Methods and systems for device authentication
A method for disabling a device associated with a virtual identity may include receiving, from the device, a request to use the virtual identity, where the request that may include a passcode guess and a device identifier. The method may also include determining that the passcode guess does not authorize use of the virtual identity and incrementing a number of incorrect passcode guesses received within a time interval. The method may additionally include determining that the number of incorrect passcode guesses received within the time interval is greater than or equal to a threshold. The method may further include storing an indication that subsequent requests associated with the device identifier should not authorize use of the virtual identity.
1 . A method for disabling a device associated with a virtual identity, the method comprising:
receiving, from the device, a request to register the device, the request comprising a passcode guess;
determining whether the passcode guess authorizes registration of the device based on a number of incorrect passcode guesses received from a user of the device within the time interval being greater than or equal to a threshold;
upon determining the passcode guess does not authorize registration of the device due to the number of incorrect passcode guesses received being greater than or equal to the threshold, determining the device has been compromised and sending an indication to the device that the request was successful in order to obtain further information from the user of the device regarding a location of the device;
upon receipt of the further information, storing the further information; and
preventing future registration attempts by the device.
2 . The method of claim 1 , wherein the passcode guess is based on a PIN.
3 . The method of claim 1 , wherein the passcode guess comprises a hash of a salted password.
4 . The method of claim 1 , further comprising incrementing the number of incorrect passcode guesses by a predetermined value for each incorrect passcode guess based on a type of device.
5 . The method of claim 1 , wherein the threshold varies based on a type of device.
6 . The method of claim 1 , further comprising sending a further indication to further devices reporting that the device is prevented from future registration attempts.
7 . The method of claim 1 , further comprising tracking further attempts by the device to register the device.
8 . A non-transitory computer readable medium storing instructions for disabling a device associated with a virtual identity, wherein when the instructions are executed by one or more processors of a computing system, the instructions perform operations comprising:
receiving a request to register a device, the request comprising a passcode guess;
determining whether the passcode guess authorizes registration of the device based on a number of incorrect passcode guesses received from a user of the device within the time interval being greater than or equal to a threshold;
upon determining the passcode guess does not authorize registration of the device due to the number of incorrect passcode guesses received being greater than or equal to the threshold, determining the device has been compromised and sending an indication to the device that the request was successful in order to obtain further information from the user of the device regarding a location of the device;
upon receipt of the further information, storing the further information; and
preventing future registration attempts by the device.
9 . The non-transitory computer readable medium of claim 8 , wherein the passcode guess is based on a PIN.
10 . The non-transitory computer readable medium of claim 8 , wherein the passcode guess comprises a hash of a salted password.
11 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise incrementing the number of incorrect passcode guesses by a predetermined value for each incorrect passcode guess based on a type of device.
12 . The non-transitory computer readable medium of claim 8 , wherein the threshold varies based on a type of device.
13 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise sending a further indication to further devices reporting that the device is prevented from future registration attempts.
14 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise tracking further attempts by the device to register the device.
15 . A computing system for disabling a device associated with a virtual identity comprising:
one or more processors; and
one or more memories coupled to the one or more processors, having instructions stored thereon, which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving a request to register a device, the request comprising a passcode guess, determining whether the passcode guess authorizes registration of the device based on a number of incorrect passcode guesses received from a user of the device within the time interval being greater than or equal to a threshold,
upon determining the passcode guess does not authorize registration of the device due to the number of incorrect passcode guesses received being greater than or equal to the threshold, determining the device has been compromised and sending an indication to the device that the request was successful in order to obtain further information from the user of the device regarding a location of the device,
upon receipt of the further information, storing the further information, and
preventing future registration attempts by the device.
16 . The computing system of claim 15 , wherein the passcode guess is based on a PIN.
17 . The computing system of claim 15 , wherein the passcode guess comprises a hash of a salted password.
18 . The computing system of claim 15 , wherein the operations further comprise incrementing the number of incorrect passcode guesses by a predetermined value for each incorrect passcode guess based on a type of device.
19 . The computing system of claim 15 , wherein the threshold varies based on a type of device.
20 . The computing system of claim 15 , wherein the operations further comprise:
sending a further indication to further devices reporting that the device is prevented from future registration attempts; or
tracking further attempts by the device to register the device.