Controlling access to an accessible object with an online access control list

• US 9,141,778 B2
• Filed: 08/19/2013
• Issued: 09/22/2015
• Est. Priority Date: 08/21/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Marra, Gregory Matthew, Liu, Sean
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): DOAN, TRANG T
• Application Number:
  US13/970,568
• Publication Number:
  US 20140059660A1
• Time in Patent Office: 764 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Software on a router receives configuration data that specifies a social networking service as a source for authentication according to an authentication protocol. Subsequently, the router software receives packet data from a client device for a destination other than the social networking service. The router software causes software on the client device to display a login view for the social networking service. The router software transmits the login data entered in the login view to the social networking service. And the router software receives an authorization code following a successful login by a user identified on an access control list (ACL). Then the router software transmits the packet data to the destination.

Claims

1. A computer-implemented method, comprising operations of:

receiving configuration data at a router that specifies a social networking service as a source for authentication according to an authentication protocol;

receiving packet data from a client device for a destination other than the social networking service;

causing software on the client device to request login for the social networking service;

transmitting to the social networking service login data responsive to the login request;

receiving an authorization code following a successful login by a user identified on an access control list (ACL); and

transmitting the packet data to the destination.

2. The method as in claim 1, wherein the router transmits and receives data according to a WiFi protocol.

3. The method as in claim 1, wherein access resulting from the authorization code is limited in duration.

4. The method as in claim 1, wherein access resulting from the authorization code is limited in scope.

5. The method as in claim 1, wherein the access control list is maintained by the social networking service.

6. The method as in claim 1, wherein the access control list is maintained by the router.

7. A non-transitory computer-readable storage medium persistently storing a program, wherein the program, when executed, instructs a processor to perform the following operations:

receive configuration data at a router that specifies a social networking service as a source for authentication according to an authentication protocol;

receive packet data from a client device for a destination other than the social networking service;

cause software on the client device to request login for the social networking service;

transmit to the social networking service login data responsive to the login request;

receive an authorization code following a successful login by a user identified on an access control list (ACL) maintained by the social networking service; and

transmit the packet data to the destination.

8. The non-transitory computer-readable storage medium of claim 7, wherein the router transmits and receives data according to a WiFi protocol.

9. The non-transitory computer-readable storage medium of claim 7, wherein access resulting from the authorization code is limited in duration.

10. The non-transitory computer-readable storage medium of claim 7, wherein access resulting from the authorization code is limited in scope.

11. The non-transitory computer-readable storage medium of claim 7, wherein the access control list is maintained by the social networking service.

12. The non-transitory computer-readable storage medium of claim 7, wherein the access control list is maintained by the router.

13. A system, comprising:

one or more processors; and

a memory disposed in communication with the one or more processors and storing processor-executable instructions, the instructions comprising instructions to;

receive configuration data at a router that specifies a social networking service as a source for authentication according to an authentication protocol;

receive packet data from a client device for a destination other than the social networking service;

cause software on the client device to request login for the social networking service;

transmit to the social networking service login data responsive to the login request;

receive an authorization code following a successful login by a user identified on an access control list (ACL) maintained by the social networking service; and

transmit the packet data to the destination.

14. The system of claim 13, wherein the router transmits and receives data according to a WiFi protocol.

15. The system of claim 13, wherein access resulting from the authorization code is limited in duration.

16. The system of claim 13, wherein access resulting from the authorization code is limited in scope.

17. The system of claim 13, wherein the access control list is maintained by the social networking service.

18. The system of claim 13, wherein the access control list is maintained by the router.