Patent Document ID: 10148664
Application ID: 15260095
Patent Flag: 1

Claim One:
1. A system, comprising: a first computing device configured to perform first operations comprising: extracting a first transport layer security (TLS) fingerprint from an initial communication of a TLS handshake, wherein the initial communication is included in a received first information; and in response to a detecting a mobile application related request, transmitting a second information detailing the first TLS fingerprint to a second computing device; and the second computing device configured to perform, responsive to receiving the second information detailing the first TLS fingerprint, second operations comprising: determining a predicted operating system based on comparing the first TLS fingerprint to a model including historical information correlating one or more received TLS fingerprints to one or more operating systems; and determining whether the predicted operating system corresponds to a mobile device, wherein the historical information further correlates the one or more fingerprints to one or more agents, and wherein the second operations further comprise: determining a predicted agent comprising a type of web browser based on comparing the first TLS fingerprint to the model; determining whether the predicted agent and the predicted operating system correspond to a mobile device; and based on determining that the predicted agent and the predicted operating system do not correspond to a mobile device, adding the first TLS fingerprint to a black list.