Anonymous Attestation Tokens for Private Device Integrity Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication techniques for client devices over public networks face challenges in protecting communication integrity while avoiding the use of stable device identifiers that could track client devices or their users, leading to privacy concerns and potential fraud.
Innovation Solution
A method involving a device integrity computing system that generates device integrity elements using public key data and digital signatures, along with attestation tokens that include timestamps and device integrity tokens, ensuring secure communication channels while enhancing privacy through blind signatures and group signature schemes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication techniques use stable device identifiers to protect communication integrity, then communication security is improved, but device tracking and user privacy are compromised
Solution Approach 1:
The patent segments device identification into multiple components: device-level fraud detection signals for trustworthiness assessment, and per-request public key data for authentication. This segmentation allows integrity verification without using stable device identifiers that enable tracking, as each authentication element serves a specific function without revealing persistent device identity.
Solution Approach 2:
The patent changes the parameter used for device identification from stable device identifiers to dynamic public key data that varies with each request. The authentication system uses cryptographic parameters (public keys, digital signatures) that can be regenerated without exposing persistent device characteristics, thereby maintaining security while preventing tracking.
2Reliability
If authentication techniques implement comprehensive fraud detection, then security is improved, but system complexity increases
Solution Approach 1:
The patent extracts the fraud detection function from the authentication process by introducing a separate device integrity computing system that independently evaluates trustworthiness. This extraction allows comprehensive fraud detection signals to be collected and processed separately, then used to influence authentication decisions without embedding complex detection logic within the authentication flow itself.
Solution Approach 2:
The patent introduces a device integrity computing system as an intermediary between the client device and the authentication system. This intermediary collects and processes device-level fraud detection signals, determining trustworthiness verdicts that then influence which public key data is used for authentication. This mediation simplifies the overall system architecture by centralizing fraud detection functionality.
3Reliability
If the system generates multiple device integrity elements for each request, then authentication security is improved, but computational resources and processing time increase
Solution Approach 1:
The patent performs preliminary action by pre-generating multiple public key data elements and their corresponding digital signatures before actual authentication requests occur. The device integrity computing system prepares authentication elements in advance based on trustworthiness verdicts, so that when authentication is needed, the system can quickly select and use pre-computed elements rather than generating them in real-time.
Solution Approach 2:
The patent applies partial action by generating and maintaining a limited set of public key data elements corresponding to different trustworthiness levels rather than creating unique authentication elements for every possible device state. This partial generation approach provides sufficient security for most scenarios while significantly reducing computational overhead compared to exhaustive element generation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, systems, and computer media provide attestation tokens that protect the integrity of communications transmitted from client devices, while at the same time avoiding the use of stable device identifiers that could be used to track client devices or their users. In one approach, client devices can receive batches of N device integrity elements from a device integrity computing system, each corresponding to a different public key. The N device elements can be signed by a device integrity computing system. The signing by the device integrity computing system can be signing with a blind signature scheme. Client devices can include throttlers imposing limits on the quantity of attestation tokens created by the client device.