US 11,962,698 B2
Token node locking with fingerprints authenticated by digital certificates
Jason A. Pasion, San Diego, CA (US); John Okimoto, San Diego, CA (US); Xin Qiu, San Diego, CA (US); Alexander Medvinsky, San Diego, CA (US); Ting Yao, San Diego, CA (US); Jinsong Zheng, San Diego, CA (US); and Oscar Jiang, West Covina, CA (US)
Assigned to ARRIS Enterprises LLC, Suwanee, GA (US)
Filed by ARRIS Enterprises LLC, Suwanee, GA (US)
Filed on Mar. 17, 2021, as Appl. No. 17/204,660.
Claims priority of provisional application 62/990,448, filed on Mar. 17, 2020.
Prior Publication US 2021/0297269 A1, Sep. 23, 2021
Int. Cl. H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 9/3213 (2013.01) [H04L 9/3247 (2013.01); H04L 9/3263 (2013.01); H04L 9/3268 (2013.01); H04L 9/3297 (2013.01); H04L 63/166 (2013.01); H04L 2463/121 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method of receiving secure data in a client device, comprising:
(a) receiving in the client device a token having both a token ID and a digital certificate generated by a certificate authority (CA), the certificate having client device fingerprint data generated from client device parameters;
(b) accepting a request in the client device to provide secure data to the client device;
(c) regenerating in the client device the client device fingerprint data from the client device parameters;
(d) determining, in the client device, differences between the client device fingerprint data of the digital certificate and the regenerated client device fingerprint data;
(e) selectively transmitting a request to a secure data service to provide secure data based upon the determination, comprising:
if the client device fingerprint data of the digital certificate matches the regenerated client device fingerprint data, transmitting the request to a secure data service to provide secure data to the client device;
if the client device fingerprint data of the digital certificate does not match the regenerated client device fingerprint data, determining if differences between the client device fingerprint data of the digital certificate and the regenerated client device fingerprint data are acceptable;
if differences between the client device fingerprint data of the digital certificate and the regenerated client device fingerprint data are acceptable:
transmitting the request to a secure data service to provide secure data to the client device;
receiving the secure data;
transmitting the client device regenerated fingerprint data and token ID to the CA;
receiving a further digital certificate generated by the CA having the client device regenerated fingerprint data; and
storing the further digital certificate in the token.