Pavilion Technologies, Inc.

Wayport, Inc.

Webad Campaign Analytics, LP

Other

Microelectronics and Computer Technology Corporation

James David Keeler

Eric J Hartman

John P Havener

Stephen William Piche

Mark Gerules

Ralph Bruce Ferguson

Gregory D Martin

Eugene Boe

Douglas Timmer

Devendra B Godbole

Kadir Liano

Steven A O'Hara

Jill L Kempf

John R Melendez

Matthew M Krenzer

Ralph Bruce Ferguson, Ii

Ian Michael Fink

Steven J McGarel

Joshua Brennan Ellinger

Todd L Mathis

Matthew C Brace

Steve Piche

Laura Arbila

R Bruce Ferguson, Ii

John Krauskop

Audrey Strauss

Jitendra W Telang

William Douglas Johnson

Mathew M Krenzer

Gregory Gene Williams

Tyler Eschenroeder

David J Vucina

Scott W Martin

Devandra B Godbole

A method includes receiving authentication information for a client device at a server. The authentication information includes a geographic location of the client device and a first result of a one-way hash function based on a combination including an authentication seed and a first secret. The method includes computing, at the server, a second result of the one-way hash function based on a combination including the authentication seed and a second secret. The method also includes enabling the client device to access a second network in response to a determination by the server that the first result matches the second result and a determination by the server that the client device is authorized to access the second network based on the geographic location.

Device-specific authorization at distributed locations

A method and system for providing distributed network access point installation and management. A network provider installs and/or operates a plurality of access points at locations of a retail entity. Each access point may provide services such as Internet access, and/or content such as audio, video, text, and/or graphics, among other types of services. A carrier, such as a telephone or cable company, may compensate the network service provider for installation and operation of the access points. The carrier may in turn charge its subscribers for network access at the retail entity locations. A plurality of different carriers may provide compensation and allow respective subscriber access. The network access points may be configured to allow each carrier to present a point of presence to its subscribers at the retail entity locations. The installed network may also provide service for retail entity back office functions.

System, method and program product for delivery of digital content offerings at a retail establishment

In one or more embodiments, a system can configure a physical mobile device via configuring a configuration for an emulator of the physical mobile device. For example, a user (e.g., a customer) can request a physical mobile device, and a system can provide the user with an emulation of the physical mobile device, where the user can configure the emulation of the physical mobile device. In one or more embodiments, the user can be provided with the configuration via at least one of a network and a physical delivery of the physical mobile device, configured with the configuration. In one example, the user can execute an emulation of the physical mobile device configured with the configuration, received via the network. In another example, the physical mobile device can be configured with the configuration, and subsequently, the physical mobile device can be physically delivered to the user.

Concurrent emulation of multiple devices

Physical device emulation synchronization

A method, system and computer program product for providing location-specific content to a personal computing device (PCD) connected to a distributed server network (such as the Internet) without requiring an access control gateway to provide such content. Location-specific (and user-specific) content/services are provided by a client-server architecture utilizing a location database and a location look-up utility of a location identifier and content retrieval (LICR) server. Specifically, a utility executing on the PCD provides PCD location parameters to the LICR server, which is equipped with a location look up engine/functionality and a location content retrieval engine/functionality (both within a LICR utility) that responds by providing location-specific and user-specific content to the PCD.

Providing location-based services in a distributed environment without direct control over the point of access

A method includes receiving authentication information for a client device at a server. The authentication information includes a network address of the client device, a geographic location of the client device, and a first result of a one-way hash function based on a combination of the network address, an authentication seed, and a first secret. The method includes computing, with the server, a second result of the one-way hash function based on a combination of the network address, the authentication seed, and a second secret. The method also includes enabling the client device to access a second network in response to a determination by the server that the first result matches the second result and a determination by the server that the client device is authorized to access the second network based on the geographic location.

A method includes receiving, at a client device, an authentication seed from a first network. The method also includes receiving a shared secret. The method further includes, in response to receiving the authentication seed, determining a network address of the client device. The method further includes computing a result of a one-way hash function of a combination of the network address, the authentication seed, and the shared secret. The method further includes transmitting the network address and the result of the one-way hash function to a server that provides access control of a second network coupled to the first network. The method further includes receiving permission from the server to access the second network.

