Universal Device Identifier Exchange for Privacy-Safe Threat Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Trusted ecosystem vendors face challenges in establishing a common device identifier for physical assets due to limitations by open source vendors for privacy and anti-tracking purposes, lacking a scalable and flexible data relay exchange mechanism between zero trust ecosystem providers.

Innovation Solution

A system and method for generating universal device identifiers using a mobile device management service, integrating a universal device identifier SDK, and transmitting pre-salted device identifiers to a security vendor service for generating a universal device identifier address, associating it with a vendor device ID, and publishing risk posture changes to a distributed ledger.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Object-affected harmful factors

If open source vendors limit device identifier access for privacy and anti-tracking purposes, then device privacy protection is improved, but the ability of trusted ecosystem vendors to establish a common device identifier deteriorates

Engineering Contradiction:
Improveprivacy protectionVSAvoidcommon device identifier access
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The patent introduces a mobile device management service as an intermediary between the device and trusted ecosystem vendors. This service acts as a mediator that provides device identifiers to authorized vendors through a controlled interface, thereby maintaining privacy protection while enabling necessary identifier access for security and management purposes.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the device identifier access by creating different access paths: one for open source vendors (restricted) and another for trusted ecosystem vendors (authorized through MDM). This segmentation allows selective disclosure of identifier information, protecting against tracking while enabling legitimate security operations.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If no standardized data relay exchange mechanism exists between zero trust ecosystem providers, then system flexibility is improved, but the scalability and efficiency of threat exchange deteriorates

Engineering Contradiction:
Improvesystem flexibilityVSAvoidthreat exchange efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent creates a universal device identifier system that can be used across multiple trusted ecosystem vendors and security tools. This universal identifier serves multiple functions: device identification, threat correlation, and security management across different vendors' platforms, thereby improving scalability and efficiency while maintaining flexibility through standardized protocols.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12549547B2Universal device identifiers and signal exchange collaboration
Publication Date: 2026.02.10 JAMF SOFTWARE LLC
  • US12549547B2 patent drawing
  • US12549547B2 patent drawing
  • US12549547B2 patent drawing

AI summary

In certain aspects of the disclosure, a computer-implemented method includes enrolling, at a mobile device management service, at least one managed device. The method includes receiving a client certificate on the at least one managed device. The method includes integrating, via a trusted ecosystem vendor app on the at least one managed device, a universal device identifier SDK. The method includes retrieving, by the universal device identifier SDK based on a request from the trusted ecosystem vendor app, a pre-salted device identifier address associated with the at least one managed device. The method includes transmitting, by the at least one managed device via the trusted ecosystem vendor, the pre-salted device identifier address to a security vendor service for generating a universal device identifier address. The method includes receiving, from the security vendor service by the at least one managed device via the trusted ecosystem vendor, the universal device identifier address.