Captive Portal Bypass via Automatic Redirect Authentication

Solution Overview

Problem

Captive portal systems in communication networks often trap mobile devices in a 'walled garden' by blocking internet access until authentication is completed, disrupting data communication and requiring manual intervention for users to access social networks.

Innovation Solution

Modifying the default captive portal detection dialog process by redirecting mobile devices to a specific URL or IP address associated with a domain, allowing them to authenticate directly with a network resource and bypass the captive portal, enabling seamless access to communication networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a captive portal system blocks internet access until authentication is completed, then network security and access control are improved, but data communication is disrupted and user convenience deteriorates

Engineering Contradiction:

Improvenetwork securityVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary authentication by detecting the captive portal state and automatically initiating the authentication process before the user attempts to access internet resources. This preliminary action prevents the disruption that would occur if authentication were delayed until after access attempts, thereby maintaining both security and user convenience.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The mobile device autonomously detects the captive portal state and automatically completes authentication without requiring manual user intervention. The device serves itself by monitoring network responses, identifying portal URLs, and executing the authentication workflow, which eliminates the inconvenience of manual authentication while preserving security controls.

Inventive Principle:

Principle #25Self-service

2Reliability

If a captive portal system requires manual authentication intervention, then access control is enforced, but data communication is interrupted and productivity decreases

Engineering Contradiction:

Improveaccess controlVSAvoiddata communication efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary authentication by detecting the captive portal state and automatically initiating the authentication process before the user attempts to access internet resources. This preliminary action prevents the disruption that would occur if authentication were delayed until after access attempts, thereby maintaining both security and user convenience.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The mobile device autonomously detects the captive portal state and automatically completes authentication without requiring manual user intervention. The device serves itself by monitoring network responses, identifying portal URLs, and executing the authentication workflow, which eliminates the inconvenience of manual authentication while preserving security controls.

Inventive Principle:

Principle #25Self-service

3Extent of automation

If the mobile device follows HTTP redirects to authenticate with the captive portal, then authentication is completed, but data communication is blocked until authentication is verified

Engineering Contradiction:

Improveauthentication automationVSAvoidaccess delay

Core Design Contradiction:

Extent of automationVSLoss of time

Solution Approach 1:

The system performs preliminary authentication by detecting the captive portal state and automatically initiating the authentication process before the user attempts to access internet resources. This preliminary action prevents the disruption that would occur if authentication were delayed until after access attempts, thereby maintaining both security and user convenience.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system continuously monitors HTTP responses for redirect indicators that signify captive portal presence. By implementing feedback loops that detect portal states and automatically adjust authentication behavior, the system eliminates access delays while maintaining automated authentication. The feedback mechanism allows the device to adapt its communication strategy based on real-time network conditions.

Inventive Principle:

Principle #23Feedback

Data Source

PatentEP3017633B1Third-party captive portal

Publication Date: 2019.09.04 META PLATFORMS INC

Figure 1
Figure 2
Figure 3

AI summary

In one embodiment, a method includes detecting a request from a user agent of a client computing device of a user to access a communication network through the router; and automatically redirecting the user agent from a first network resource to second network resource. The first network resource is configured to authenticate the user to provide access to the communication network. The second network resource is configured to authenticate the user to provide access to a particular domain of the communication network. The method also includes providing to the user agent access to the particular domain of the communication network if the second network resource successfully authenticates the user.