Patent ID: 9032217
Filing Date: 2015-05-12
Classification: G06F,H04L

Abstract:
1. A computer-implemented method of authenticating a user, comprising: under control of one or more computing systems configured with executable instructions, receiving an access request; in response to validating the access request via an authentication mechanism: obtaining initial device-specific information about a computing device from which the access request was received; generating a device fingerprint including at least a portion of the initial device-specific information, wherein the device fingerprint includes information indicating an order in which the initial device-specific information is stored in the device fingerprint; and providing a token that includes the device fingerprint to the computing device for submission with any subsequent related requests; receiving a subsequent request; and determining that the subsequent request includes a copy of the token, wherein in response to determining that the subsequent request includes the copy of the token: obtaining current device-specific information about a computing device from which the subsequent request was received; comparing the portion of the initial device-specific information in the device fingerprint in the copy of the token with the current device-specific information; and processing the subsequent request when the device-specific information in the device fingerprint matches the current device-specific information within at least one allowable match threshold.