Using a network requirements field to provide a station access to a network

Patent metadata

Field	Value
Publication number	US-12137345-B2
Application number	US-202117514232-A
Country	US
Kind code	B2
Filing date	Oct 29, 2021
Priority date	Jan 15, 2019
Publication date	Nov 5, 2024
Grant date	Nov 5, 2024

Abstract

Methods, systems, and computer readable media can be operable to facilitate an exchange of messages between an access point and a station, wherein the access point requests a unique identifier from the station. The request can include a network requirements field that indicates that a unique identifier is required for access to the network. The station initiates a secure connection with the access point prior to associating with the access point. The station may either respond with a message declining to provide a unique identifier or respond with a message including a unique identifier to be used by the access point for the station via the secure connection. The response from the station may include additional limitations on the use of the unique identifier by the access point. The access point may enforce different policies against the station depending upon how the station responds to the unique identifier request.

First claim

We claim:

1. A method for an access point of a network to provide access to the network to a station, the method comprising:
outputting a unique identifier request to the station, wherein the unique identifier request includes a network requirements field that indicates that a unique identifier associated with the station is required;
establishing a secure connection with the station;
receiving a unique identifier response from the station via the secure connection;
determining that the unique identifier response provides the unique identifier to be used for the station, wherein the unique identifier is different from a media access control (MAC) address of the station; and
providing access to the network based on the unique identifier received in the unique identifier response.

2. The method of claim 1 , wherein establishing the secure connection with the station comprises at least one of:
an exchange of one or more encryption keys with the station; and
a pre-association security negotiation.

3. The method of claim 1 , further comprising:
determining whether the unique identifier was previously stored;
if the unique identifier was previously stored, using authorization or behavior associated with a previous association between the access point and the station to provide the station access to one or more resources of the network; and
if the unique identifier was not previously stored:
storing the unique identifier; and
providing the station access to the one or more resources of the network.

4. The method of claim 1 , wherein the unique identifier comprises any of a universal unique identifier, a user entered text string, a random number, a pseudorandom number, a preconfigured identifier, or any combination thereof.

5. The method of claim 1 , further comprising:
associating the station with the access point.

6. The method of claim 5 , further comprising:
after associating the station with the access point, providing to the station network information specifying a network or network access for the station.

7. The method of claim 1 , wherein providing access to the network based on the unique identifier received in the unique identifier response comprises providing one or more benefits associated with a retail business or an online business.

8. An access point of a network for providing access to the network to a station, the access point comprising:
a memory storing one or more computer-readable instructions; and
a processor configured to execute the one or more computer-readable instructions to:
output a unique identifier request to the station, wherein the unique identifier request includes a network requirements field that indicates that a unique identifier associated with the station is required;
establish a secure connection with the station;
receive a unique identifier response from the station via the secure connection;
determine that the unique identifier response provides the unique identifier to be used for the station, wherein the unique identifier is different from a media access control (MAC) address of the station; and
provide access to the network based on the unique identifier received in the unique identifier response.

9. The access point of claim 8 , wherein establishing the secure connection with the station comprises at least one of:
an exchange of one or more encryption keys with the station; and
a pre-association security negotiation.

10. The access point of claim 8 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
determining whether the unique identifier was previously stored;
if the unique identifier was previously stored, using authorization or behavior from a previous association between the access point and the station to provide the station access to one or more resources of the network; and
if the unique identifier was not previously stored:
storing the unique identifier; and
providing the station access to the one or more resources of the network.

11. The access point of claim 8 , wherein the unique identifier comprises any of a universal unique identifier, a user entered text string, a random number, a pseudorandom number, a preconfigured identifier, or any combination thereof.

12. The access point of claim 8 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
associate the station with the access point.

13. The access point of claim 12 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
after associating the station with the access point, provide to the station network information specifying a network or network access for the station.

14. The access point of claim 1 , wherein providing access to the one or more features to the station based on the unique identifier received in the unique identifier response comprise providing one or more benefits associated with a retail business or an online business.

15. A non-transitory computer-readable medium of an access point of a network storing one or more computer-readable instructions for providing access to the network to a station, the one or more computer-readable instructions that when executed by a processor of the access point cause the access point to perform one or more operations comprising:
outputting a unique identifier request to the station, wherein the unique identifier request includes a network requirements field that indicates that a unique identifier associated with the station is required;
establishing a secure connection with the station;
receiving a unique identifier response from the station via the secure connection;
determining that the unique identifier response provides the unique identifier to be used for the station, wherein the unique identifier is different from a media access control (MAC) address of the station; and
providing access to the network based on the unique identifier received in the unique identifier response.

16. The non-transitory computer-readable medium of claim 15 , wherein establishing the secure connection with the station comprises at least one of:
an exchange of one or more encryption keys with the station; and
a pre-association security negotiation.

17. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
determining whether the unique identifier was previously stored;
if the unique identifier was previously stored, using authorization or behavior from a previous association between the access point and the station to provide the station access to one or more resources of the network; and
if the unique identifier was not previously stored:
storing the unique identifier; and
providing the station access to the one or more resources of the network.

18. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
associating the station with the access point.

19. The non-transitory computer-readable medium of claim 18 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
after associating the station with the access

Assignees

• Arris Entpr Llc
• Ruckus Ip Holdings Llc

Inventors

• Lumbatis Kurt
• Hamilton Mark

Classifications

• H04L2101/622

  Layer-2 addresses, e.g. medium access control [MAC] addresses · CPC title

• H04L61/50

  Address allocation · CPC title

• H04W12/0471

  Key exchange · CPC title

• H04W12/03

  Protecting confidentiality, e.g. by encryption · CPC title

• H04L63/205

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title