Device identification based on event logs

摘要

Some embodiments include a method of generating an event-based device ID based on an operating environment of a computing device. The method includes binding an event-based identifier and an events profile ID to a policy-related record that is associated with an externally controlled policy. The binding ensures that the policy is applied to the operating environment identified by the event-based identifier. The method includes generating the device ID based on event logs of the computing device.

主权项

1. A computer-implemented method of establishing an identifier of an operating environment of a computing device, comprising:
identifying a choice pool of candidate event logs in the operating environment of the computing device; receiving an ID generation request to generate the identifier of the operating environment for binding with a policy-related record associated with an externally controlled policy enforced through an agent application; in response to receiving the ID generation request, generating an events profile and a profile ID associated with the events profile, wherein generating the events profile includes selecting a first event log from the choice pool and selecting a first event property from the first event log; generating an event-based device ID based at least partly on the selected first event property extracted from the first event log according to the events profile, the event-based device ID including a reference to the profile ID of the events profile, wherein the event-based device ID serves as the identifier of the operating environment; wherein generating the event-based device ID includes hashing event properties into a hash value to be part of the event-based device ID; and storing the policy-related record that is bound to the event-based device ID.