RU2765263C1 - Method for designating a mobile device, a designation system for implementing this method and a machine-readable medium for implementing this method - Google Patents

Abstract

FIELD: wireless communication.

SUBSTANCE: invention relates to the field of wireless communication, namely to the designation of a mobile device when connected to a local wireless network. To do this, the device displays a visual image containing the mobile application identifier or an associated identifier that is read using the visual image reading subsystem and sent to the authorization subsystem; in accordance with the application identifier, a request is sent to the mobile device via the application to connect the mobile device to a local wireless network; in case of consent to the connection, the mobile device connects to a local wireless network; the local wireless subsystem receives from the mobile device a group of network packets containing the application identifier or the associated identifier and the identifier of the network layer device directed to the address of the identification resource, the local wireless subsystem determines the hardware network identifier of the device by the identifier of the network layer device; the local wireless subsystem sends to the authorization subsystem the network layer device identifier or associated identifier connected with each other and the hardware network device identifier or associated identifier; the local wireless subsystem transmits to the authorization subsystem at least part of the network packet group received from the mobile device containing the application identifier or associated identifier; the authorization subsystem, based on the network layer device identifier and/or its associated identifier, associates the application identifier or its associated identifier and the hardware network identifier of the device or its associated identifier; the designation system stores the associated application identifier or its associated identifier and the hardware network identifier of the device or its associated identifier.

EFFECT: elimination of the risk of leakage of personal data of the user of the mobile device, as well as insensitivity to periodic changes in the hardware network identifier of the device by maintaining a permanent application identifier or an associated identifier.

4 cl

Description

FIELD OF TECHNOLOGY TO WHICH THE INVENTION RELATES

The present invention relates to wireless communication systems (in particular, radio communication), more specifically, the invention relates to methods for designating a mobile device connected to a local wireless network (eg, wi-fi network).

BACKGROUND OF THE INVENTION

From patent publication RU 2557005 C1 (published on 07/20/2015) a method for designating a mobile device (wireless communication device) is known, aimed at providing the possibility of identifying devices with reference to the location of the device in local areas. To do this, in accordance with a known method, a network packet containing a device identifier is received, the device identifier is determined, and it is checked whether the device identifier is contained in the database. If the database does not contain the device ID, the installed application is launched, which, through the device, sends a registration request to the system, during which the device ID and the application ID associated with it are entered into the database. If the device identifier is contained in the database, the application identifier is retrieved from the database, serving as the address for sending push notifications corresponding to this device.

In accordance with the requirements of the legislation of many states, in order for mobile devices to access local wireless (wi-fi) networks, it is necessary to perform user identification. The method in accordance with the publication RU 2557005 C1 is one of the methods that facilitate the simplification of such identification: when using this method, the user does not need to enter his personal data every time he connects to the network - identification can take place on the basis of obtaining and comparing other user identifiers and/or device, as well as based on the user profile formed on the basis of such identifiers.

The disadvantage of the known method is the complexity for the user. The complexity is due to the number and complexity of actions that the user of the mobile device must perform: the need to first select a network from the available ones, find and enter the network access key, and then launch the application. In practice, in the case of applying the known method, the user of the mobile device has to be instructed in detail about what actions must be taken to successfully access the network or implement other functions (for example, performing actions within the framework of a customer loyalty program). The need for such instruction and the application of such instructions by the user significantly reduces the usability of the method and hence the number of users who go through the designation procedure.

The known solution was adopted as the closest analogue (prototype) of the present invention.

DISCLOSURE OF THE INVENTION

The developers of the present invention were faced with the task of simplifying the implementation of a method for designating a mobile device for a user. That is, the task was to create a way to designate a user's mobile device, suitable for user registration and / or mobile device (including registration when connected to a Wi-Fi network), with which it would be easier for the user to interact. In addition, the developers of the present technical solutions were faced with the task of creating a method, the application of which would require a minimum number of permissions granted to the application installed on the mobile device and used to implement the designation method.

By solving these problems, it is expected to increase the proportion of users who complete the process of designating a mobile device in a local wireless network, that is, to increase the conversion.

In the first aspect of the present invention, the objectives were solved by providing a method

mobile device designations,

located in the coverage area of the local wireless network;

containing a display;

containing an installed client part of the application, which is configured to be directed from the mobile device to the address of the identification resource of a group of network packets containing an application identifier or an identifier associated with it;

as well as containing instructions for causing the device to display a visual image containing a mobile application identifier or an identifier associated with it;

wherein the method is performed using a notation system, including a local wireless communication subsystem, an authorization subsystem, and a visual pattern reading subsystem, the authorization subsystem including an identification resource configured to receive data directed to the address of the identification resource;

the method differs in that

The method includes steps in which

if the visual image reader subsystem reads from the display of the mobile device a visual image containing an application identifier or an identifier associated with it, the visual image reader subsystem sends the application identifier or an associated identifier to the authorization subsystem;

in accordance with the application ID, a request is sent to the mobile device through the application to connect to the local wireless network;

in case of consent to the connection, the mobile device connects to the local wireless network;

the local wireless communication subsystem receives from the mobile device a group of network packets containing an application identifier or an associated identifier and a network layer device identifier directed to an identification resource address,

the local wireless communication subsystem determines the device's hardware network identifier by the network layer device ID;

the local wireless communication subsystem forwards to the authorization subsystem the network layer device identifier or associated identifier associated with each other and the hardware network device identifier or associated identifier;

the local wireless communication subsystem transmits to the authorization subsystem at least a part of the group of network packets received from the mobile device, containing the application identifier or an identifier associated with it;

the authorization subsystem, based on the network layer device identifier and/or associated identifier, associates an application identifier or associated identifier and a hardware network device identifier or associated identifier;

the naming system stores an associated application identifier or associated identifier and a hardware network device identifier or associated identifier.

