Wi-Fi location determination

• US 10,348,856 B2
• Filed: 11/06/2017
• Issued: 07/09/2019
• Est. Priority Date: 03/04/2016
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Hughes, Charles J., Poliakov, Ivan
• Primary Examiner(s): Agosta, Stephen M D
• Application Number:
  US15/804,217
• Publication Number:
  US 20180063279A1
• Time in Patent Office: 610 Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 64/006 with additional information processing, e.g. for direction or speed determination

Abstract

In one embodiment, a method includes receiving a request for a client device to access a communication network. One or more of the computing devices is associated with a social-networking system, and the request includes data identifying the client device based on a certificate signed by one or more of the computing devices associated with the social-networking system. The method also includes associating the access request with a user profile of the social-networking system based on the certificate signed by one or more of the computing devices associated with the social-networking system; and granting the client device access to the communication network based at least in part on the association of the access request to the user profile.

Claims

1. A method comprising:

receiving, by a first server associated with a social-networking system, a request for a client device to access a communication network, wherein, the request comprises data identifying the client device based on a device certificate sent by the client device, the device certificate being signed using an intermediate device certificate of a second server associated with the social-networking system;

sending, by the first server to the second server associated with the social-networking system via an application programming interface (API), the data identifying the client device including signed device certificate;

validating, by the second server associated with the social-networking system, the signed device certificate based on a public key associated with the signed device certificate;

associating, by the second server associated with the social-networking system, the access request with a user profile of the social-networking system;

granting, by the second server associated with the social-networking system, the client device access to the communication network based at least in part on the association of the access request to the user profile; and

sending, by the second server associated with the social-networking system, a recommendation for display in a user interface of the client device, wherein the recommendation comprises a content object of a third-party that is identified based on the user profile and a geolocation of an access point associated with the user profile.

2. The method of claim 1, further comprising providing an intermediate gateway certificate signed by the second server associated with the social-networking system to the first server, wherein the request further comprises data identifying the access point based on a gateway certificate signed using the intermediate gateway certificate.

3. The method of claim 1, wherein the geolocation is determined based on an Internet protocol (IP) address of the access point.

4. The method of claim 1, further comprising calculating a conversion rate of the content object based at least in part on the association of the geolocation with the user profile.

5. The method of claim 1, further comprising determining an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

6. The method of claim 1, further comprising providing the intermediate device certificate to the first server, wherein the data identifying the client device is based on the device certificate signed using the intermediate device certificate created by the second server associated with the social-networking system.

7. The method of claim 1, wherein:

the first server associated with the social-networking system is an authentication server; and

the second server associated with the social-networking system is a network authorization server.

8. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

receive, by a first server associated with a social-networking system, a request for a client device to access a communication network, wherein the request comprises data identifying the client device based on a device certificate sent by the client device, the device certificate being signed using an intermediate device certificate of a second server associated with the social-networking system;

send, by the first server to the second server associated with the social-networking system via an application programming interface (API), the data identifying the client device including signed device certificate;

validate, by the second server associated with the social-networking system, the signed device certificate based on a public key associated with the signed device certificate;

associate, by the second server associated with the social-networking system, the access request with a user profile of the social-networking system;

grant, by the second server associated with the social-networking system, the client device access to the communication network based at least in part on the association of the access request to the user profile; and

send, by the second server associated with the social-networking system, a recommendation for display in a user interface of the client device, wherein the recommendation comprises a content object of a third-party that is identified based on the user profile and a geolocation of an access point associated with the user profile.

9. The media of claim 8, wherein the software is further operable to provide an intermediate gateway certificate signed by the second server associated with the social-networking system to the first server, wherein the request further comprises data identifying the access point based on a gateway certificate signed using the intermediate gateway certificate.

10. The media of claim 8, wherein the geolocation is determined based on an Internet protocol (IP) address of the access point.

11. The media of claim 8, wherein the software is further operable to calculate a conversion rate of the content object based at least in part on the association of the geolocation with the user profile.

12. The media of claim 8, wherein the software is further operable to determine an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

13. The media of claim 8, wherein the software is further operable to provide the intermediate device certificate to the first server, wherein the data identifying the client device is based on the device certificate signed using the intermediate device certificate created by the second server associated with the social-networking system.

14. The media of claim 8, wherein:

the first server associated with the social-networking system is an authentication server; and

the second server associated with the social-networking system is a network authorization server.

15. A system comprising:

a first server associated with a social-networking system;

a second server associated with the social-networking system;

a processor; and

a memory coupled to the processor comprising instructions executable by the processor, the processor being operable when executing the instructions to;

receive, by the first server associated with the social-networking system, a request for a client device to access a communication network, wherein, the request comprises data identifying the client device based on a device certificate sent by the client device, the device certificate being signed using an intermediate device certificate of the second server associated with the social-networking system;

send, by the first server to the second server associated with the social-networking system via an application programming interface (API), the data identifying the client device including signed device certificate;

validate, by the second server associated with the social-networking system, the signed device certificate based on a public key associated with the signed device certificate;

associate, by the second server associated with the social-networking system, the access request with a user profile of the social-networking system;

grant, by the second server associated with the social-networking system, the client device access to the communication network based at least in part on the association of the access request to the user profile; and

send, by the second server associated with the social-networking system, a recommendation for display in a user interface of the client device, wherein the recommendation comprises a content object of a third-party that is identified based on the user profile and a geolocation of an access point associated with the user profile.

16. The system of claim 15, wherein the processors are further operable to provide an intermediate gateway certificate signed by the second server associated with the social-networking system to the first server, wherein the request further comprises data identifying the access point based on a gateway certificate signed using the intermediate gateway certificate.

17. The system of claim 15, wherein the geolocation is determined based on an Internet protocol (IP) address of the access point.

18. The system of claim 15, wherein the processors are further operable to calculate a conversion rate of the content object based at least in part on the association of the geolocation with the user profile.

19. The system of claim 15, wherein the processors are further operable to determine an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

20. The system of claim 15, wherein:

the first server associated with the social-networking system is an authentication server; and

the second server associated with the social-networking system is a network authorization server.