Providing an alternative access network indication to a client device in a wireless local area network roaming federation

Patent metadata

Field	Value
Publication number	US-12302236-B2
Application number	US-202217903326-A
Country	US
Kind code	B2
Filing date	Sep 6, 2022
Priority date	Sep 6, 2022
Publication date	May 13, 2025
Grant date	May 13, 2025

Abstract

Presented herein are techniques associated with providing an alternative network indication to a client device in a wireless local area network (WLAN) roaming federation. In one example a method is provided that may include obtaining access network information for each of a plurality of access networks that neighbor a first access network through connection of a client device with the first access network involving a first identity provider profile; determining an alternative access network with which the client device is recommended to seek connection or an alternative identity provider profiles with which the client device is recommended to connect to the first access network; and enabling the client device to initiate a connection with the alternative access network or to re-initiate a connection with the first access network utilizing the alternative identity provider profile.

First claim

What is claimed is:

1. A method comprising:
obtaining, by an authentication element for an identity provider in a wireless local area network roaming federation, access network information for each of a plurality of access networks that neighbor a first access network, wherein the access network information is obtained through connection of a client device with the first access network involving a first identity provider profile for the client device;
determining, by the authentication element, one or more alternative access networks with which the client device is recommended to seek connection instead of the first access network or one or more alternative identity provider profiles with which the client device is recommended to connect to the first access network based, at least in part, on the access network information and roaming criteria of the identity provider; and
enabling, based on the determining, the client device to initiate a connection with at least one alternative access network of the one or more alternative access networks or to re-initiate a connection with the first access network utilizing one or more alternative identity provider profiles.

2. The method of claim 1 , wherein the access network information for each the plurality of access networks that neighbor the first access network is generated by an element of the first access network.

3. The method of claim 1 , wherein the access network information for each the plurality of access networks that neighbor the first access network is generated by the client device.

4. The method of claim 1 , wherein the access network information is obtained through Remote Authentication Dial-In User Service (RADIUS) signaling involving the client device and the first access network.

5. The method of claim 1 , wherein the access network information includes at least one of:
a network identity for each of the plurality of access networks that neighbor the first access network; or
at least one of quality information or load information for each of the plurality of access networks that neighbor the first access network.

6. The method of claim 1 , wherein the authentication element for the identity provider in the wireless local area network roaming federation further obtains location information for the first access network.

7. The method of claim 1 , wherein the enabling includes providing a recommendation to the client device to initiate the connection with the at least one alternative access network of the one or more alternative access networks or providing a recommendation to the client device to re-initiate the connection with the first access network utilizing an alternative identity provider profile.

8. The method of claim 7 , wherein the recommendation includes a network identity for the at least one alternative access network or one of a name of the alternative identity provider profile or characteristics associated with the alternative identity provider profile.

9. The method of claim 7 , further comprising:
following providing the recommendation to the client device, obtaining, by the authentication element, a communication indicating that the client device will not seek connection with the at least one alternative access network; and
providing one or more other recommendations to the client device to initiate a connection with one or more other alternative access networks until the authentication element obtains a communication indicating that the client device will seek connection with a particular other alternative access network.

10. The method of claim 1 , wherein the enabling includes causing disconnection of the client device with the first access network in order for the client device to initiate the connection with the at least one alternative access network of the one or more alternative access networks or for the client device to re-initiate the connection with the first access network utilizing an alternative identity provider profile.

11. The method of claim 1 , wherein the determining includes:
analyzing the access network information for the first access network and for each of the plurality of access networks that neighbor the first access network in relation to the roaming criteria to determine the one or more alternative access networks that satisfy the roaming criteria better than the first access network or to determine the one or more alternative identity provider profiles that satisfy the roaming criteria better than the first identity provider profile.

12. The method of claim 1 , wherein the roaming criteria includes one or more of:
cost criteria for allowing the client device to connect to an access network;
quality criteria for allowing the client device to connect to an access network;
security criteria for allowing the client device to connect to an access network;
regulatory criteria for allowing the client device to connect to an access network; and
business relationship criteria for allowing the client device to connect to an access network.

13. One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to perform operations, comprising:
obtaining, by an authentication element for an identity provider in a wireless local area network roaming federation, access network information for each of a plurality of access networks that neighbor a first access network, wherein the access network information is obtained through connection of a client device with the first access network involving a first identity provider profile for the client device;
determining, by the authentication element, one or more alternative access networks with which the client device is recommended to seek connection instead of the first access network or one or more alternative identity provider profiles with which the client device is recommended to connect to the first access network based, at least in part, on the access network information and roaming criteria of the identity provider; and
enabling, based on the determining, the client device to initiate a connection with at least one alternative access network of the one or more alternative access networks or to re-initiate a connection with the first access network utilizing one or more alternative identity provider profiles.

14. The media of claim 13 , wherein the authentication element for the identity provider in the wireless local area network roaming federation further obtains location information for the first access network.

15. The media of claim 13 , wherein the enabling includes providing a recommendation to the client device to initiate the connection with the at least one alternative access network of the one or more alternative access networks or providing a recommendation to the client device to re-initiate the connection with the first access network utilizing an alternative identity provider profile.

16. The media of claim 13 , wherein the enabling includes causing disconnection of the client device with the first access network in order for the client device to initiate the connection with the at least one alternative access network of the one or more alternative access networks or for the client device to re-initiate the connection with the first access network utilizing an alternative identity provider profile.

17. An authentication element for an identity provider in a wireless local area network roaming federation, comprising:
at least one memory element for storing data; and
at least one processor for executing instructions associated with the

Assignees

• Cisco Tech Inc

Inventors

• Grayson Mark
• Henry Jerome

Classifications

• H04W48/08

  Access restriction or access information delivery, e.g. discovery data delivery (signalling during connection H04W76/00) · CPC title

• H04W12/06

  Authentication · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04W8/02

  Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks · CPC title

• H04W48/18 Primary

  Selecting a network or a communication service · CPC title