The tasks in the second aspect of the present invention are solved by creating a system for designating a mobile device located in the coverage area of a local wireless network, including

subsystem of local wireless communication;

an authorization subsystem including an identification resource located at an address of the identification resource;

subsystem for reading visual images;

wherein the subsystem for reading visual images is configured to read the visual image containing the application identifier or the identifier associated with it from the display of the mobile device in the coverage area of the local wireless network and with the possibility of sending the application identifier or the identifier associated with it to the authorization subsystem;

the designation system is configured to send to the mobile device using the application in accordance with the received application identifier or associated identifier of the request to connect to the local wireless network;

the local wireless communication subsystem is configured to connect the mobile device to the local wireless network, as well as to receive one or more network packets from the device connected to the local wireless network to send them to the address of the identification resource;

the local wireless communication subsystem is configured to send to the authorization subsystem the network layer device identifier or associated identifier associated with each other and the hardware network device identifier or identifier associated with it;

the authorization subsystem is configured to receive from the local wireless communication subsystem at least a portion of the group of network packets received from the mobile device, directed to the address of the identification resource, containing an application identifier or an identifier associated with it;

the authorization subsystem is configured to associate an application identifier or associated identifier and a device hardware network identifier or associated identifier based on the network layer device identifier and/or associated identifier;

the naming system is configured to store the associated application identifier or associated identifier and the hardware network device identifier or associated identifier.

In the third aspect of the present invention, these tasks have been solved by creating a group of non-volatile computer-readable storage media containing machine-executable instructions that, when executed by a notation system, including a local wireless communication subsystem, an authorization subsystem, and a visual pattern reading subsystem, the authorization subsystem includes identification resource, configured to receive data directed to the address of the identification resource, cause the designation system to perform the steps of the method for designating a mobile device located in the coverage area of a local wireless network, in which

after reading by means of the subsystem for reading visual images from the display of the mobile device of the visual image containing the application identifier or the identifier associated with it, in accordance with the application identifier, a request is sent to the mobile device through the application to connect to the local wireless network;

in case of consent to the connection, the mobile device connects to the local wireless network;

the local wireless communication subsystem receives from the mobile device a group of network packets containing an application identifier or an associated identifier and a network layer device identifier directed to an identification resource address,

the local wireless communication subsystem determines the device's hardware network identifier by the network layer device ID;

the local wireless communication subsystem forwards to the authorization subsystem the network layer device identifier or associated identifier associated with each other and the hardware network device identifier or associated identifier;

the local wireless communication subsystem transmits to the authorization subsystem at least a part of the group of network packets received from the mobile device, containing the application identifier or an identifier associated with it;

the authorization subsystem, based on the network layer device identifier and/or associated identifier, associates an application identifier or associated identifier and a hardware network device identifier or associated identifier;

the naming system stores an associated application identifier or associated identifier and a hardware network device identifier or associated identifier.

IMPLEMENTATION OF THE INVENTION

The most obvious purpose of using this method is to interact with the buyer of goods or services within the loyalty system when the user of the mobile device visits a store or other institution. The user's mobile device contains a pre-installed mobile application, namely its client part. Such an application may have the function of authorizing the user in the loyalty system associated with this store. An application does not require additional permissions to display a visual image on the display of a mobile device that contains the identifier of this application or an identifier associated with it. Such a visual image can be a QR code, a barcode, a graphical display of an identifier, or any other visual image that can carry the specified data. The user of the mobile device is invited to provide this visual image for reading by means of reading visual images included in the subsystem for reading visual images. Such a tool can be a laser QR code reader, a photo camera or a video camera installed, for example, at the checkout, at the store's payment terminal or in another place. The subsystem for reading visual images after receiving a visual image can transmit the application identifier or an identifier associated with it both as part of the received visual image and in a pre-decrypted and/or encrypted form to the authorization subsystem.

At the same time, the application identifier and/or the identifier associated with it may be the identifier of the user of the mobile device in the loyalty program or the identifier associated with it.

Next, a request is sent to the mobile device (namely, to the instance of the client part of the application installed on it) using the application identifier or the identifier associated with it, to connect to the local wireless network. An application push identifier can be used as an application identifier, which allows a push notification to be directed to an application instance contained on a given device. At the same time, the application can offer the user (or mobile device, if automatic processing of a request to connect to the network) to use the functions of the loyalty system, connect to a local wireless network (Wi-fi).

Further steps are performed subject to obtaining consent to the connection. After consent is connected, the mobile device connects to the local wireless network. In the preferred embodiment, the connection is controlled by the application. The authorization subsystem may preliminarily send the data necessary for connecting to the local wireless network to the device by means of an application or in any other way.

It should be taken into account that when a device connects to a local wireless network (wi-fi network), the local wireless network subsystem receives the MAC address of the device, which is its hardware network identifier. Also, a temporary identifier (or periodically changed) can be used as a hardware network identifier. At the same time, the wireless communication subsystem assigns a network layer identifier (ip-address) to the device and stores the hardware network device identifier and the network layer device identifier corresponding to each other in a mapping table (ARP table). These actions performed by the local wireless communication subsystem are an integral part of the Wi-fi standard communication process and are immanently included in the stage at which the mobile device is connected to the local wireless network.

Subsequently, the mobile device controlled by the application, being connected to the local wireless network, sends a group of network packets to the identification resource, which is part of the authorization subsystem. A group may consist of at least one network packet. In this case, the group of network packets contains an application identifier (for example, suitable for sending Push notifications) or an identifier associated with it and a network layer device identifier (ip address). The presence in network packets of the device identifier of the network layer is due to the standard required set of metadata contained in the network packet.

Network packets initially enter the local wireless communication subsystem, which, after receiving them, has the ability to associate the received network identifier of the mobile device with each other and the application identifier or an identifier associated with it. The subsystem of the local wireless communication, receiving from the mobile device network packets directed to the address of the identification resource, sends to the authorization subsystem the associated network-level device identifier and the device hardware network identifier (based on the ARP table data). In this case, the wireless communication subsystem transmits at least a part of the group of network packets transmitted by the mobile device to the address of the identification resource, while this part contains the application identifier or the identifier associated with it and the identifier of the network layer device and/or the identifier associated with it.

