Distributed management of secure wi-fi network

Patent metadata

Field	Value
Publication number	US-2023397001-A1
Application number	US-202318154763-A
Country	US
Kind code	A1
Filing date	Jan 13, 2023
Priority date	Jun 14, 2019
Publication date	Dec 7, 2023
Grant date	—

Abstract

Generally described, the presently disclosed technology utilizes managed Wi-Fi networks pre-installed throughout an MDU property to provide user-specific passphrases that can be used to access the single-SSID wireless network at the property and to provide a cloud portal that can enable convenient access to the functionalities (both by the resident and the manager) provided by the Wi-Fi controller and the Wi-Fi access points. By doing so, the Wi-Fi network management solutions described herein allow the users to experience the benefits of a shared Wi-Fi infrastructure, such as not having to set up and maintain their own Wi-Fi routers, while also allowing them to easily change their Wi-Fi settings from their connected devices.

First claim

1 . (canceled)

2 . A method comprising:
receiving, at a first time, a request associated with a user of a wireless computer network, wherein the user at the first time is associated with a first pre-shared key (PSK); and in response to the request, associating the user with a second PSK, different from the first PSK, and presenting an indication that the user is associated with the second PSK;
wherein:
at the first time, the wireless computer network is accessible to the user via the first PSK and is inaccessible to the user via the second PSK,
at a second time later than the first time, the wireless computer network is accessible to the user via the first PSK and is further accessible to the user via the second PSK, and
at a third time later than the second time, the wireless computer network is accessible to the user via the second PSK and is inaccessible to the user via the first PSK.

3 . The method of claim 2 , wherein:
the request is received via a mobile device associated with the user, the indication is presented via the mobile device, and the request comprises a passphrase option selected via the mobile device from a plurality of passphrase options.

4 . The method of claim 2 , wherein:
the user is a guest of a second user, the request is received from the second user, and the wireless computer network, at the first time, is accessible to the second user via a third PSK different from the first PSK and further different from the second PSK.

5 . The method of claim 2 , wherein the wireless computer network comprises a virtual private network, and the virtual private network, at the first time, is inaccessible to a second user different from the user.

6 . The method of claim 2 , wherein:
the wireless computer network is associated with a multi-dwelling unit (MDU), a plurality of occupants of the MDU comprises the user, and the wireless computer network, at the first time, is accessible to the plurality of occupants.

7 . The method of claim 6 , wherein the wireless computer network, at the first time, is accessible to each of the plurality of occupants via a first service set identifier (SSID).

8 . The method of claim 2 , wherein the third time is later than the second time by less than one hour.

9 . A system comprising:
a network interface configured to communicate with a wireless computer network; and one or more processors configured to communicate with the network interface, the one or more processors configured to perform a method comprising:
receiving, at a first time, a request associated with a user of the wireless computer network, wherein the user at the first time is associated with a first pre-shared key (PSK); and
in response to the request, associating the user with a second PSK, different from the first PSK, and presenting an indication that the user is associated with the second PSK;

wherein:
at the first time, the wireless computer network is accessible to the user via the first PSK and is inaccessible to the user via the second PSK,
at a second time later than the first time, the wireless computer network is accessible to the user via the first PSK and is further accessible to the user via the second PSK, and
at a third time later than the second time, the wireless computer network is accessible to the user via the second PSK and is inaccessible to the user via the first PSK.

10 . The system of claim 9 , wherein:
the request is received via a mobile device associated with the user, the indication is presented via the mobile device, and the request comprises a passphrase option selected via the mobile device from a plurality of passphrase options.

11 . The system of claim 9 , wherein:
the user is a guest of a second user, the request is received from the second user, and the wireless computer network, at the first time, is accessible to the second user via a third PSK different from the first PSK and further different from the second PSK.

12 . The system of claim 9 , wherein the wireless computer network comprises a virtual private network, and the virtual private network, at the first time, is inaccessible to a second user different from the user.

13 . The system of claim 9 , wherein:
the wireless computer network is associated with a multi-dwelling unit (MDU), a plurality of occupants of the MDU comprises the user, and the wireless computer network, at the first time, is accessible to the plurality of occupants.

14 . The system of claim 13 , wherein the wireless computer network, at the first time, is accessible to each of the plurality of occupants via a first service set identifier (SSID).

15 . The system of claim 9 , wherein the third time is later than the second time by less than one hour.

16 . A non-transitory computer-readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to perform a method comprising:
receiving, at a first time, a request associated with a user of a wireless computer network, wherein the user at the first time is associated with a first pre-shared key (PSK); and in response to the request, associating the user with a second PSK, different from the first PSK, and presenting an indication that the user is associated with the second PSK;
wherein:
at the first time, the wireless computer network is accessible to the user via the first PSK and is inaccessible to the user via the second PSK,
at a second time later than the first time, the wireless computer network is accessible to the user via the first PSK and is further accessible to the user via the second PSK, and at a third time later than the second time, the wireless computer network is accessible to the user via the second PSK and is inaccessible to the user via the first PSK.

17 . The non-transitory computer-readable medium of claim 16 , wherein:
the request is received via a mobile device associated with the user, the indication is presented via the mobile device, and the request comprises a passphrase option selected via the mobile device from a plurality of passphrase options.

18 . The non-transitory computer-readable medium of claim 16 , wherein:
the user is a guest of a second user, the request is received from the second user, and the wireless computer network, at the first time, is accessible to the second user via a third PSK different from the first PSK and further different from the second PSK.

19 . The non-transitory computer-readable medium of claim 16 , wherein the wireless computer network comprises a virtual private network, and the virtual private network, at the first time, is inaccessible to a second user different from the user.

20 . The non-transitory computer-readable medium of claim 16 , wherein:
the wireless computer network is associated with a multi-dwelling unit (MDU), a plurality of occupants of the MDU comprises the user, and the wireless computer network, at the first time, is accessible to the plurality of occupants.

21 . The non-transitory computer-readable medium of claim 20 , wherein the wireless computer network, at the first time, is accessible to each of the plurality of occupants via a first service set identifier (SSID).

Assignees

• Nomadix Inc

Inventors

• Olshansky Vadim
• Jain Gaurav

Classifications

• H04W12/0433 Primary

  Key management protocols · CPC title

• H04W12/069

  using certificates or pre-shared keys · CPC title

• G06F3/0484

  for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04W12/082

  using revocation of authorisation · CPC title