Verizon Patent and Licensing Inc.

Verizon Laboratories Inc.

Other

Nokia Corporation

Gte Laboratories Incorporated

Raymond C Counterman

Guanqun Bao

Jae Won Chung

Brian Libonate

Gaurav Gupta

Hong Xiao

Susan Kelly

Rangamani Sundar

Okeno R Palmer

Manian Krishnamoorthy

Fengping Zhang

Damascene M Joachimpillai

Avinash S Chugh

Mark S Richardson

A device may receive an encrypted authorization request token from a mobile device. The encrypted authorization request token may be based on at least one parameter and may have been created by a third party device. The device may decrypt the encrypted authorization request token to obtain the at least one parameter. The device may determine, based on an address for the mobile device, a mobile device identifier for the mobile device. The device may create an identification token for the mobile device. The identification token may be based on the mobile device identifier and the at least one parameter. The device may send the identification token to at least one of the mobile device or the third party device to permit the third party device to authenticate the mobile device.

Authenticating mobile devices

A method, a system, and a non-transitory storage medium provide an IP address and port-based identity service in which an anchor node of a wireless network stores identity information pertaining to a user of a mobile device in a centralized database. An authenticated and authorized web server may query the centralized database using the IP address or the IP address and port of an end device connected to the web server. The web server may obtain identity information pertaining to the user, such as a mobile telephone number.

Internet protocol address and port-based identity service

A user device may request access to a service provided by an application server. The application server may request that an identity server authenticate the user device. The identity server may have a network authentication system assist with the authentication of the user device. Once authenticated by the network authentication system, the application server may be informed and may grant the user device access to the requested service. Additionally, the identity server may help determine whether the user device is a security threat by comparing user information from the network authentication system with user information from the application server. Additionally, the network authentication system may provide the application server with user information to enable the application server to automatically register the user device for a particular service.

Network-based authentication and security services

An exemplary method includes a subsidized access management system detecting a request provided by an access device associated with a user to access network content by way of a secure connection within a network provided by a network service provider, the network content associated with a content provider and maintained by a content provider system, determining that a data usage charge for access by the user to the network content by way of the secure connection within the network is subsidized by the content provider in accordance with a subsidized access arrangement between the content provider and the network service provider, and providing the user with subsidized access to the network content by way of the secure connection within the network in accordance with a rule set associated with the subsidized access arrangement. Corresponding methods and systems are also disclosed.

Methods and systems for providing subsidized access to network content by way of a secure connection

A system may be configured to allow for network-based authentication of a user device, which may reduce or eliminate the need for a user to provide credentials. The authentication may be performed when the user device attempts to access content provided by a third party content provider. The network-based authentication may be performed by, or in conjunction with, a device that (a) is associated with the same telecommunications network as the user device, and (b) can authenticate the identity of the user device.

Network-based authentication for third party content

Techniques described herein may be used to enable users to access services protected by two-factor security systems without having to provide additional authentication information (e.g., a portion of the user's social security number, biometric information, etc.). An application server may provide one or more services, such as a social networking service, an online banking service, etc. When a user device attempts to access the service, the user may provide a username and password, to the application server, as the first factor of a two-factor authentication process required to access the service. However, instead of requiring the user to provide additional authentication information (e.g., the second factor), a network authentication server, the application server, and the user device may collaborate to automatically provide the additional authentication information.

Network-based frictionless two-factor authentication service

A device may receive a request from a mobile device. The device may determine a port identifier for a port of the device. The port may correspond to whether the mobile device used a secure communication path to send the request. The device may determine a mobile device identifier for the mobile device. The device may add the mobile device identifier and the port identifier to the request. The device may send the request to an application device after adding the mobile device identifier and the port identifier to the request. The port identifier may be added to the request to enable the application device to determine whether the request was sent, by the mobile device, over the secure communication path.

Differentiating authorization requests for security requirements

A system may receive a network address to be validated to determine whether the network address is associated with a toll-free data service. The system may perform a validation operation to validate that the network address is associated with the toll-free data service. The validation operation may be based on a key identifier associated with the network address or a network address signature associated with the network address. The key identifier may correspond to a security key used to create the network address signature. The network address signature may be created using the security key. The system may determine whether to bill a first party or a second party for data usage associated with the toll-free data service based on the validation operation. The system may provide information that identifies whether to bill the first party or the second party for the data usage associated with the toll-free data service.

Key management system for toll-free data service

A first server device may receive, from a user device, a request to authenticate the user device for a first service using authentication credentials for a second service that is different than the first service; provide the authentication credentials to a second server device that provides the second service; receive from the second server device, and when the authentication credentials are valid for the second service, user information relating to a user of the user device; and provide, to the user device, an authentication response, associated with the user information, that provides authentication of the user device for the first service.

Credential linking across multiple services

An approach for registration an application instance is provided. A registration request including credential information related to a user, a device and an instance of an application resident on the device is generated. The registration request is transmitted over a network to a registration platform. A unique identifier that is encrypted, in response to registration of the application instance is received from the registration platform. This unique identifier is used to securely authenticate communication with the application instance.

Method and system for providing registration of an application instance

A device may receive a request for analytics information associated with a user device. The device may retrieve application programming interface (API) information associated with the request for analytics information. The API information may include information associated with providing an authorization token and with providing user device information. The device may determine demographic information based on the request for analytics information. The demographic information may be associated with a user of the user device. The device may determine the analytics information based on an analysis of the API information and the demographic information. The device may provide the analytics information.

Collection and analysis of customer data from application programming interface usage

A network device is configured to receive a request, from a device, for private information associated with a user of a user device, on behalf of another user device. The network device may authenticate the device, the user device, and the other user device. The network device may request and receive the user's authorization to send the private information to the other user device. The network device may generate and send a token used to request the private information. The network device may receive the token from the device, determine that the token is valid, and send the private information.

Growing community of inventors

Canton, MA, United States of America

Raymond C Counterman