Facebook, Inc.

Onavo Mobile Ltd.

Lior Tubi

Roi Tiger

Dekel Shmuel Naar

Nimrod Priell

Xiaoliang Wei

Guy Rosen

Gahl Saraf

Joshua Ryan Lauer

Israel Nir

Guy Yonish

Dekel Schmuel Naar

Gadi Eliashiv

Eran Fridman

Gadi Elishayov

Eran Friedman

Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.

Techniques to authenticate a client to a proxy through a domain name server intermediary

Techniques to identify application foreground/background state based on network traffic are described. In one embodiment, an apparatus may comprise a traffic monitoring component and a traffic analysis component. The traffic monitoring component may receive monitored network traffic over a monitored time period. The traffic analysis component may receive a foreground activity profile, the foreground activity profile comprising one or more signals for distinguishing between foreground activity of one or more profiled applications and background activity of the one or more profiled applications; determine one or more active foreground applications in the monitored network traffic based on the foreground activity profile, wherein determining the one or more active foreground applications comprises determining that at least a portion of the monitored network traffic comprises background activity; and log that the one or more active foreground application were active during the monitored time period. Other embodiments are described and claimed.

Techniques to identify application foreground / background state based on network traffic

Techniques to identify applications based on network traffic are described. In one embodiment, an apparatus may comprise a client record component, a traffic monitoring component, a profiling component, and a traffic analysis component. The client record component may be operative to store a client application map, the client application map to represent installations of a plurality of applications on a plurality of client devices. The traffic monitoring component may be operative to monitor training network traffic and additional network traffic on one or more network interfaces, the training network traffic generated by the plurality of client devices. The profiling component may be operative to generate a network profile map using machine learning based on the training network traffic and the client application map. The traffic analysis component may be operative to identify one or more application of the plurality of applications. Other embodiments are described and claimed.

Techniques to identify applications based on network traffic

Techniques for zero rating through redirection are described. In one embodiment, an apparatus may comprise a client proxy component operative to receive a proxy network packet from a local gateway application on a client device, the proxy network packet containing an application network packet for delivery to a network server device; and forward the application network packet to the network server device based on a determination that a local user application is authorized to use the proxy server device; and a proxy access component operative on the processor circuit to determine that the application network packet is associated with the local user application on the client device; and determine that the local user application is authorized to use the proxy server device. Other embodiments are described and claimed.

Techniques for zero rating through redirection

Techniques for zero rating through web reconstruction are described. In one embodiment, an apparatus may comprise a client access component operative to receive a web request from a client device, the web request for a web page hosted on a network server device; and transmit a zero-rating transformed web page to the client device in response to the web request; and a web reconstruction component operative on the processor circuit to retrieve the web page from the network server device; identify one or more non-zero-rated resource references in the retrieved web page; transform the one or more non-zero-rated resource references to form one or more zero-rated resource references; and replace the one or more non-zero-rated resource references with the one or more zero-rated resource references in the web page to form the zero-rating transformed web page. Other embodiments are described and claimed.

Techniques for zero rating through web reconstruction

A system and method may handle the supervision of the connectivity of a virtual private network (VPN) of a mobile device that is configured to connect through a plurality of network interfaces. A server may configure the mobile device to send a request for data item. The server may track the response of the mobile device to the request. According to one embodiment, the VPN may not be connected through a preferred network interface, while such interface is available. In such case, the data item may be routed through the preferred network and therefore not received by the VPN server within a predetermined period of time. According to another embodiment, the server may identify an internal IP address of the data item. The server may be configured to determine the current network interface based on the internal IP address. The server may disconnect the VPN to permit the VPN to reconnect through the preferred network interface.

System and method for establishing a virtual private network of a mobile device through a preferred network

A proxy server and a method for determining a mobile application download attribution are provided. The method includes identifying an application downloaded from an application repository to a mobile device; analyzing previously logged requests sent from the mobile device to identify a most recent request directed to the application repository from the mobile device; analyzing the identified most recent request to detect a source that causes the application download and at least one identifier of the application; determining the download attribution respective of the source that causes the application download; and generating an application metadata respective of the download attribution and the application identifiers. This is subject to a user's privacy, opt-in, or opt-out settings.

Growing community of inventors

Tel Aviv, Israel

Lior Tubi