Thus, the authorization subsystem receives two pairs of identifiers associated with each other:

- from the local wireless communication subsystem: network layer device identifier (for example, ip-address; or an identifier associated with it) and a hardware network device identifier (MAC address);

- from the mobile device via the local wireless communication subsystem and an identification resource: an application identifier (or an identifier associated with it) and a network layer device identifier (and/or an identifier associated with it).

These bundles have a common element - a network layer device identifier and/or an identifier associated with it. Due to this, the authorization subsystem is able to associate these pairs, storing at least the application identifier or associated identifier associated with each other and the device hardware network identifier or identifier associated with it (for example, a MAC address or a hashed MAC address).

The disclosed method allows, with a minimum number of permissions granted to an application on a mobile device, and as simply as possible for a user of a mobile device, to obtain a unique network device identifier that allows you to uniquely identify a mobile device, and an application identifier that allows you to uniquely identify an instance of the client part of the application installed on the device, and also identify the user himself in an impersonal form. At the same time, the method in most cases does not require long-term storage of the MAC address (hardware network identifier), which, on the one hand, does not endanger the personal data of the user of the mobile device, and on the other hand, allows the disclosed method to be used in relation to devices on which the value is periodically changed. hardware network ID. That is, the method is insensitive to periodic changes in the hardware network identifier of the device: by maintaining a constant application identifier or an identifier associated with it, the user profile can be supplemented by the resulting combinations of identifiers.

The possibilities of this method are revealed to a greater extent when one application is used for authorization in various establishments or networks of establishments. The method allows you to create one loyalty system that is as easy to use for consumers (users of mobile devices).

In the following, the invention will be described in more detail in these and other embodiments.

The method in accordance with the present invention is performed in relation to a mobile device located in the coverage area of a wireless local area network.

Under the area for the purposes of this description, it is necessary to understand the coverage area of a local wireless communication network operating, for example, according to the IEEE 802.11 or IEEE 802.15.1 standard or other wireless networks based on the IEEE 802.11 standard. In this case, the coverage can be carried out using one or more wireless communication modules. For the purposes of reduction in the present description, such networks will be called local wireless networks (or wi-fi networks), and the data transmission channels included in such a network - local wireless data channels (or wi-fi data transmission channel).

Under the mobile device in this application it is necessary to understand any wearable device, configured to receive and transmit data over local wireless data channels. In particular, the device may be configured to connect to a local wireless network (wi-fi). To do this, the device may include a network card having a hardware network device identifier (MAC address). In the most common case, such a device is a smartphone or other similar device. A mobile device on which the disclosed invention may be performed includes a display. Under the display in the present description should be understood as any node capable of displaying visual information. The main function of the display within the designation method is to display a visual image containing an application identifier or an identifier associated with it.

The mobile device in accordance with the present invention contains instructions for causing the mobile device to display a visual image containing a mobile application identifier or an identifier associated with it. Such instructions in the preferred embodiment of the invention are contained in the application, but in some embodiments, the implementation may be contained in other programs of the mobile device, and also transmitted to the mobile device for execution remotely, for example, through the application. The visual image can be any image generated by any information encoding method that allows, in a form suitable for subsequent optical reading, recognition and decoding, to present a block of information containing at least an application identifier or an identifier associated with it. In some embodiments, the implementation as a visual image can be used as a QR code, a barcode, a symbolic display of an identifier, or any other suitable types of visual images. The application identifier in the preferred embodiment of the invention is a unique identifier of the application (namely, its client part), which can be used by the application server part to interact with a specific instance of the application client part contained on the mobile device. In addition, the application identifier may enable notifications, such as push notifications, to be sent to the device by the application; that is, to be a push identifier, an address for sending push notifications.

In a preferred embodiment of the invention, the connection of a mobile device to a wireless local area network is triggered by an event that consists in the visual image subsystem reading from the display of the mobile device a visual image containing an application identifier or an associated identifier, after which the visual image reader subsystem sends an application identifier or associated with him the identifier of the authorization subsystem. The fact that this event occurs should indicate that the mobile device is in the coverage area of the local wireless network. To this end, the visualization subsystem can be designed in such a way that reading can be performed essentially only in the coverage area of the local wireless network.

Connecting a mobile device to a network can be accomplished by sending a request from an application to the operating system of the mobile device to connect to a local wireless network. In this case, the method may include the step of establishing the location of the mobile device in the coverage area of the local wireless network. At the same time, establishing the fact that the mobile device is in the coverage area of the local wireless network may be a condition for sending a request to connect the mobile device to the local wireless network, and in some embodiments, for sending data to the mobile device necessary to connect to the local wireless network.

The method according to the present invention comprises sending a request to the mobile device via the application to connect the mobile device to a wireless local area network in accordance with the application identifier.

Also, in some embodiments, the implementation of the method may include steps that provide the mobile device with the data necessary to connect to a wireless local area network. In the case when the local wireless network is closed, and a password is required to access it, such data may be an indication of the network identifier SSID, network access key, or any other data necessary to connect to a particular network. In some embodiments, the data necessary to connect a mobile device to a local wireless network can be transferred to it in advance, and also contained in the resources of the client part of the application.

In some embodiments of the invention, the data necessary to connect to the local network is provided on the mobile device by transmitting the local wireless network settings profile to the mobile device. The transmission of said profile may be performed by transmitting to the mobile device at least one configuration file containing wireless LAN settings profile data. The profile (as well as said at least one configuration file) may contain a certificate, a private key and other data necessary for authentication in a wi-fi network (for example, an SSL / TLS certificate or other authentication key), unique client identification and / or encryption transmitted data. Also, the profile (as well as said at least one configuration file) may contain the necessary settings for the local wireless network. In some embodiments of the invention, the profile may contain not only data of the local wireless network, but also data and/or identifiers of the mobile device and/or the user of the mobile device. The configuration file of the local wireless network settings profile can be both static and unique, for example, it can be generated in such a way that it contains the data of a mobile device or its user.

