Providing single sign-on for wireless devices

1. A method comprising:

intercepting, at a gateway device, a first packet from an originating device, the first packet including a request for a uniform resource locator;

determining whether the originating device is a wireless device that is authenticated with the gateway device;

if the originating device is a wireless device that is not authenticated with the gateway device, sending a second packet to the originating device, the second packet including a uniform resource locator redirection command to cause a browser on the originating device to launch an authentication application for authenticating the originating device;

receiving from the originating device, user-specific credential information produced by the authentication application; and

forwarding one or more additional packets from the originating device based on a successful authentication of the user-specific credential information.

2. The method of claim 1 , comprising:

marking a network address of the originating device as being in an authenticated state based on a successful authentication of the user-specific credential information.

3. The method of claim 2 , comprising:

receiving, from the originating device, a heartbeat message generated by the authentication application; and

maintaining the authenticated state based on the heartbeat message.

4. The method of claim 3 , wherein the network address is a first network address, and wherein the method comprises:

determining whether the heartbeat message indicates a second, different network address for the originating device, wherein the heartbeat message includes information associated with the user-specific credential information; and

marking the second network address as being in the authenticated state.

5. The method of claim 1 , wherein the determining comprises determining whether the originating device is a wireless device by accessing a user agent field of the request, and determining whether the user agent field indicates a wireless device category type.

6. The method of claim 1 , wherein the determining comprises determining whether the originating device is a wireless device by determining whether a source network address of the first packet is a member of an address group assigned to a wireless local area network.

7. The method of claim 1 , wherein the uniform resource locator redirection command redirects the browser to a website for downloading the authentication application if the authentication application has not been previously installed on the originating device.

8. The method of claim 1 , wherein the authentication application is configured to operate in a background state on the originating device and to provide heartbeat messages to the gateway device.

9. The method of claim 1 , wherein the authentication application is configured to cache the user-specific credential information and to automatically provide the user-specific credential information in response to a subsequent uniform resource locator redirection command.

10. The method of claim 1 , wherein the user-specific credential information includes a username and a passphrase.

11. A system comprising:

a gateway device configured to (i) intercept a first packet from an originating device, the first packet including a request for a uniform resource locator, (ii) determine whether the originating device is a wireless device that is authenticated with the gateway device, and (iii) if the originating device is a wireless device that is not authenticated with the gateway device, send a second packet to the originating device, the second packet including a uniform resource locator redirection command to cause a browser on the originating device to launch an authentication application for authenticating the originating device; and

an authenticator communicatively coupled with the gateway device, configured to (i) receive user-specific credential information produced by the authentication application, (ii) perform an authentication of the originating device based on the user-specific credential information, and (iii) cause the gateway device to forward one or more additional packets from the originating device based on the authentication being successful.

12. The system of claim 11 , wherein the gateway device is configured to mark a network address of the originating device as being in an authenticated state based on the authentication being successful.

13. The system of claim 12 , wherein the gateway device is configured to:

receive, from the originating device, a heartbeat message generated by the authentication application, and

maintain the authenticated state based on the heartbeat message.

14. The system of claim 13 , wherein the network address is a first network address, and wherein the gateway device is configured to:

determine whether the heartbeat message indicates a second, different network address for the originating device, wherein the heartbeat message includes information associated with the user-specific credential information, and

mark the second network address as being in the authenticated state.

15. The system of claim 11 , wherein the gateway device is configured to:

access a user agent field of the request, and

determine whether the user agent field indicates a wireless device category type.

16. The system of claim 11 , wherein the gateway device is configured to determine whether a source network address of the first packet is a member of an address group assigned to a wireless local area network.

17. The system of claim 11 , wherein the uniform resource locator redirection command redirects the browser to a website for downloading the authentication application if the authentication application has not been previously installed on the originating device.

18. The system of claim 11 , wherein the authentication application is configured to operate in a background state on the originating device and to provide heartbeat messages to the gateway device.

19. The system of claim 11 , wherein the authentication application is configured to cache the user-specific credential information and to automatically provide the user-specific credential information in response to a subsequent uniform resource locator redirection command.

20. The system of claim 11 , wherein the user-specific credential information includes a username and a passphrase.

21. The system of claim 11 , comprising:

a server configured to provide the authentication application.

22. A system comprising:

a gateway device configured to (i) intercept a first packet from an originating device, the first packet including a request for a uniform resource locator, (ii) determine whether the originating device is a personally-owned device that is authenticated with the gateway device, (iii) if the originating device is a personally-owned device that is not authenticated with the gateway device, send a second packet to the originating device, the second packet including a uniform resource locator redirection command to cause a browser on the originating device to launch an authentication application for authenticating the originating device, and (iv) receive user-specific credential information produced by the authentication application; and

circuitry configured to forward one or more additional packets from the originating device based on a successful authentication of the user-specific credential information.

23. The system of claim 22 , wherein the first packet includes a source network address, and wherein the gateway device is configured to determine whether the source network address is a member of an address group assigned to a subnet associated with personally-owned devices.

24. The system of claim 22 , wherein the uniform resource locator redirection command redirects the browser to a website for downloading the authentication application if the authentication application has not been previously installed on the originating device.

25. The system of claim 22 , wherein the gateway device comprises the circuitry configured to forward.