessions within the corresponding time period.

10. The method of claim 8 , further comprising:

identifying a time stamp of a day session associated with the pending device profile, when the session information corresponds to the pending device profile;

determining whether the user accesses the web server within a threshold time period subsequent to the identified time stamp; and

establishing the pending device profile as a trusted device profile, when the user accesses the web server within the threshold time period.

11. The method of claim 8 , further comprising:

generating an instruction to transmit, to the user, a request to modify a status of the pending device profile, when the session information corresponds to the pending device profile;

receiving, from the user, information approving the modification to the status of the pending device profile; and

establishing the pending device profile as a trusted device profile, in response to the received information.

12. The method of claim 8 , further comprising determining whether the session information corresponds to an existing device profile, when the session information does not correspond to a pending device profile.

13. The method of claim 12 , further comprising:

identifying a number of day sessions associated with the existing device profile, when the session information corresponds to the existing device profile;

determining whether the number of day sessions associated with the existing device profile exceeds a threshold value; and

establishing the existing device profile as a pending device profile, when the number of day sessions associated with the existing device profile exceeds the threshold value.

14. The method of claim 12 , further comprising generating a device profile that corresponds to the session information, when the session information fails to be associated with the existing device profile.

15. An apparatus, comprising:

a storage device; and

at least one processor coupled to the storage device, wherein the storage device stores a program for controlling the at least one processor, and wherein the at least one processor, being operative with the program, is configured to:

identify session information associated with a request to access a function of a web server, the session information being associated with an Internet Protocol address and comprising an identifier of a user and a device identifier associated with the request;

determine whether the request is associated with a trusted device profile based on the at least the session information;

provide access to the requested function, when the request is associated with a trusted device profile;

determine (i) whether a number of day sessions associated with the Internet Protocol address exceeds a first threshold value and (ii) whether a number of trusted Internet Protocol addresses associated with the trusted device profile exceeds a second threshold value; and

establish the Internet Protocol address as a trusted Internet Protocol address, when the number of day sessions does not exceed the first threshold value and the number of trusted Internet protocol addresses does not exceed the second threshold value.

16. The apparatus of claim 15 , wherein the device identifier corresponds to at least one of (i) a numerical value assigned to a client device accessible to the user or (ii) a numerical value associated with an application executed by the client device.

17. The apparatus of claim 15 , wherein the at least one processor is further configured to:

receive the request to access the function of the web server; and

extract the session information from the received request.

18. The apparatus of claim 15 , wherein the at least one processor is further configured to:

obtain a candidate trusted device profile associated with the user identifier;

determine whether the candidate trusted device profile is associated with the device identifier; and

establish the candidate trusted device profile as the trusted device profile associated with the request, when the candidate trusted device profile is associated with the device identifier.

19. The apparatus of claim 17 , wherein the at least one processor is further configured to obtain the Internet Protocol address associated with the session information.

20. The apparatus of claim 19 , wherein the at least one processor is further configured to:

obtain a candidate trusted device profile associated with the user identifier;

determine whether the candidate trusted device profile is associated with the device identifier and the Internet Protocol address; and

establish the candidate trusted device profile as the trusted device profile associated with the request, when the obtained candidate trusted device profile is associated with the device identifier and the Internet Protocol address.

21. The apparatus of claim 19 , wherein the at least one processor is further configured to

based on the trusted device profile, identify the number of day session associated with the Internet Protocol address and the number of trusted Internet Protocol addresses associated with the trusted device profile.

22. The apparatus of claim 17 , wherein the at least one processor is further configured to determine whether the session information corresponds to a pending device profile, when the request fails to be associated with a trusted device profile.

23. The apparatus of claim 22 , wherein the at least one processor is further configured to:

when the session information corresponds to the pending device profile, determine whether the pending device profile is associated with a threshold number of day sessions within a corresponding time period; and

establish the pending device profile as a trusted device profile, when the pending device profile is associated with the threshold number of day sessions within the corresponding time period.

24. The apparatus of claim 22 , wherein the at least one processor is further configured to:

identify a time stamp of a day session associated with the pending device profile, when the session information corresponds to the pending device profile;

determine whether the user accesses the web server within a threshold time period subsequent to the identified time stamp; and

establish the pending device profile as a trusted device profile, when the user accesses the web server within the threshold time period.

25. The apparatus of claim 22 , wherein the at least one processor is further configured to:

generating an instruction to transmit, to the user, a request to modify a status of the pending device profile, when the session information corresponds to the pending device profile;

receiving, from the user, information approving the modification to the status of the pending device profile; and

establishing the pending device profile as a trusted device profile, in response to the received information.

26. The apparatus of claim 22 , wherein the at least one processor is further configured to determine whether the session information corresponds to an existing device profile, when the session information does not correspond to a pending device profile.

27. The apparatus of claim 26 , wherein the at least one processor is further configured to:

identify a number of day sessions associated with the existing device profile, when the session information corresponds to the existing device profile;

determine whether the number of day sessions associated with the existing device profile exceeds a threshold value; and

establish the existing device profile as a pending device profile, when the number of day sessions associated with the existing device profile exceeds the threshold value.

28. The apparatus of claim 26 , wherein the at least one processor is further configured to generate a device profile that corresponds to the session information, when the session information fails to be associated with the existing device profile.

29. A tangible, non-transitory computer-readable medium storing instructions that, when executed by at least one processor, perform a method comprising the steps of:

identifying session information associated with a request to access a function of a web server, the session information being associated with an Internet Protocol address and comprising an identifier of a user and a device identifier associated with the request;

determining whether the request is associated with a trusted device profile, based on the at least the session information;

providing access to the requested function, when the request is associated with a trusted device profile;

determining (i) whether a number of day sessions associated with the Internet Protocol address exceeds a first threshold value and (ii) whether a number of trusted Internet Protocol addresses associated with the trusted device profile exceeds a second threshold value; and

establishing the Internet Protocol address as a trusted Internet Protocol address, when the number of day sessions does not exceed the first threshold value and the number of trusted Internet protocol addresses does not exceed the second threshold value.

Assignments (6)