The transfer of the configuration file of the local wireless network settings profile to the mobile device can be performed by any known data transfer method using any known data transfer channels, including mobile communication channels or wi-fi. The profile configuration file can be uploaded to the device via a web interface, downloaded by an application, or installed by a local wireless network when a mobile device is connected to it, for example, through the Captive portal service page. In the case of transmission through the page of the Captive portal service, another wireless network may be used, through which the configuration file of the main local wireless network settings profile can be downloaded to the device. In this case, the configuration file can be, in some embodiments, transferred to the device in advance, when the device was not yet in the coverage area of the local wireless network.

Providing the data necessary to connect to a local wireless network on a mobile device in some embodiments of the invention can be performed by having this data in the client and / or server parts of the application and reporting this data to the operating system of the mobile device with a request to connect to the local wireless network. In other embodiments, the implementation of the data necessary for connecting to the network may be contained in a remote database, in the client part of the application, as well as in the data of the visual image (visual images) and / or label (labels). In these cases, the provision of data on a mobile device can be performed by reading this data by the device, including using an application, or by transmitting this data to a mobile device using any known communication channels.

In some embodiments of the invention, the method may include the step of automatically connecting the device to a local wireless network as a result of reading a visual image (QR code), an NFC tag using an application, or from any other information carrier readable by a mobile device. To do this, a QR code, NFC tag, or other information carrier readable by a mobile device may contain instructions that cause the device to connect to a local wireless network, as well as, in some embodiments, the data necessary to connect to said network. In some embodiments, the instructions and/or data for connecting to the network may be contained on the mobile device, in particular in the application data, or may be directed to the mobile device remotely. In such embodiments, the implementation of the disclosed method is further simplified for the user: the user does not need to enter any data of the local wireless network to connect to it, the method allows this data to be automatically provided on the mobile device and connected to the network. However, these options are not preferred as they require additional permissions for the application.

After reading the visual image, the visual image reading subsystem may transmit an application identifier or an associated identifier of any of the parts of the mobile device identification system. In the preferred embodiment, the application identifier or associated identifier is passed to the authorization subsystem. In this case, the transfer can be carried out through other parts of the system or another intermediary capable of redirecting data to the authorization subsystem. In particular, such an intermediary can serve as a subsystem of local wireless communication. After the authorization subsystem receives an application identifier or an associated identifier, the mobile device identification system sends a request to the mobile device to connect to the local wireless network. In a preferred embodiment, the request to connect to the local wireless network is transmitted by the authorization subsystem to the mobile device via the application, however, there are options when the said request is transmitted by the local wireless communication subsystem or the imaging subsystem.

In a preferred embodiment of the invention, the method comprises the steps of the visual image reader subsystem transmitting the application identifier to the authorization subsystem by any of the known methods of data transmission. To do this, the subsystem for reading visual images is configured to transmit data to the authorization subsystem and/or other parts of the mobile device identification system. This possibility can be provided due to the presence of at least one wired or wireless communication channel between the subsystem for reading visual patterns and/or other parts of the mobile device identification system. The possibility of data transfer can also be provided by connecting parts of the marking system to the Internet or other network.

In some cases and/or embodiments of the method, the connection of the mobile device to the local wireless network can be performed in advance both manually and automatically.

The method according to the present invention also includes the step of connecting the mobile device to the wireless local area network if the connection is accepted. Consent can be understood as any positive response to a request to connect to a local wireless network. Such a response to a request may be due to the user of the mobile device pressing some control on the mobile device (for example, a physical button or a GUI element in case the display of the mobile device is capable of receiving a touch action on it). The response to the request may also be an automatic response to the request, performed when the mobile device has permission for appropriate actions, including automatic connection to the local wireless network. A connection to a local wireless network should be understood as providing access to network resources sufficient to perform the subsequent steps of the method, in particular to send from a mobile device a group of network packets containing a network layer device identifier or an identifier associated with it and an application identifier or an identifier associated with it .

The method may also include the stage at which, after the visual image reading subsystem reads from the display of the mobile device a visual image containing an application identifier or an identifier associated with it, the data necessary for connecting the mobile device to a local wireless network is transmitted to the device. The data required to connect the device to the network can be the network name (SSID), login and password for accessing the network. user and/or device identification data. In preferred embodiments, at least some of this data is held on the device (eg, as part of resources available to the application) and, as such, no transmission is required. In other embodiments, said data may be transmitted to a mobile device via any known means of communication, for example, via an LTE network, via a Near Field Communications (NFC) network, by reading a visual image containing at least a portion of said data, or by any other means. .

The mobile device's transmission of a group of network packets may include directing the device to an identity network resource address. In a preferred embodiment of the invention, the mobile device, under the control of application instructions, generates a group of network packets for sending it to the address of the identification resource via a local wireless network, while the group of network packets includes an application identifier or an identifier associated with it. The network layer device ID is automatically included in the formed group of network packets when transmitting network packets through a local wireless network to enable targeted transmission of network packets in accordance with the network data transfer protocol.

Performing part of the steps of this method is possible only if the mobile device is in the coverage area of a local wireless network (for example, a Wi-fi network). Thus, it is expedient within the framework of the method to determine whether the user is within the range of the local wireless network, which is done when reading the visual image from the display of the mobile device. Such positioning can also be additionally performed in various ways, for example, via positioning (GPS) or using bluetooth tags, NFC tags or picture tags. However, such methods require obtaining additional permissions from the user of the mobile device, in other words, they complicate the implementation of the mobile device designation method. To eliminate this drawback and simplify the implementation of the method, the reader in the present invention is designed in such a way that it has the ability to read a visual image from the display of a mobile device located in the area of the Wi-Fi network. That is, it is preferable that the visual image reader is within the range of the wireless local area network. It is assumed that the use of this method will have one of the goals of registering and identifying the user of the mobile device in the loyalty system, while the application identifier or identifier associated with it can be associated with the user's profile in the loyalty system.

