Client Device Identification via HTTP Cache Manipulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for identifying client devices in networked communication are limited, as they can be easily deleted or require privileged code execution, and distinguishing between devices with similar characteristics is challenging, especially when characteristics change over time.
Innovation Solution
A method and system that utilize HTTP caching capabilities to automatically deposit and process an encoded modified date on a client device, allowing the server to uniquely identify the device by comparing it to a reference database during subsequent access attempts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cookies are used for device identification, then the identification can be implemented through web browsers, but the identification information can be easily deleted by users
Solution Approach 1:
The patent uses HTTP cache as an intermediary storage mechanism between the server and client device. Instead of relying on cookies that can be easily deleted, the system embeds identification information within cached web content objects. The cache serves as a mediator that automatically retains the identification data as long as the cached content remains valid, according to HTTP caching protocols and headers.
Solution Approach 2:
The system performs preliminary encoding of the device identification into the modified date field of cached objects during the first server interaction. This preliminary encoding ensures that the identification information is already embedded in the cached content before any subsequent access attempts, eliminating the need for separate identification mechanisms.
2Measurement precision
If device characteristics are measured for identification, then unique device profiles can be created, but devices with similar characteristics cannot be distinguished and characteristics may change over time
Solution Approach 1:
Instead of measuring and analyzing device characteristics, the system creates a unique identification value that is copied and embedded directly into the HTTP cache modified date field. This copied identification value remains consistent and unchanged, avoiding the problems of similar device characteristics and characteristic changes over time.
Solution Approach 2:
The patent transforms the device identification problem by changing the parameter being used for identification. Instead of using device characteristics (hardware/software specifications), the system uses a server-generated encoded value that is embedded in the HTTP protocol's modified date parameter, which is then stored in the client's cache.
3Reliability
If privileged code execution is required for identification, then secure device identification can be achieved, but the implementation becomes complex and requires installed programs
Solution Approach 1:
The system enables the client device to automatically generate and retain its identification information through standard web browsing activities. The HTTP cache, which is a built-in component of web browsers, automatically stores the encoded identification without requiring any additional installed programs or privileged code execution. The device essentially identifies itself through its normal caching behavior.
Data Source
AI summary
A method of identifying a networked client device of a host machine or server includes generating an encoded modified date during a first access attempt by the client device of a server-based object, storing the encoded modified date in a local cache of the device, and processing the encoded modified date during a second access attempt by the client device. A system includes the server and a memory device on which is recorded a server-based object. The server generates and stores the encoded modified date in the local cache, e.g., via HTTP, during the first access attempt of the object by the client device, and processes the encoded modified date during a second access attempt by the same client device to uniquely identify the client device. Restricted information may be provided to the client device upon successful identification.