Integrating a router based web meter and a software based web meter

• US 9,876,800 B2
• Filed: 03/16/2015
• Issued: 01/23/2018
• Est. Priority Date: 10/25/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Rowe, Simon Michael
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): HOLMES, ANGELA R
• Application Number:
  US14/658,626
• Publication Number:
  US 20160164877A1
• Time in Patent Office: 1,044 Days
• Field of Search: 726 6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method for associating a web event with a member of a group of users is implemented at a first computing device. The method includes: receiving a data access request from a second computing device; determining whether the user has previously provided personal information and authorization to the first computing device through the second computing device; if the user'"'"'s personal information and authorization are found: generating a record for the data access request; if the user'"'"'s personal information is found but the user'"'"'s authorization is not found: generating a record for the data access request; and if neither of the user'"'"'s personal information and authorization is found: identifying one or more user identifiers that are associated with the second computing device; and returning personal information associated with the one or more user identifiers to the second computing device.

Claims

1. A method, comprising:

receiving, by a first computing device from a second computing device, a request to access data at a remote server on behalf of a user;

identifying, by the first computing device, that the first computing device has not previously received authorization from the second device to store an association between the user and the request to access data;

identifying one or more user identifiers associated with the second computing device; and

transmitting, by the first computing device to the second computing device, responsive to the identification that the first computing device has not previously received authorization from the second computing device to store an association between the user and the request to access data, a user selection request comprising the identified one or more user identifiers associated with the second computing device and personal information associated with the one or more user identifiers for presentation by the second computing device such that the user can choose personal information associated with one of the one or more user identifiers.

2. The method of claim 1, further comprising receiving, by the first computing device from the second computing device, an identifier of a selected user of the one or more users associated with the second computing device.

3. The method of claim 2, further comprising receiving, by the first computing device from the second computing device, information about the selected user.

4. The method of claim 3, further comprising generating a record for the request to access data at the remote server, by the first computing device, responsive to receiving the identifier of the selected user, the record comprising the received information about the selected user and an identifier of the request to access data.

5. The method of claim 2, further comprising generating a record for the request to access data at the remote server, by the first computing device, responsive to receiving the identifier of the selected user, the record comprising an identifier of the second computing device and an identifier of the request to access data.

6. The method of claim 5, wherein generating the record for the request to access data at the remote server is performed responsive to determining, by the first computing device, that no information about the selected user has been received from the second computing device.

7. The method of claim 1, wherein identifying that the first computing device has not previously received authorization from the second computing device to store an association between the user and the request to access data further comprises:

extracting an identifier of the second computing device from the data access request;

identifying a computing device record using the identifier of the second computing device; and

identifying that the computing device record does not include authorization to associate the user'"'"'s information with the data access request.

8. The method of claim 1, wherein identifying that the first computing device has not previously received authorization from the second computing device to store an association between the user and the request to access data further comprises:

determining, by the first computing device, a device type of the second computing device;

generating, by the first computing device, a computing device record comprising an identifier of the second computing device and the determined device type; and

transmitting, by the first computing device to the second computing device, a request for information about the user and authorization to associate the user with the request to access data.

9. A device, comprising:

a communication interface in communication with a second computing device and a remote server;

a memory device configured to store user records, device records, and data access records; and

a processor executing a data access request analysis module configured to;

identify, responsive to receipt via the communication interface of a request from the second computing device to access data at the remote server on behalf of a user, that the first computing device has not previously received authorization from the second computing device to store an association between the user and the request to access data,

identify one or more user identifiers associated with the second computing device, and

transmit, via the communication interface to the second computing device, responsive to the identification that the first computing device has not previously received authorization from the second computing device to store an association between the user and the request to access data, a user selection request comprising the identified one or more user identifiers associated with the second computing device and personal information associated with the one or more user identifiers for presentation by the second computing device such that the user can choose personal information associated with one of the one or more user identifiers.

10. The device of claim 9, wherein the processor further executes a traffic report module configured to generate a record for the request to access data at the remote server, responsive to receiving, via the communication interface, an identifier of a selected user of the one or more users associated with the second computing device, the record comprising information received about the selected user and an identifier of the request to access data.

11. The device of claim 9, wherein the processor further executes a traffic report module configured to generate a record for the request to access data at the remote server, responsive to receiving, via the communication interface, an identifier of a selected user of the one or more users associated with the second computing device, the record comprising an identifier of the second computing device and an identifier of the request to access data;

wherein generation of the record is performed responsive to determining, by the traffic report module, that no information about the selected user has been received from the second computing device.

12. The device of claim 9, wherein the data access request analysis module is further configured to:

extract an identifier of the second computing device from the data access request,

identify a device record of the stored device records using the identifier of the second computing device, and

identify that the computing device record does not include authorization to associate the user'"'"'s information with the data access request.

13. The device of claim 9, wherein the data access request analysis module is further configured to:

determine a device type of the second computing device,

generate a device record for storage in the memory comprising an identifier of the second computing device and the determined device type, and

transmit, via the communication interface to the second computing device, a request for information about the user and authorization to associate the user with the request to access data.

14. The device of claim 9, wherein the device comprises a network router deployed between the second computing device and the remote server.

15. The device of claim 9, wherein the memory device stores user records for a plurality of users.

16. A method, comprising:

receiving, by a first computing device from a second computing device, a data access request generated for a user of the second computing device for accessing a data service at a remote server;

determining from data stored in memory of the first computing device storing user information for a plurality of users that the user has not previously provided, to the first computing device through the second computing device, authorization for the first computing device to store an association between the user and the user'"'"'s data access request; and

responsive to determining that the user has not previously provided authorization to the first computing device through the second computing device;

identifying one or more user identifiers that are associated with the second computing device, and

returning personal information associated with the one or more user identifiers to the second computing device for display on the second computing device such that the user of the second computing device can choose personal information associated with one of the one or more user identifiers.

17. The method of claim 16, further comprising generating, by the first computing device, a record for the data access request responsive to receiving an identifier corresponding to selected personal information, the record comprising an identifier for the data access request and one of:

the selected personal information or the identifier corresponding to selected personal information.

18. The method of claim 16, further comprising generating, by the first computing device, a record for the data access request responsive to receiving an identifier corresponding to selected personal information, the record comprising an identifier for the data access request and an identifier for the second computing device.