To implement the disclosed invention in its first aspect, a notation system can be used, including a local wireless communication subsystem, a visual image reading subsystem and an authorization subsystem, and the authorization subsystem includes an identification resource configured to receive data directed to the address of the identification resource. When it is necessary to understand that the address of the identification resource can be not only the address of the location of the identification resource. It can also be some address where the resource is located, redirecting data to the identification resource. In fact, the key to the disclosed technical solution is that the data directed to the identity resource address is received by the authorization subsystem, while the local wireless communication subsystem is configured to determine packets directed by it to the identity resource address.

The mobile device naming system in accordance with the present invention also includes a visual pattern reading subsystem. The subsystem for reading visual images contains any of the known means of reading visual information, for example, a laser or other barcode scanner, a laser or other QR code scanner, a photo or video camera, or otherwise. The visual image reader subsystem, in some embodiments, may comprise an information processing means configured to decode the visual image to extract the value of an application identifier or associated identifier contained in the visual image. In such an embodiment, the value of the device identifier or associated identifier, after retrieval, is passed to the authorization subsystem. In other embodiments, the implementation of the visual image reading subsystem may not contain such information processing means, made with the mentioned decryption capability, and the visual image containing the application identifier or an identifier associated with it, may be transmitted to the authorization subsystem, for example, in the form of its digitized image or in another form. In the latter embodiment, the application identifier or its associated identifier enters the authorization subsystem as part of displaying a visual image and is subsequently retrieved from the received image, for example, by means included in the authorization subsystem.

The disclosed method is intended to designate a mobile device located in the coverage area of a local wireless network, which can be used as a Wi-Fi network. The method comprises the steps of reading a visual image from the display of the mobile device using the visual image reading subsystem. The main requirement for the subsystem for reading visual images is that it can read a visual image from the display of a mobile device. That is, the means for reading visual information included in the subsystem for reading visual images must be located in such a way that it is possible to read the visual image from the display of a mobile device located in the local network coverage area. In a preferred embodiment of the invention, the visual information reader is itself substantially within the range of the wireless local area network.

The mobile device, in relation to which the designation method is carried out in accordance with the present invention, by the invention contains a pre-installed client part of the application, with the help of which the device designation function is performed. The application in its client part is configured to receive push notifications and has a unique application identifier (namely, its client part), in the preferred embodiment of the invention serving as an address for sending push notifications (for example, a token identifier).

Under the designation of a mobile device in the present description, it is necessary to understand the definition and association of the mentioned application identifier or an identifier associated with it with a unique device identifier, which in the present invention is a hardware network identifier (MAC address). Storing identifiers in association with a unique device identifier (hardware network identifier) further allows the formation of a mobile device user profile, supplementing it with new data associated with the specified hardware network identifier. In cases where the MAC address of a mobile device changes periodically, the association of multiple MAC addresses of the same mobile device may be performed by a common application identifier for them or an identifier associated with it.

Part of the steps of the disclosed method is performed when the mobile device sends a group of network packets containing an application identifier or an associated network layer device identifier directed to an identity resource address. In a preferred embodiment of the present invention, the method includes a step in which the application, through the mobile device, sends a group of network packets containing an application identifier or an associated network layer identifier and device identifier directed to an identity resource address. That is, instructions by which a device directs a group of network packets to an identity resource address may be provided by an application.

An application in accordance with the disclosed invention may be configured to send (transmit) to an identification resource address by a mobile device a group of network packets containing an application identifier or an identifier associated with it. The application may also be configured to store and/or preform said group of network packets. Network-addressed network packets always contain a network-layer device identifier (for example, an ip address) based on which network addressing is performed. A group of network packets transmitted from a mobile device may contain both a network layer device identifier and an identifier associated with it. In this case, the identifier of the network layer device in the transmitted packets is available for reading both in the local wireless communication subsystem and in the authorization subsystem.

For the purposes of this application, the expression "or an identifier associated with it" should be understood as designating an identifier that, in the mobile device identification system and/or during the implementation of the method in accordance with the present invention, is uniquely associated with the identifier defined by the specified expression: for example, with application ID, network layer device ID, or hardware network ID. An identifier associated with some identifier can be an identifier containing a sequence of values (characters) converted or encrypted according to a given algorithm or in accordance with a given function, which makes the associated identifier associated with the original identifier and allows the associated identifier to be used for purposes similar to the purposes for which the original identifier may be used. An identifier associated with an identifier may be generated and used for the purpose of storing data about the user or mobile device, for example, when transferring between subsystems or for storage purposes, the hardware network identifier or any other of the mentioned identifiers may be hashed.

In the event that at any step of the disclosed method, not a network layer device identifier per se, but some identifier associated with it is used, the method may further include the steps of performing

deciphering and/or restoring the association between the network layer device identifier and the identifier associated with the network layer device identifier; and/or

- decryption and/or recovery of the association between two different identifiers associated with the network layer device identifier.

The mobile device designation method according to the present invention includes the step of receiving from the mobile device a group of network packets containing an application identifier or an associated identifier and a network layer device identifier directed to an identification resource address by the local wireless communication subsystem. The reception of a group of network packets in the preferred embodiment of the invention is performed after the mobile device has been connected to the local wireless network. The network packet group may be stored and/or generated on the mobile device under the control of the application's instructions, it may be contained in a resource to which the application has access, or it may be generated in any other way. The formation and sending of a group of network packets is actually performed outside the designation system, for example, by a mobile device under the control of application instructions. The designation method is performed in relation to the mobile device from which the said group of network packets are received. In other words, in a preferred embodiment of the invention, the method is performed in the case of a mobile device transmitting (forwarding) to an identity resource address a group of network packets containing an application identifier or an associated identifier and a network layer device identifier.

