IP Library Granted Patent US 10,686,606
Granted Patent B2
US 10,686,606 · App. 15/432,498 · Granted Jun 16, 2020

Header enhancement

Inventor: Israel Tsadok (Hoshaya, IL)
Assignee: Facebook, Inc.
H04L9/3247G06Q10/10G06Q30/0207G06Q30/0241G06Q30/0271G06Q30/06G06Q50/01H04L51/32H04L63/0428H04L67/02H04L67/2814H04L67/2804H04L69/22H04L2209/60
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,686,606
App. No.
15/432,498
Granted
Jun 16, 2020
Kind
B2
Abstract

In one embodiment, a method includes receiving a first encrypted request from a client device. The request includes a request for access to a resource corresponding to a first uniform resource locator (URL). The method also includes routing the first encrypted request to the first URL; and sending a first response to the client device from the first URL. The first response includes a redirection instruction to a second URL, and the second URL is an unsecured URL. The method also includes intercepting an unencrypted request from the client device. The unencrypted request includes a request to access a resource corresponding to the second URL. The method also includes sending a modified version of the unencrypted request to the resource corresponding to the second URL. The modified version of the unencrypted request includes information identifying the client device.

Claims (55)

1. A method comprising:

by a computing device, receiving a first encrypted request from a client device, wherein the request comprises a request for access to a resource corresponding to a first uniform resource locator (URL);

by the computing device, routing the first encrypted request to the first URL;

by the computing device, sending a first response to the client device from the first URL, wherein the first response comprises a redirection instruction to a second URL, and wherein the second URL is an unsecured URL;

by the computing device, intercepting an unencrypted request from the client device, wherein the unencrypted request comprises a request to access a resource corresponding to the second URL;

by the computing device, sending a modified version of the unencrypted request to the resource corresponding to the second URL, wherein the modified version of the unencrypted request comprises information identifying the client device;

by the computing device, sending a second response comprising a redirection instruction to the first URL to the client device from the second URL, wherein the second response is received from the second URL in response to the resource corresponding to the second URL matching the information identifying the client device of the modified version of the unencrypted request to stored information identifying a plurality of previously authenticated client devices; and

by the computing device, routing the second encrypted request to the first URL from the client device in response to receiving the second response.

2. The method of claim 1 , further comprising:

receiving content from the resource corresponding to the first URL in response to the identifying information matching identifying information previously stored on the resource corresponding to the first URL; and

sending the content to the client device.

3. The method of claim 1 , wherein sending the modified version of the unencrypted request further comprises:

parsing a header of the unencrypted request; and

modifying the header with the information identifying the client device.

4. The method of claim 3 , further comprising digitally signing the modified version of the encrypted request.

5. The method of claim 1 , wherein the information identifying the client device comprises a media access control (MAC) address, user identifier, telephone number, email address, or token.

6. The method of claim 1 , wherein the redirection instruction to a second URL comprises a 302 redirect instruction.

7. The method of claim 1 , wherein the first or the second URL is associated with a social-networking system.

8. The method of claim 1 , wherein the computing device is associated with a social-networking system.

9. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

receive a first encrypted request from a client device, wherein the request comprises a request for access to a resource corresponding to a first uniform resource locator (URL);

route the first encrypted request to the first URL;

send a first response to the client device from the first URL, wherein the first response comprises a redirection instruction to a second URL, and wherein the second URL is an unsecured URL;

intercept an unencrypted request from the client device, wherein the unencrypted request comprises a request to access a resource corresponding to the second URL;

send a modified version of the unencrypted request to the resource corresponding to the second URL, wherein the modified version of the unencrypted request comprises information identifying the client device;

send a second response comprising a redirection instruction to the first URL to the client device from the second URL, wherein the second response is received from the second URL in response to the resource corresponding to the second URL matching the information identifying the client device of the modified version of the unencrypted request to stored information identifying a plurality of previously authenticated client devices; and

route the second encrypted request to the first URL from the client device in response to receiving the second response.

10. The media of claim 9 , wherein the software is further operable to:

receive content from the resource corresponding to the first URL in response to the identifying information matching identifying information previously stored on the resource corresponding to the first URL; and

send the content to the client device.

11. The media of claim 9 , wherein the software is further operable to:

parse a header of the unencrypted request; and

modify the header with the information identifying the client device.

12. The media of claim 11 , wherein the software is further operable to digitally sign the modified version of the encrypted request.

13. The media of claim 9 , wherein the information identifying the client device comprises a media access control (MAC) address, user identifier, telephone number, email address, or token.

14. The media of claim 9 , wherein the redirection instruction to a second URL comprises a 302 redirect instruction.

15. The media of claim 9 , wherein the first or the second URL is associated with a social-networking system.

16. The media of claim 9 , wherein the computing device is associated with a social-networking system.

17. A system comprising:

one or more processors; and

a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to:

receive a first encrypted request from a client device, wherein the request comprises a request for access to a resource corresponding to a first uniform resource locator (URL);

route the first encrypted request to the first URL;

send a first response to the client device from the first URL, wherein the first response comprises a redirection instruction to a second URL, and wherein the second URL is an unsecured URL;

intercept an unencrypted request from the client device, wherein the unencrypted request comprises a request to access a resource corresponding to the second URL;

send a modified version of the unencrypted request to the resource corresponding to the second URL, wherein the modified version of the unencrypted request comprises information identifying the client device;

send a second response comprising a redirection instruction to the first URL to the client device from the second URL, wherein the second response is received from the second URL in response to the resource corresponding to the second URL matching the information identifying the client device of the modified version of the unencrypted request to stored information identifying a plurality of previously authenticated client devices; and

route the second encrypted request to the first URL from the client device in response to receiving the second response.

18. The system of claim 17 , wherein the processors are further operable to:

receive content from the resource corresponding to the first URL in response to the identifying information matching identifying information previously stored on the resource corresponding to the first URL; and

send the content to the client device.

19. The system of claim 17 , wherein the processors are further operable to:

parse a header of the unencrypted request; and

modify the header with the information identifying the client device.

20. The system of claim 17 , wherein the processors are further operable to digitally sign the modified version of the encrypted request.

Assignments (2)
CHANGE OF NAME Recorded Dec 20, 2021
From: FACEBOOK, INC.
To: META PLATFORMS, INC.
Reel/Frame 058553/0802 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 9, 2017
From: TSADOK, ISRAEL
To: FACEBOOK, INC.
Reel/Frame 041526/0127 →
Continuity (1)
Related Publication 20180234508A1 · Aug 16, 2018