Native Application Hotspot

• US 20150012640A1
• Filed: 07/03/2013
• Published: 01/08/2015
• Est. Priority Date: 07/03/2013
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Toksvig, Michael John McKenzie, Hughes, Charles J., Tseng, Erick
• Granted Patent: US 9,590,884 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

In one embodiment, a method includes detecting interception of data sent by the computing device to a first network resource through a communication network. The first network resource corresponds to a particular domain of the communication network. The method also includes determining whether the communication network is administered by the particular domain; and automatically generating a request to access the communication network that identifies a second network resource based at least in part on the determination. The second network resource is configured to authenticate a user to the particular domain of the communication network. The method also includes sending the request to the second network resource to access the communication network.

Claims

1. A method comprising:

by a computing device, detecting interception of data sent by the computing device to a first network resource through a communication network, the first network resource corresponding to a particular domain of the communication network;

by the computing device, determining whether the communication network is administered by the particular domain;

by the computing device, automatically generating a request to access the communication network that identifies a second network resource based at least in part on the determination, the second network resource being configured to authenticate a user to the particular domain of the communication network; and

by the computing device, sending the request to the second network resource to access the communication network.

2. The method of claim 1, wherein the first and second network resources comprise one or more server computing devices of a social-networking system.

3. The method of claim 1, wherein sending the request bypasses a captive network support of a user by a router of the communication network.

4. The method of claim 3, wherein the router is a Wi-Fi access point.

5. The method of claim 3, further comprising automatically checking in a user at a geolocation associated with the router.

6. The method of claim 1, wherein:

the communication network is the Internet; and

the particular domain is a second-level domain (SLD) of the Internet.

7. The method of claim 6, wherein the SLD is www.facebook.com.

8. The method of claim 1, wherein the data sent to a first network resource corresponds to interactions between an application of the computing device and the first computing resource.

9. One or more computer-readable non-transitory storage media embodying software configured when executed to:

detect interception of data sent by the computing device to a first network resource through a communication network, the first network resource corresponding to a particular domain of the communication network;

determine whether the communication network is administered by the particular domain;

automatically generate a request to access the communication network that identifies a second network resource based at least in part on the determination, the second network resource being configured to authenticate a user to the particular domain of the communication network; and

send the request to the second network resource to access the communication network.

10. The media of claim 9, wherein the first and second network resources comprise one or more server computing devices of a social-networking system.

11. The media of claim 9, wherein sending the request bypasses a captive network support of a user by a router of the communication network.

12. The media of claim 11, wherein the router is a Wi-Fi access point.

13. The media of claim 11, wherein the software is further configured to automatically check in a user at a geolocation associated with the router.

14. The media of claim 9, wherein:

the communication network is the Internet; and

the particular domain is a second-level domain (SLD) of the Internet.

15. The media of claim 14, wherein the SLD is www.facebook.com.

16. The media of claim 9, wherein the data sent to a first network resource corresponds to interactions between an application of the computing device and the first computing resource.

17. A device comprising:

a processor; and

one or more computer-readable non-transitory storage media coupled to the processor and embodying software that;

detect interception of data sent by the device to a first network resource through a communication network, the first network resource corresponding to a particular domain of the communication network;

determine whether the communication network is administered by the particular domain;

automatically generate a request to access the communication network that identifies a second network resource based at least in part on the determination, the second network resource being configured to authenticate a user to the particular domain of the communication network; and

send the request to the second network resource to access the communication network.

18. The device of claim 17, wherein the first and second network resources comprise one or more server computing devices of a social-networking system.

19. The device of claim 17, wherein sending the request bypasses a captive network support of a user by a router of the communication network.

20. The device of claim 19, wherein the software is further configured to automatically check in a user at a geolocation associated with the router.