For the purposes of this description, a group of network packets should be understood as one or more network packets. The specified group of network packets can be a message, a file or several files transmitted over the network. It can be generated by the application, sent to the application, or stored on resources available to the application, including in the memory of the mobile device.

A local wireless communication subsystem is a device or a group of devices, communication channels, and/or other set of software and/or hardware that enable the functioning of a local wireless network, as well as the ability to connect a mobile device to a local wireless network. At the same time, the local wireless communication subsystem is configured to transmit data with the authorization subsystem, as well as to redirect network packets to the address of the identification resource. Data transmission with the authorization system can be carried out through any known communication channels. Such a local wireless communication subsystem may include at least one local wireless network access module (for example, a wi-fi router), as well as nodes that provide the ability to perform the calculations necessary to perform the disclosed functions of the local wireless network subsystem, in particular: determination of network packets transmitted to the address of the identification resource, sending identifiers and network packets to the authorization subsystem. To perform these and other functions, the resources of a wi-fi router or any other suitable means of information processing can be used.

The method in accordance with the present invention includes the step of determining the hardware network device identifier from the network layer device ID by the local wireless communication subsystem. Such a determination may be made from a routing table inherent in the local wireless communications subsystem, such as an ARP table. Such a table may contain corresponding to each other hardware network identifier (MAC address) and network layer device identifier (ip address).

Also, the method according to the present invention comprises the step of the local wireless communication subsystem sending to the authorization subsystem the network layer device identifier or associated identifier associated with each other and the hardware network device identifier or associated identifier. Further, in the disclosed method, the network layer device identifier serves to associate the hardware network device identifier (or an identifier associated with it) and the application identifier (or an identifier associated with it) received by the authorization subsystem from the local wireless communication subsystem with each other, while the latter is contained in the group network packets transmitted from the device, and together with at least part of the group of network packets or separately from it is transmitted by the local wireless communication subsystem to the authorization subsystem.

The method in accordance with the present invention includes the step at which the local wireless communication subsystem transmits to the address of the identification resource at least a part of the group of network packets received from the mobile device. Moreover, it is assumed that at least part of the group of network packets transmitted contains an application identifier or an identifier associated with it. At the same time, any addressable network packet contains a network-level device identifier (for example, an ip-address). Due to this, the authorization subsystem is able to associate received at least part of the group of network packets and the hardware network identifier of the mobile device.

The hardware network identifier of the mobile device is a unique device identifier, which allows, using the disclosed method, to uniquely identify a mobile device and determine the corresponding application identifier, as well as to form a mobile device user profile based on the unique identifier of this device. In particular, the disclosed invention makes it possible to supplement the user profile with information about the application identifier, for example, a token-identifier used to send push notifications to the application on the device, and further carry out targeted interaction with the specified user through the mobile device, including when the mobile device is located. within the range of the local wireless network.

To complete the designation of a mobile device, a method in accordance with the disclosed invention includes the steps of an authorization subsystem, based on a network layer device identifier and/or associated identifier, associating an application identifier or associated identifier and a hardware network device identifier or associated the identifier, as well as the designation system, stores an associated application identifier or identifier associated with it and a device hardware network identifier or identifier associated with it. In a preferred embodiment of the invention, the step at which the storage of the associated application identifier (or an identifier associated with it) and a hardware network identifier (or an identifier associated with it) is performed by an authorization subsystem, configured to store these identifiers on some non-volatile storage medium, preferably in a database contained on the medium.

The association of the application ID and the hardware network ID or its associated ID may be performed by the authorization subsystem based on the matching of the above-described IDs received from the local wireless communication subsystem (network layer device ID associated with each other or associated identifier and hardware network device ID or associated with identifier), as well as based on at least part of the group of network packets that were sent from the mobile device through the local wireless communication subsystem to the identification resource included in the authorization subsystem. The association may be performed by matching the associated identifiers in the database, or by any other known method. Such a database may contain identifiers obtained during the implementation of the method, in the preferred embodiment, the authorization subsystem is configured to store information in the database and read information from the database.

Saving the application identifiers associated with each other (token application identifier for sending push messages or an identifier associated with it) and a hardware network identifier (MAC address of the device) and / or an identifier associated with it is performed by writing them to a readable storage medium (preferably permanent non-volatile storage device). Such preservation of identifiers associated with each other is the main purpose of the disclosed method of designating a mobile device. It allows you to register devices in a local wireless network much easier and faster for the user than using known designation methods, and at the same time provide the possibility of further targeted interaction with the user based on registration data; for example, in accordance with the method described in patent publication RU 2593748 C1 (published on August 10, 2016). The storage medium may be part of both the authorization subsystem and other parts of the designation system, in addition, in some embodiments, the implementation of the storage medium may be external to the designation system. The database mentioned above may be contained in such a storage medium.

In preferred embodiments of the invention, the method includes the step of using the application to automatically connect the mobile device to the local wireless network using the mobile application. Such automatic connection may additionally be triggered by some user or other party activity on, with, on or over the device, or other offline events. Thus, in some embodiments of the invention, the method may include the step of determining the location of the device using any of the known methods of positioning: for example, by determining GPS coordinates or by detecting any local wireless network at times when the mobile device is within the coverage area of such a network.

In some embodiments of the invention, the application is included in the mobile device identification system and more specifically in the authorization subsystem, however, embodiments are possible in which the application is not part of this system. Thus, in some embodiments, the application may contain the address of the identity resource and the instructions necessary to form a group of network packets and send it to the specified address of the identity resource. In an embodiment of the invention, when the application contains instructions and/or data (or they are contained on a storage medium to which the application and/or the administrator of such application has access) for connecting to a local wireless network, the application can function separately from the mobile device identification system. In these embodiments, the application is configured to generate a group of network packets containing the application identifier, as well as to direct such a group of network packets to the address of the identification resource. The network layer device ID is automatically included in the network packet group when the network packet group is sent over the network. At the same time, it is necessary to understand that the application, the client part of which is installed on the mobile device, is configured to send from the mobile device a group of network packets containing the application identifier or the associated identifier and the network layer device identifier, to the address of the identification resource; in other words, the application contains instructions by which the mobile device directs such a group of network packets to the address of the identity resource.

The method in accordance with the disclosed invention is carried out using a mobile device identification system, which includes a local wireless communication subsystem, a visual pattern reading subsystem, and an authorization subsystem. In turn, the authorization subsystem includes an identification resource located at the address of the identification resource. Under the address of the identification resource, it is necessary to understand the network address of the identification resource in any of the known forms (for example, URL or ip-address), when sending network packets to which they enter the authorization subsystem.

Under the identification resource it is necessary to understand the device(s), the carrier(s) of information and/or a piece of information in the network, to the address of which (which) the mobile device can send a group of network packets via a local wireless network. In this case, the authorization subsystem is configured to receive information sent from the mobile device to the address of the identification resource to the identification resource.

In accordance with the present invention, the local wireless communication subsystem is configured to receive from a device connected to the local wireless network at least a portion of a group of network packets to direct them to an identification resource address. This capability may be provided by the ability to communicate over a local wireless network between the mobile device, the local wireless communications subsystem, and the network through which the identity resource is available at the address of the identity resource (eg, the Internet).

The local wireless communication subsystem in accordance with the present invention is configured to send (transmit) to the authorization subsystem a network layer device identifier or associated identifier associated with each other and a hardware network device identifier or associated identifier. The very possibility of transmitting said data can be provided due to the presence of communication with the possibility of data transmission between the local wireless communication subsystem and the authorization subsystem. Such communication may be provided by a data-capable connection of the local wireless communication subsystem and the authorization subsystem to the Internet or other network. The ability of the device to determine the network layer device identifier and the associated hardware network device identifier is provided by generally accepted protocols and algorithms for addressing and transmitting data over the network, namely by determining the MAC address of the mobile device based on the corresponding ip address contained in the network packet , and ARP tables.

In addition, the local wireless communication subsystem is configured to connect the mobile device to the local wireless network. This possibility is provided by the presence of an open or closed radio channel available for the mobile device. In fact, this possibility can be provided due to the presence of at least one wi-fi access point in the local wireless communication subsystem. A Wi-Fi network can be either open or closed. In a preferred embodiment of the invention, the network is closed. Connectivity means that the mobile device has permissions to connect to the local wireless network, and technically can be provided with the data needed to access the local wireless network. In this case, in the case when the network is closed, access to network resources can be provided after the user performs the required actions for this (for example, entering a password, authentication key or other data).

In accordance with the disclosed invention, the authorization subsystem is configured to receive from the local wireless communication subsystem directed to the address of the identification resource at least a part of the group of network packets received from the mobile device, directed by it to the address of the identification resource, and said at least part of the group of network packets contains an application identifier or an identifier associated with it. The ability to receive network packets can be provided by connecting the authorization subsystem to a data network (for example, the Internet), and also due to the fact that the authorization subsystem administers the identification resource and/or is configured to receive information directed to the identification resource from the mobile device.

In accordance with the disclosed invention, the authorization subsystem is configured to associate an application identifier or associated identifier and a device hardware network identifier or associated identifier based on the network layer device identifier and/or associated identifier. This association capability can be realized by being able to determine the mobile device's IP address or associated identifier based on the data contained in the received network packets, and then match this IP address (network layer device identifier) or associated identifier with the device identifier. network layer or associated identifier received from the local wireless communication subsystem together with the hardware network device identifier or associated identifier. As a result, the authorization subsystem is able to associate, based on the device ID or associated ID, an application ID or associated ID from the received network packets and a device hardware network ID or associated ID.

In accordance with the present invention, the naming system is configured to store an associated application identifier or associated identifier and a hardware network device identifier or associated identifier. This possibility can be provided by providing the possibility of storing the specified data on any storage medium or several storage media, included or not included in the designation system. To this end, the designation system is configured to record data on said data carriers. The storage may be in some database where said identifiers may be associated with each other.

The designation in various embodiments can be performed both for registering a user on the network (for example, in order to comply with legal requirements for the procedure for providing access to local wireless networks), and for the purpose of collecting information about the user's activity of a mobile device in local wireless networks by forming a user profile , containing data about its actions associated with the device's hardware network identifier (or identifier associated with it) and/or application identifier (or identifier associated with it).

In comparison with the closest analogue (prototype) of the present invention, when using the disclosed method, the user is required to perform fewer actions to register in the local wireless network, for example, in order to gain access to it. An example is a local wireless network in a gas station. Gas station chains often have their own mobile applications, which at least partly provide a customer loyalty program. In the event that such an application is used as an application in accordance with the present invention, the user can only allow the visual image to be read from the display of the mobile device using the visual image reader, and, subject to the consent to connect to the local wireless network, will be performed designation of the mobile device in accordance with the disclosed method. The steps of the mobile device designation method after connecting it to the network can be performed automatically without the participation of the user of the mobile device. And, in the case of successful designation of the mobile device, it can also be provided with access to the local wireless network.

Systems and devices in accordance with the present invention in most embodiments of the invention include various computer-readable media. Also, the invention according to the third aspect is a computer-readable medium containing computer-executable instructions that, when executed by a system to identify a wireless communication device, cause it to perform the steps of a method for identifying a wireless communication device. It should be understood that such a medium can be represented as a group of physical media, and parts of the instructions corresponding to individual steps can be placed on a group of machine-readable media. Thus, the steps of the disclosed method, which, in accordance with the present description, are performed by certain parts of the mobile device naming system, may be contained on computer-readable media that are included in the corresponding part of this system. In some embodiments, the instructions corresponding to the individual steps of the method may be contained on storage media that are remote from the part of the system designed, among other things, to perform these steps of the method; in such embodiments, the instructions may be transmitted to the appropriate part of the system for execution using any means and methods of communication suitable for transmitting such instructions.

Computer readable media can be any suitable media that can be accessed by a system or device, and such media can include both volatile and nonvolatile media, removable and non-removable media. By way of example, and not limitation, a computer-readable medium may include computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology used to store information such as computer readable instructions, data structures, program modules, or other data. Computer storage media includes, but is not limited to, RAM (RAM), ROM (ROM), electrically erasable programmable ROM (EEPROM), flash memory or other memory technology, compact disc (CD-ROM), digital versatile disk ( DVD) or other optical disk storage devices, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the required information and that can be accessed by the system or device. Communication media typically embodies computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier signal or other transport mechanism, and includes any media for information delivery. The term "modulated data signal" means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not an exception, communication media includes wired media such as a wired network or direct-wired connection, as well as wireless media such as acoustic, RF, infrared, and other wireless media. The composition of computer-readable media should also include combinations of any of the above media (media).

The drives and associated computer storage media discussed above provide storage for computer readable instructions, data structures, program modules, and other data for the operation of systems in accordance with the present invention, including for performing the methods in accordance with the present invention.

The present invention has been described in detail with reference to its preferred embodiments, however, it is obvious that it can be implemented in various ways, without going beyond the claimed scope of legal protection defined by the claims.

Claims (38)

1. A way to designate a mobile device, located in the coverage area of the local wireless network; containing a display; containing an installed client part of the application, which is configured to be directed from the mobile device to the address of the identification resource of a group of network packets containing an application identifier or an identifier associated with it; as well as containing instructions for causing the device to display a visual image containing a mobile application identifier or an identifier associated with it; wherein the method is performed using a notation system, including a local wireless communication subsystem, an authorization subsystem, and a visual pattern reading subsystem, the authorization subsystem including an identification resource configured to receive data directed to the address of the identification resource; wherein the method includes steps in which if the visual image reader subsystem reads from the display of the mobile device a visual image containing an application identifier or an identifier associated with it, the visual image reader subsystem sends the application identifier or an associated identifier to the authorization subsystem; in accordance with the application identifier, a request is sent to the mobile device through the application to connect the mobile device to the local wireless network; in case of consent to the connection, the mobile device connects to the local wireless network; the local wireless communication subsystem receives from the mobile device a group of network packets containing an application identifier or an associated identifier and a network layer device identifier directed to an identification resource address, the local wireless communication subsystem determines the device's hardware network identifier by the network layer device ID; the local wireless communication subsystem sends to the authorization subsystem the network layer device identifier or associated identifier associated with each other and the hardware network device identifier or identifier associated with it; the local wireless communication subsystem transmits to the authorization subsystem at least a part of the group of network packets received from the mobile device, containing the application identifier or an identifier associated with it; the authorization subsystem, based on the network layer device identifier and/or associated identifier, associates an application identifier or associated identifier and a hardware network device identifier or associated identifier; the naming system stores an associated application identifier or associated identifier and a hardware network device identifier or associated identifier. 2. The method according to p. 1, characterized in that the method includes a step at which, after the visual image reading subsystem reads from the display of the mobile device a visual image containing an application identifier or an identifier associated with it, the data necessary for connecting the mobile device to a local wireless network is transmitted to the mobile device. 3. The system for designating a mobile device located in the coverage area of a local wireless network, including subsystem of local wireless communication; an authorization subsystem including an identification resource located at an address of the identification resource; subsystem for reading visual images; wherein the subsystem for reading visual images is configured to read the visual image containing the application identifier or the identifier associated with it from the display of the mobile device in the coverage area of the local wireless network and with the possibility of sending the application identifier or the identifier associated with it to the authorization subsystem; the designation system is configured to send to the mobile device using the application in accordance with the received application identifier or associated identifier of the request to connect to the local wireless network; the local wireless communication subsystem is configured to connect the mobile device to the local wireless network, as well as to receive one or more network packets from the device connected to the local wireless network to send them to the address of the identification resource; the local wireless communication subsystem is configured to send to the authorization subsystem the network layer device identifier or associated identifier associated with each other and the hardware network device identifier or identifier associated with it; the authorization subsystem is configured to receive from the local wireless communication subsystem at least a portion of the group of network packets received from the mobile device, directed to the address of the identification resource, containing an application identifier or an identifier associated with it; the authorization subsystem is configured to associate an application identifier or associated identifier and a device hardware network identifier or associated identifier based on the network layer device identifier and/or associated identifier; the naming system is configured to store the associated application identifier or associated identifier and the hardware network device identifier or associated identifier. 4. A non-volatile computer-readable information carrier containing machine-executable instructions that, when executed by a designation system, including a local wireless communication subsystem, an authorization subsystem and a visual image reading subsystem, the authorization subsystem includes an identification resource configured to receive data directed by the address of the identification resource, cause the designation system to perform the steps of the method for designating a mobile device located in the coverage area of the local wireless network, in which after reading by means of the subsystem for reading visual images from the display of the mobile device of the visual image containing the application identifier or the identifier associated with it, in accordance with the application identifier, a request is sent to the mobile device through the application to connect to the local wireless network; in case of consent to the connection, the mobile device connects to the local wireless network; the local wireless communication subsystem receives from the mobile device a group of network packets containing an application identifier or an associated identifier and a network layer device identifier directed to an identification resource address, the local wireless communication subsystem determines the device's hardware network identifier by the network layer device ID; the local wireless communication subsystem sends to the authorization subsystem the network layer device identifier or associated identifier associated with each other and the hardware network device identifier or identifier associated with it; the local wireless communication subsystem transmits to the authorization subsystem at least a part of the group of network packets received from the mobile device, containing the application identifier or an identifier associated with it; the authorization subsystem, based on the network layer device identifier and/or associated identifier, associates an application identifier or associated identifier and a hardware network device identifier or associated identifier; the naming system stores an associated application identifier or associated identifier and a hardware network device identifier or associated identifier.