Multi-factor device authentication

Abstract

A method and system for the secure delivery of data to a remote device that has been registered and which requires authentication through the use of a multifactor signature profile is disclosed, and in particular according to certain disclosed aspects, a method and system for ensuring that an authenticated remote device remains authenticated.

We claim: 
     
         1 . A computerized method for authenticating a media playback device across a computer network, comprising the steps of:
 determining, at a multi-factor authentication device capable of communicating with said media playback device across said computer network, the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device;   forming an initial multi-factor installation signature based on a result of said determining step;   recording said initial multi-factor installation signature on a device accessible across said computer network;   determining a subsequent multi-factor installation signature based on the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device;   comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile; and   generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.   
     
     
         2 . The method of  claim 1 , wherein said initial multi-factor installation signature comprises a X.509 certificate. 
     
     
         3 . The method of  claim 1 , wherein said initial multi-factor installation signature comprises one or more network addresses associated with said media playback device. 
     
     
         4 . The method of  claim 3 , wherein said initial multi-factor installation signature comprises a geographical location based on said one or more network addresses. 
     
     
         5 . The method of  claim 1 , wherein said initial multi-factor installation signature comprises an input from at least one accelerometer. 
     
     
         6 . The method of  claim 1 , wherein said initial multi-factor installation signature comprises network topology data associated with a network path between said media playback device and a media content provider. 
     
     
         7 . A computerized method for authenticating a media playback device across a computer network, comprising the steps of:
 determining, at a multi-factor authentication device capable of communicating with said media playback device across said computer network, the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback;   forming an initial multi-factor installation signature based on a result of said determining step;   recording said initial multi-factor installation signature on a device accessible across said computer network;   determining a subsequent multi-factor installation signature based on the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback;   comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile; and   generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.   
     
     
         8 . The method of  claim 7 , wherein said one or more items of auxiliary equipment comprise a HDCP-compliant device coupled to said media playback device via a high-definition multimedia interface (“HDMI”), wherein at least one unique HDCP or HDMI parameter is utilized in the generation and verification of the multi-factor installation signature. 
     
     
         9 . The method of  claim 7 , wherein the unique identifiers of the auxiliary equipment are utilized in the generation and verification of the multi-factor installation signature. 
     
     
         10 . A computerized method for authenticating a media playback device across a computer network, comprising the steps of:
 determining, at a multi-factor authentication device capable of communicating with said media playback device across said computer network, characteristics of the environment associated with said media playback device based on one or more electromagnetic sensors integrated into said media playback device and capable of measuring and sending data to said multi-factor authentication device across said computer network;   forming an initial multi-factor installation signature based on a result of said determining step;   recording said initial multi-factor installation signature on a device accessible across said computer network;   determining, at said multi-factor authentication device, a subsequent multi-factor installation signature based on data received from said one or more electromagnetic sensors;   comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile; and   generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.   
     
     
         11 . The method of  claim 10 , wherein said one or more electromagnetic sensors comprise a radio signal strength sensor. 
     
     
         12 . A system for authenticating a media playback device across a computer network, comprising:
 a multi-factor authentication device coupled to said media playback device across said computer network, comprising means for determining the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device, means for forming an initial multi-factor installation signature based on a result of said determining means, means for recording said initial multi-factor installation signature on a device accessible across said computer network;   means for determining a subsequent multi-factor installation signature based on the identity and number of intermediate hops across said network between said media playback device and said multi-factor authentication device, means for comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile, and means for generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.   
     
     
         13 . The system of  claim 12 , wherein said initial multi-factor installation signature comprises a X.509 certificate. 
     
     
         14 . The system of  claim 12 , wherein said initial multi-factor installation signature comprises a network address associated with said media playback device. 
     
     
         15 . The system of  claim 14 , wherein said initial multi-factor installation signature comprises a geographical location based on said network address. 
     
     
         16 . The system of  claim 12 , wherein said initial multi-factor installation signature comprises an input from at least one accelerometer. 
     
     
         17 . The system of  claim 12 , wherein said initial multi-factor installation signature comprises network topology data associated with a network path between said media playback device and a media content provider. 
     
     
         18 . A system for authenticating a media playback device across a computer network, comprising the steps of:
 a multi-factor authentication device coupled with said media playback device across said computer network, comprising means for determining the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback, means for forming an initial multi-factor installation signature based on a result of said determining means, means for recording said initial multi-factor installation signature on a device accessible across said computer network, means for determining a subsequent multi-factor installation signature based on the unique identifiers of one or more items of auxiliary equipment coupled to said media playback device so as to enable media playback, means for comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile, and means for generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.   
     
     
         19 . The system of  claim 18 , wherein said one or more items of auxiliary equipment comprise a HDCP-compliant device coupled to said media playback device via a high-definition multimedia interface (“HDMI”). 
     
     
         20 . A system for authenticating a media playback device across a computer network, comprising:
 a multi-factor authentication device coupled to said media playback device across said computer network, comprising means for determining characteristics of the environment associated with said media playback device based on one or more electromagnetic sensors integrated into said media playback device and capable of measuring and sending data to said multi-factor authentication device across said computer network, means for forming an initial multi-factor installation signature based on a result of said determining means, means for recording said initial multi-factor installation signature on a device accessible across said computer network, means for determining, at said multi-factor authentication device, a subsequent multi-factor installation signature based on data received from said one or more electromagnetic sensors, means for comparing said subsequent multi-factor installation signature against said initial multi-factor installation signature to define an installation signature change profile, and means for generating an alarm signal at said multi-factor authentication device, indicating whether said installation signature change profile satisfies a change profile tolerance criterion.   
     
     
         21 . The system of  claim 20 , wherein said one or more electromagnetic sensors comprise a radio signal strength sensor.