Wi-Fi Location Determination

• US 20180063279A1
• Filed: 11/06/2017
• Published: 03/01/2018
• Est. Priority Date: 03/04/2016
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Hughes, Charles J., Poliakov, Ivan
• Granted Patent: US 10,348,856 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 64/006 with additional information processing, e.g. for direction or speed determination

Abstract

In one embodiment, a method includes receiving a request for a client device to access a communication network. One or more of the computing devices is associated with a social-networking system, and the request includes data identifying the client device based on a certificate signed by one or more of the computing devices associated with the social-networking system. The method also includes associating the access request with a user profile of the social-networking system based on the certificate signed by one or more of the computing devices associated with the social-networking system; and granting the client device access to the communication network based at least in part on the association of the access request to the user profile.

Claims

1. A method comprising, by one or more computing devices:

receiving a request for a client device to access a communication network, wherein;

one or more of the computing devices is associated with a social-networking system, and

the request comprises data identifying the client device based on a certificate signed by one or more of the computing devices associated with the social-networking system;

associating the access request with a user profile of the social-networking system based on the certificate signed by one or more of the computing devices associated with the social-networking system; and

granting the client device access to the communication network based at least in part on the association of the access request to the user profile.

2. The method of claim 1, further comprising providing an intermediate gateway certificate signed by one or more computing devices associated with the social-networking system to an authentication server, wherein the request further comprises data identifying an access point based on a gateway certificate signed using the intermediate gateway certificate.

3. The method of claim 1, further comprising associating a geolocation of an access point with the user profile, wherein the geolocation is determined based on an Internet protocol (IP) address of the access point.

4. The method of claim 3, further comprising sending a recommendation for display in a user interface of the client device, wherein the recommendation a content object of a third-party entity that is identified based on the user profile and the geolocation.

5. The method of claim 3, further comprising calculating a conversion rate of a content object based at least in part on the association of the geolocation with the user profile.

6. The method of claim 4, further comprising determining an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

7. The method of claim 1, further comprising providing an intermediate device certificate to the authentication server, wherein the data identifying the client device is based on a device certificate signed using the intermediate device certificate created by one or more of the computing devices associated with the social-networking system.

8. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

receive, by one or more of computing devices associated with a social-networking system, a request for a client device to access a communication network, wherein the request comprises data identifying the client device based on a certificate signed by one or more of the computing devices associated with the social-networking system;

associate the access request with a user profile of the social-networking system based on the certificate signed by one or more of the computing devices associated with the social-networking system; and

grant the client device access to the communication network based at least in part on the association of the access request to the user profile.

9. The media of claim 8, wherein the software is further operable to provide an intermediate gateway certificate signed by one or more computing devices associated with the social-networking system to an authentication server, wherein the request further comprises data identifying an access point based on a gateway certificate signed using the intermediate gateway certificate.

10. The media of claim 8, wherein the software is further operable to associate a geolocation of an access point with the user profile, wherein the geolocation is determined based on an Internet protocol (IP) address of the access point.

11. The media of claim 10, wherein the software is further operable to send a recommendation for display in a user interface of the client device, wherein the recommendation a content object of a third-party entity that is identified based on the user profile and the geolocation.

12. The media of claim 10, wherein the software is further operable to calculate a conversion rate of a content object based at least in part on the association of the geolocation with the user profile.

13. The media of claim 12, wherein the software is further operable to determine an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

14. The media of claim 8, wherein the software is further operable to provide an intermediate device certificate to the authentication server, wherein the data identifying the client device is based on a device certificate signed using the intermediate device certificate created by one or more of the computing devices associated with the social-networking system.

15. A computing device comprising:

a processor; and

a memory coupled to the processor comprising instructions executable by the processor, the processor being operable when executing the instructions to;

receive a request for a client device to access a communication network, wherein;

the computing devices comprises one or more computing devices associated with a social-networking system; and

the request comprises data identifying the client device based on a certificate signed by one or more of the computing devices associated with the social-networking system;

associate the access request with a user profile of the social-networking system based on the certificate signed by one or more of the computing devices associated with the social-networking system; and

grant the client device access to the communication network based at least in part on the association of the access request to the user profile.

16. The computing device of claim 15, wherein the processors are further operable to provide an intermediate gateway certificate signed by one or more computing devices associated with the social-networking system to an authentication server, wherein the request further comprises data identifying an access point based on a gateway certificate signed using the intermediate gateway certificate.

17. The computing device of claim 15, wherein the processors are further operable to associate a geolocation of an access point with the user profile, wherein the geolocation is determined based on an Internet protocol (IP) address of the access point.

18. The computing device of claim 17, wherein the processors are further operable to send a recommendation for display in a user interface of the client device, wherein the recommendation a content object of a third-party entity that is identified based on the user profile and the geolocation.

19. The computing device of claim 17, wherein the processors are further operable to calculate a conversion rate of a content object based at least in part on the association of the geolocation with the user profile.

20. The computing device of claim 19, wherein the processors are further operable to determine an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.