US 12,218,938 B2
Using tokens from push notification providers to enhance device fingerprinting
Daniel Alan Jarvis, Vienna, VA (US); Patrick Zearfoss, Leesburg, VA (US); and Salman Haq, Herndon, VA (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Oct. 13, 2023, as Appl. No. 18/379,697.
Application 18/379,697 is a continuation of application No. 17/233,769, filed on Apr. 19, 2021, granted, now 11,831,641.
Prior Publication US 2024/0114026 A1, Apr. 4, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/0876 (2013.01) [H04L 63/102 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer implemented method for enhanced device fingerprinting, the method comprising:
at a first time:
(a) receiving, by one or more computing devices and from an application, a push token identifying a client device on which the application is being used, wherein the push token is provided by a push service operated by an independent third-party, to the client device, and wherein the push token is uniquely paired to the client device,
(b) transmitting, by the one or more computing devices and to the application, a push notification based on the push token,
(c) receiving, by the one or more computing devices and from the application, a deliverable status indicating whether the push notification was successfully transmitted to the client device,
(d) based on receiving the deliverable status indicating the push notification was successfully transmitted, storing, by the one or more computing devices, the push token;
at a second time:
(e) receiving, by the one or more computing devices and from the application, an indication that a user is attempting to perform a high-risk transaction using the application,
(f) based on the indication, requesting, by the one or more computing devices, a further push token to identify a device on which the application is being used,
(g) based on the request in (f), receiving, by the one or more computing devices, the further push token,
(h) comparing, by the one or more computing devices, the push token stored in (d) to the further push token received in (g); and
(i) based on the comparison in (h), determining, by the one or more computing devices, a device risk score, wherein the device risk score indicates whether the user is authorized to perform the high-risk transaction.