DEVICE IDENTIFICATION USING SYNTHETIC DEVICE KEYS
A device authentication server assigns unique synthetic device attributes to a device such that the device can use actual hardware and system configuration attributes and the assigned synthetic device attributes to form a device identifier that is unique, even among homogeneous devices for which actual, accessible hardware and system configuration attributes are not distinct.
1 . A method for identifying a remotely located device, the method comprising:
receiving attribute data from the device, wherein the attribute data includes data representing one or more hardware configuration characteristics of the device;
generating one or more items of device-specific data from the attribute data, wherein the items of device-specific data are specific to the device and distinct among corresponding items of device-specific data specific to other devices;
sending the items of device-specific data to the device for persistent storage in the device;
requesting one or more items of test attribute data from the device, wherein items of test attribute data includes at least part of at least one of the more items of device-specific data and at least part of the attribute data;
receiving the test attribute data from the device;
determining that the items of test attribute data match corresponding items of the attribute data and of the device-specific data; and
recognizing the device as authentic in response to the determining.
2 . The method of claim 1 wherein generating comprises:
combing pseudo-randomly generated data with at least part of the attribute data using a cryptographic hash function.
3 . The method of claim 2 wherein requesting comprises:
sending attribute gathering logic to the device, wherein the attribute gathering logic causes the device to gather data representing at least part of the hardware configuration characteristics of the device and at least part of at least one of the more items of device-specific data to form the test attribute data.
4 . The method of claim 3 wherein the attribute gathering logic also causes the device to apply a cryptographic hash function to the data representing at least part of the hardware configuration characteristics of the device and at least part of at least one of the more items of device-specific data to form the test attribute data as a cryptographic hash; and
wherein determining comprises applying the cryptographic hash function to corresponding portions of the attribute data to form a test cryptographic hash and comparing the cryptographic hash to the test cryptographic hash.
5 . The method of claim 4 wherein sending the items of device-specific data to the device comprises sending device-specific data generation information that enables the device to generate the device-specific data from the one or more hardware configuration characteristics of the device.
6 . The method of claim 3 wherein sending the items of device-specific data to the device comprises sending device-specific data generation information that enables the device to generate the device-specific data from the one or more hardware configuration characteristics of the device.
7 . The method of claim 2 wherein sending the items of device-specific data to the device comprises sending device-specific data generation information that enables the device to generate the device-specific data from the one or more hardware configuration characteristics of the device.
8 . The method of claim 1 wherein requesting comprises:
sending attribute gathering logic to the device, wherein the attribute gathering logic causes the device to gather data representing at least part of the hardware configuration characteristics of the device and at least part of at least one of the more items of device-specific data to form the test attribute data.
9 . The method of claim 8 wherein sending the items of device-specific data to the device comprises sending device-specific data generation information that enables the device to generate the device-specific data from the one or more hardware configuration characteristics of the device.
10 . The method of claim 8 wherein the attribute gathering logic also causes the device to apply a cryptographic hash function to the data representing at least part of the hardware configuration characteristics of the device and at least part of at least one of the more items of device-specific data to form the test attribute data as a cryptographic hash; and
wherein determining comprises applying the cryptographic hash function to corresponding portions of the attribute data to form a test cryptographic hash and comparing the cryptographic hash to the test cryptographic hash.
11 . The method of claim 10 wherein sending the items of device-specific data to the device comprises sending device-specific data generation information that enables the device to generate the device-specific data from the one or more hardware configuration characteristics of the device.
12 . The method of claim 1 wherein sending the items of device-specific data to the device comprises sending device-specific data generation information that enables the device to generate the device-specific data from the one or more hardware configuration characteristics of the device.