Patent ID: 8590024
Filing Date: 2013-11-19
Classification: G06F

Abstract:
1. A method for assuring that a client device is authorized to receive information from a system, the system and the client device being in bi-directional communication over a network, the method comprising: using at least two different pieces of identifying information unique to a client device as an input for a cryptographic hash function, to generate a unique registration ID code for said client device; when said client device contacts said system, then using said system to evaluate said unique registration ID code together with an additional piece of user identifying information, to authenticate an identity of said client device; using said system to generate a unique pseudo random number (PRN) and storing the PRN; supplying said unique PRN to said client device for said client device to store as an initial PRN and use when making a subsequent call to said system for information from said system during a bidirectional communications session; prior to initiating said subsequent call, causing the client device to re-generate the unique registration code using the at least two different pieces of identifying information; prior to initiating said subsequent call, causing said client device to use a PRN generator associated with the client device to generate a new PRN using said initial PRN previously stored by said client device, and using said new PRN, together with said re-generated unique registration code, in generating a new, one-time only client side hash code; causing said client device to contact said system and to present only said new, one-time only client side hash code to said system as information identifying said client device to said system; and for each subsequent time that the client device attempts to initiate a new bidirectional communications session with the system: