Network-based authentication for third party content
A system may be configured to allow for network-based authentication of a user device, which may reduce or eliminate the need for a user to provide credentials. The authentication may be performed when the user device attempts to access content provided by a third party content provider. The network-based authentication may be performed by, or in conjunction with, a device that (a) is associated with the same telecommunications network as the user device, and (b) can authenticate the identity of the user device.
1. A computing device, comprising:
a memory device storing a set of processor-executable instructions; and
one or more processors configured to execute the processor-executable instructions, wherein executing the processor-executable instructions causes the one or more processors to:
receive a first request to authenticate a user device, the first request including an identifier indicating that the user device has been authenticated by another device that is associated with a same communications network as the user device,
the first request being associated with a first authentication process;
provide a signature, associated with the computing device, to the user device based on receiving the identifier indicating that the user device has been authenticated by the other device that is associated with the same communications network as the user device;
receive, from a content provider, and subsequent to the first authentication process, a second request to authenticate the user device,
the second request including the signature associated with the computing device,
wherein the signature, included in the second request, was previously provided to the user device by the computing device as part of the previous first authentication process;
authenticate, based on the second request, the user device,
the authenticating, based on the second request, being performed without requesting credentials from a user of the user device,
the authenticating, based on the second request, including verifying the signature using a key associated with the computing device; and
notify the content provider that the user device has been authenticated.
2. The computing device of claim 1 , wherein the second request further includes a request for identity information regarding the user device, wherein executing the processor-executable instructions further causes the one or more processors to:
identify a profile associated with the user device; and
output, to the content provider and based on the request for identity information, information associated with the identified profile.
3. The computing device of claim 1 , wherein executing the processor-executable instructions further causes the one or more processors to:
identify a timestamp in the second request; and
determine, based on the timestamp, that the second request has been received within a threshold amount of time since the signature was provided to the user device,
wherein the authenticating, according to the second authentication process, is further based on the determination that the second request has been received within a threshold amount of time since the signature was provided to the user device.
4. The computing device of claim 1 , wherein executing the processor-executable instructions further causes the one or more processors to:
receive a third request to authenticate the user device;
identify a timestamp in the third request;
determine, based on the timestamp, that the third request has not been received within a threshold amount of time since the signature was provided to the user device; and
determine, based on the determination that the third request has not been received within a threshold amount of time since the signature was provided to the user device, that the user device should not be authenticated based on the third request.
5. The computing device of claim 1 , wherein the second request is received from the content provider after the content provider validates the signature using a public key associated with the computing device.
6. The computing device of claim 1 , wherein the identifier is based on a mobile directory number (“MDN”) of the user device.
7. The computing device of claim 6 , wherein the identifier is generated by the other device based on the MDN and a pre-shared symmetric key.
8. A method, comprising:
receiving, by a computing device, a first request to authenticate a user device, the first request including an identifier indicating that the user device has been authenticated by another device that is associated with a same communications network as the user device,
the first request being associated with a first authentication process;
providing, by the computing device, a signature, associated with the computing device, to the user device based on receiving the identifier indicating that the user device has been authenticated by the other device that is associated with the same communications network as the user device;
receiving, by the computing device and from a content provider, subsequent to the first authentication process, a request to authenticate the user device,
the second request including the signature associated with the computing device,
wherein the signature, included in the second request, was previously provided to the user device by the computing device as part of the previous first authentication process;
authenticating, by the computing device and based on the second request, the user device,
the authenticating, based on the second request, being performed without requesting credentials from a user of the user device,
the authenticating, based on the second request, including verifying the signature using a key associated with the computing device; and
notifying, by computing device, the content provider that the user device has been authenticated.
9. The method of claim 8 , wherein the second request further includes a request for identity information regarding the user device, the method further including:
identifying a profile associated with the user device; and
outputting, to the content provider and based on the request for identity information, information associated with the identified profile.
10. The method of claim 8 , further comprising:
identifying a timestamp in the second request; and
determining, based on the timestamp, that the second request has been received within a threshold amount of time since the signature was provided to the user device,
wherein the authenticating, according to the second authentication process, is further based on the determination that the second request has been received within a threshold amount of time since the signature was provided to the user device.
11. The method of claim 8 , further comprising:
receiving a third request to authenticate the user device;
identifying a timestamp in the third request;
determining, based on the timestamp, that the third request has not been received within a threshold amount of time since the signature was provided to the user device; and
determining, based on the determination that the third request has not been received within a threshold amount of time since the signature was provided to the user device, that the user device should not be authenticated based on the third request.
12. The method of claim 8 , wherein the second request is received from the content provider after the content provider validates the signature using a public key associated with the computing device.
13. The method of claim 8 , wherein the identifier is based on a mobile directory number (“MDN”) of the user device.
14. The method of claim 13 , wherein the identifier is generated by the other device based on the MDN and a pre-shared symmetric key.
15. A non-transitory computer-readable medium, storing a set of processor-executable instructions, which, when executed by one or more processors of a computing device, cause the one or more processors to:
receive a first request to authenticate a user device, the first request including an identifier indicating that the user device has been authenticated by another device that is associated with a same communications network as the user device,
the first request being associated with a first authentication process;
provide a signature, associated with the computing device, to the user device based on receiving the identifier indicating that the user device has been authenticated by the other device that is associated with the same communications network as the user device;
receive, from a content provider, and subsequent to the first authentication process, a second request to authenticate the user device,
the second request including the signature associated with the computing device,
wherein the signature, included in the second request, was previously provided to the user device by the computing device as part of the previous first authentication process;
authenticate, based on the request, the user device,
the authenticating being performed without requesting credentials from a user of the user device,
the authenticating including verifying the signature using a key associated with the computing device; and
notify the content provider that the user device has been authenticated.
16. The non-transitory computer-readable medium of claim 15 , wherein the second request further includes a request for identity information regarding the user device, wherein the set of processor-executable instructions further includes processor-executable instructions to:
identify a profile associated with the user device; and
output, to the content provider and based on the request for identity information, information associated with the identified profile.
17. The non-transitory computer-readable medium of claim 15 , wherein the set of processor-executable instructions further includes processor-executable instructions to:
identify a timestamp in the second request; and
determine, based on the timestamp, that the second request has been received within a threshold amount of time since the signature was provided to the user device,
wherein the authenticating is further based on the determination that the second request has been received within a threshold amount of time since the signature was provided to the user device.
18. The non-transitory computer-readable medium of claim 15 , wherein the processor-executable instructions, to receive the second request, include processor-executable instructions to receive the second request from the content provider after the content provider validates the signature using a public key associated with the computing device.
19. The non-transitory computer-readable medium of claim 15 , wherein the set of processor-executable instructions further includes processor-executable instructions to:
receive a third request to authenticate the user device;
identify a timestamp in the third request;
determine, based on the timestamp, that the third request has not been received within a threshold amount of time since the signature was provided to the user device; and
determine, based on the determination that the third request has not been received within a threshold amount of time since the signature was provided to the user device, that the user device should not be authenticated based on the third request.
20. The non-transitory computer-readable medium of claim 15 , wherein the identifier is generated by the other device based on a mobile directory number (“MDN”) of the user device and a pre-shared symmetric key.