Local-area network (LAN)-based location determination

• US 9,854,059 B2
• Filed: 03/04/2016
• Issued: 12/26/2017
• Est. Priority Date: 03/04/2016
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Hughes, Charles J., Poliakov, Ivan
• Primary Examiner(s): Agosta, Steve D
• Application Number:
  US15/061,836
• Publication Number:
  US 20170257454A1
• Time in Patent Office: 662 Days
• Field of Search: 4554141, 4554561, 4554562, 4554563, 4554565, 4554566, 455457, 455466, 3703102, 370328, 370338, 713175-176
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 64/006 with additional information processing, e.g. for direction or speed determination

Abstract

In one embodiment, a method includes receiving a request for the client device to access a communication network. The request includes data identifying the client device based on an intermediate device certificate signed by one or more of the computing devices. The method also includes associating the request with a user profile of a social-networking system; and granting the client device access to the communication network based at least in part on the association of the request to the user profile.

Claims

1. A method comprising:

by one or more computing devices, receiving, at a public access point, a request for a client device to access a communication network, wherein the request comprises data identifying the client device based on a certificate signed by one or more of the computing devices;

by the computing devices, associating the request with a user profile of a social-networking system; and

by the computing devices, granting the client device access to the communication network based at least in part on the association of the request to the user profile;

by the computing devices, determining a location of the client device based at least in part on a location associated with the public access point;

by the computing devices, accessing a social graph with the user profile, the social graph being maintained by the social-networking system, the social graph comprising a plurality of nodes and a plurality of edges connecting the nodes, wherein a first node of the plurality of nodes corresponds to the user profile;

by the computing devices, identifying one or more third-party objects each associated with one or more entities located within a threshold distance of the public access point, each third-party entity corresponding to a second node of the plurality of nodes that is connected by an edge to the first node; and

by the computing devices, sending a recommendation to be displayed in a user interface of the client device, the recommendation including information associated with one of the identified third-party entities.

2. The method of claim 1, further comprising receiving data associating the client device with the user profile.

3. The method of claim 1, further comprising providing an intermediate gateway certificate to an authentication server, wherein the request further comprises data identifying an access point based on a gateway certificate signed using the intermediate gateway certificate.

4. The method of claim 3, further comprising associating a geolocation of the identified access point with the user profile.

5. The method of claim 4, further comprising calculating a conversion rate of a content object based at least in part on the association of the geolocation with the user profile.

6. The method of claim 4, further comprising determining an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

7. The method of claim 1, further comprising providing the certificate signed by one or more of the computing devices to an authentication server, wherein the certificate is an intermediate device certificate, and wherein the data identifying the client device is based on a device certificate signed using the intermediate device certificate.

8. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

receive, at a public access point, a request for a client device to access a communication network, wherein the request comprises data identifying the client device based on a certificate signed by one or more of the computing devices;

associate the request with a user profile of a social-networking system; and

grant the client device access to the communication network based at least in part on the association of the request to the user profile;

determine a location of the client device based at least in part on a location associated with the public access point;

access a social graph with the user profile, the social graph being maintained by the social-networking system, the social graph comprising a plurality of nodes and a plurality of edges connecting the nodes, wherein a first node of the plurality of nodes corresponds to the user profile;

identify one or more third-party objects each associated with one or more entities located within a threshold distance of the public access point, each third-party entity corresponding to a second node of the plurality of nodes that is connected by an edge to the first node; and

send a recommendation to be displayed in a user interface of the client device, the recommendation including information associated with one of the identified third-party entities.

9. The media of claim 8, wherein the software is further operable to receive data associating the client device with the user profile.

10. The media of claim 8, wherein the software is further operable to provide an intermediate gateway certificate to an authentication server, wherein the request further comprises data identifying an access point based on a gateway certificate signed using the intermediate gateway certificate.

11. The media of claim 10, wherein the software is further operable to associate a geolocation of the identified access point with the user profile.

12. The media of claim 11, wherein the software is further operable to calculate a conversion rate of a content object based at least in part on the association of the geolocation with the user profile.

13. The media of claim 11, wherein the software is further operable to determine an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

14. The media of claim 8, wherein the software is further operable to provide the certificate signed by one or more of the computing devices to an authentication server, wherein the certificate is an intermediate device certificate, and wherein the data identifying the client device is based on a device certificate signed using the intermediate device certificate.

15. A computing device comprising:

a processor; and

a memory coupled to the processor comprising instructions executable by the processor, the processor being operable when executing the instructions to;

receive, at a public access point, a request for a client device to access a communication network, wherein the request comprises data identifying the client device based on a certificate signed by one or more of the computing devices;

associate the request with a user profile of a social-networking system; and

grant the client device access to the communication network based at least in part on the association of the request to the user profile;

determine a location of the client device based at least in part on a location associated with the public access point;

access a social graph with the user profile, the social graph being maintained by the social-networking system, the social graph comprising a plurality of nodes and a plurality of edges connecting the nodes, wherein a first node of the plurality of nodes corresponds to the user profile;

identify one or more third-party objects each associated with one or more entities located within a threshold distance of the public access point, each third-party entity corresponding to a second node of the plurality of nodes that is connected by an edge to the first node; and

send a recommendation to be displayed in a user interface of the client device, the recommendation including information associated with one of the identified third-party entities.

16. The device of claim 15, wherein the processor is further operable to receive data associating the client device with the user profile.

17. The device of claim 15, wherein the processor is further operable to provide an intermediate gateway certificate to an authentication server, wherein the request further comprises data identifying an access point based on a gateway certificate signed using the intermediate gateway certificate.

18. The device of claim 17, wherein the processor is further operable to associate a geolocation of the identified access point with the user profile.

19. The device of claim 18, wherein the processor is further operable to calculate a conversion rate of a content object based at least in part on the association of the geolocation with the user profile.

20. The device of claim 18, wherein the processor is further operable to determine an amount of time a user is present at the geolocation based at least in part on a time the client device is accessing the communication network.

21. The device of claim 15, wherein the processor is further operable to provide the certificate signed by one or more of the computing devices to an authentication server, wherein the certificate is an intermediate device certificate, and wherein the data identifying the client device is based on a device certificate signed using the intermediate device certificate.