With the proliferation of wireless devices, seamless authentication of devices at distributed locations (e.g., so-called Wi-Fi hotspots) may be essential for convenient use of various devices at these locations. Previous methods for authentication relied on an account-based method using a username and a password inputted from a user. This method may be awkward for mass-distribution of devices. Various embodiments disclosed may provide an authorization client that communicates with one or more servers that relies on client software and message authentication codes for authorization of network access.

A system and method for providing roaming access on a network are disclosed. The network includes a plurality of wireless and/or wired access points. A user may access the network by using client software on a client computer (e.g., a portable computing device) to initiate an access procedure. In response, a network management device operated by a network provider may return an activation response message to the client. The client may send the user's username and password to the network provider. The network provider may rely on a roaming partner, another network provider with whom the user subscribes for internet access, for authentication of the user. Industry-standard methods such as RADIUS, CHAP, or EAP may be used for authentication. The providers may exchange pricing and service information and account information for the authentication session. A customer may select a pricing and service option from a list of available options.

Authorization and authentication of user access to a distributed network communication system with roaming feature

A system and method are disclosed for user fraud protection and prevention of access to a distributed network communication system. A first set of identification data associated with a first network access are stored. A second set of identification data associated with a second network access are stored. The first and second sets of identification data comprise a first computing device identification and a second computing device identification, respectively. If one or more fraud indicators are determined in the two sets of identification data, then the first and/or second network access may be revoked. The fraud indicators may include, e.g., use of the same username with different computing device identifications, use of the same computing device identification at different geographical locations, violation of a threshold for computing device identifications, violation of a threshold for authentication failures, and violation of a threshold for rate of network propagation by a user account.

User fraud detection and prevention of access to a distributed network communication system

A system and method uses a plurality of access points coupled to a network, wherein at least one of the plurality of access points is operable to communicate with a computing device, and a network provider server communicatively coupled to a network. The network provider server is operable to perform initiating communication between a computing device and a network, wherein the computing device is coupled to the network through an access point of the plurality of access points at a geographic location, determining different levels of services apply at the venue, presenting one or more of the different levels of services for selection by a user of the computing device, and delivering a level of service selected by the user, among the different levels of services, over the network to the computing device.

System and method of user access service levels in a distributed network communication system

A method, system, and computer program product that enables persistent display of advertising and other service provider content during access via a gateway access system to third party content on a separate network. A connection is enabled between a personal computing device (PCD) and the gateway access system. The gateway access system facilitates retrieval of a first content from the network to be displayed within a first window on the PCD. The gateway access system provides program code to the PCD that when executed enables persistent display of a second window on the PCD that does not overlap with the first window. A second content is transmitted for display within the second window on the PCD, where the second content is displayed within the persistent window on the PCD along with the display of the first content.

System and method for providing persistent advertising with third party content in a distributed internet access environment

In various embodiments, one or more methods and/or systems described may provide probing and/or data replication capabilities for monitoring a user's computing device and the data the user's computing device transmits and/or receives to and/or from one or more networks. In some embodiments, an authorization signal may be intercepted, where the authorization signal may convey information about the user and/or the user's computing device, and a probe to replicate data to and/or from the user's computing device may be initiated. In various embodiments, the replicated data may be communicated to a mediation computing device, where one or more analyses may be performed.

Probe insertion for one or more network address translated addresses

Internet protocol (IP) data service providers may provide several services over a single communications channel and/or circuit. For example, the provider may deliver public services such as Wi-Fi, content, gaming, etc. as well as business-critical 'back-office' services such as credit card processing, VoIP, streaming video, video conferencing, etc. Some applications can very demanding from a quality of service standpoint, whereas other applications are unwanted or unauthorized on the network such as worms, viruses, denial of service attacks and/or certain types of peer-to-peer file sharing applications. Applications sharing the communication channel may be classified into one or more application classifications. The available bandwidth over the communications channel and/or circuit may then be managed via a prioritization system that can be parameterized based on the available bandwidth and/or the desired application behavior for given characterized applications. Many of the above unwanted applications can be suppressed, after being classified.

Growing community of inventors

Austin, TX, United States of America

James David Keeler