Facebook, Inc.

Circle Internet Group, Inc.

Itay Duvdevani

Dekel Shmuel Naar

Erling Alf Ellingsen

Oren Hafif

Sanjay Sane

Mark Blelock Atherton

Jun Sun

Roy Udassin

Shuo Shen

Oliver Sam Collins

Kyle Steven Nekritz

Vignesh Raghuraman

Parvi Kaustubhi

Simon A Blackstein

Sona Rathod

Cihad Oge

Kawin Prakobkit

Shivram Vaman Khandeparker

Roy Shifroni Udassin

Huapeng Zhou

Yuhan Guo

Feixiong Zhang

Asim Viladi Oglu Manizada

Vincent Christian Daniel Mauge

According to examples, a system for enabling user authentication may include a processor and a memory storing instructions. The processor, when executing the instructions, may cause the system to receive user login credentials and initiate a user authentication process by receiving a challenge configured using an attribute of a system including the processor. The processor executes further instructions to determine the attribute value and to derive a zero-knowledge proof in response to the challenge. The zero-knowledge proof is provided to the challenge issuer to access services of one or more applications.

User authentication techniques across applications on a user device

Methods and systems for processing requests by a computing device (e.g., a user device) are disclosed. The user device is coupled to a server system (e.g., a proxy server). The user device detects a DNS lookup request including a domain name and generates a first response to the DNS lookup request. The first response includes a synthesized IP address associated at the computing device with the domain name. The user device detects a connection request subsequent to the first response. The connection request includes the synthesized IP address. The user device modifies the connection request. In some embodiments, the user device replaces the synthesized IP address in the connection request with the domain name. The user device further forwards the connection request to a server.

Methods and systems for handling requests regarding zero-rating

In one embodiment, a method includes a system receiving a request from a user's device, the request being directed to a first host. The system may generate a key, a verification token, and an encrypted key. The system may transmit the verification token and the encrypted key to the device from the first host, and transmit instructions configured to cause (1) the verification token to be stored as a cookie associated with the first host, and (2) the device to transmit the encrypted key to a second host. The system may receive a second request comprising the encrypted key from the device, and decrypt it to obtain the key upon determining that the encrypted key was not previously decrypted. The system may transmit the key to the device from the second host, and instruct the device to store the key as a cookie associated with the second host.

Systems and methods for preventing session fixation over a domain portal

In one embodiment, a method includes sending a login request to a server computing device; receiving a first derivative identifier from the server computing device; storing the first derivative identifier; sending a content request to the server computing device for a web page; receiving, from the server computing device, a content frame and a trusted frame for display on the client device, wherein the content frame comprises a second derivative identifier; according to instructions associated with the content frame, requesting the trusted frame to verify whether the second derivative identifier matches the first derivative identifier; according to instructions associated with the trusted frame, verifying whether the second derivative identifier matches the stored first derivative identifier; and displaying the requested web page in the content frame based on a verification confirmation from the trusted frame that the second derivative identifier matches the stored first derivative identifier.

Secure content delivery over a domain portal

Methods and systems for processing web pages by a server system (e.g., a proxy server) are disclosed. The proxy server is coupled to a user device and a plurality of web servers. The proxy server receives a first request for a first web page provided by a first web server from the user device. The first web page is zero-rated. In response to receiving the first request, the proxy server retrieves the requested first web page from the first web server. The proxy server then processes the retrieved first web page. The proxy server identifies one or more resource identifiers contained within the retrieved first web page and appends one or more signatures to the identified one or more resource identifiers respectively. Each identified resource identifier is associated with a content item that is zero-rated. The proxy server further forwards the processed first web page to the user device.

Methods and systems for signing resource identifiers

Growing community of inventors

Rosh-Ha′ayin, Israel

Itay Duvdevani