Patent ID: 7596692
Filing Date: 2009-09-29
Classification: H04L

Abstract:
1. A method of authenticating a receiver device so that potentially fraudulent receiver devices may be identified, the method comprising acts of: receiving by an audit service authentication data from a first receiver, wherein the authentication data comprises data which should be unique to the first receiver, and comprises data from a receiver system data store, and wherein the data which should be unique to the receiver is stored in a memory that is arranged in accordance with a cyclic permutation algorithm, the system data store comprising a device birthmark, a service provider public key, and a certificate, the device birthmark being a signed hash of the system data store contents, and the certificate being a signed hash of the first receiver'serial number and public key and wherein the signed hash is signed by a private key corresponding to the service provider's public key; storing by the audit service authentication information derived from the authentication data received from the first receiver; receiving by the audit service from a second receiver, authentication data; comparing authentication information derived from the authentication data received from the second receiver with the authentication information derived from the authentication data received from the first receiver; when the authentication information derived from the authentication data received from the second receiver is the same as the authentication information derived from the authentication data received from the first receiver, determining that a receiver has been cloned or is being used for unauthorized purposes.