IP Library Granted Patent US 7,874,007
Granted Patent B2
US 7,874,007 · App. 11/413,922 · Granted Jan 18, 2011

Providing guest users access to network resources through an enterprise network

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,874,007
App. No.
11/413,922
Granted
Jan 18, 2011
Kind
B2
Abstract

Guest user are enabled to access network resources through an enterprise network using a guest user account. A guest user account may be created for a guest for a limited time. Guest account credentials of the guest account may be provided to the guest to use the guest account using any of a variety of techniques described herein, for example, by scanning a guest access card, credit card or mobile telephone of guest user, and providing the guest account credentials to the user based on the information obtained. A guest access management server may be configured to generate and maintain guest accounts, authenticate guest users, and track and log guest activity. A VLAN technology may be used to separate guest traffic from host enterprise traffic on the host enterprise network. After a guest user is authenticated, communications to and from the guest user may be routed to a guest VLAN.

Claims (37)

1. A method of enabling a guest user to access network resources through an enterprise network, comprising acts of:

receiving, by a guest access management server of the enterprise network, information from an object in the possession of the guest user;

determining, by the guest access management server, based on the received information, one or more guest account credentials of the guest user;

verifying, by the guest access management server, the guest account credentials of the guest user;

establishing, by the guest access management server, a guest virtual LAN that allows access by the guest user to specified resources of the enterprise network and separates guest traffic from enterprise traffic on the enterprise network; and

after verifying the guest account credentials of the guest user, the guest management access server enabling guest user access to the specified resources of the enterprise network included in the guest virtual LAN.

2. The method of claim 1 , wherein the object is a guest access card.

3. The method of claim 1 , further comprising acts of:

receiving the one or more guest account credentials from a user device of the guest user; and

providing the guest user access to the network resources through the enterprise network based on the one or more guest account credentials.

4. The method of claim 3 , wherein a guest account corresponding to the guest account credentials is configured to have a duration of a limited time, the method further comprising:

denying the guest user access to the network resources after an expiration of the limited time.

5. The method of claim 3 , wherein a guest account corresponding to the guest account credentials is configured to allow the guest user access to network resources only during one or more specific time intervals, the method further comprising an act of:

denying the guest user access to the network resources outside of the one or more specific time intervals.

6. The method of claim 3 , wherein the enterprise network is configured to define a plurality of virtual local area networks, including a first virtual local area network for guest users, and

wherein enabling guest user access comprises providing the guest user access to only network resources defined as part of the first virtual local area network.

7. The method of claim 6 , wherein the first virtual local area network is defined to include the Internet.

8. The method of claim 1 , wherein determining one or more guest account credentials comprises determining a guest account identity and password based on the read information, and

wherein verifying the guest account credentials comprises verifying the guest account identity and password.

9. The method of claim 8 , wherein receiving information comprises receiving the guest account identity and the password.

10. The method of claim 1 , further comprising displaying the one or more guest account credentials to the guest user.

11. A system for enabling a guest user to access network resources through an enterprise network, comprising:

a guest access management server to determine, based on information from an object in the possession of the guest user, one or more guest account credentials, to verify the guest account credentials of the guest user, to establish a guest virtual LAN that allows access by the guest user to specified resources of the enterprise network and separates guest traffic from enterprise traffic on the enterprise network, and, after verifying the guest account credentials of the guest user, to enable guest user access to the specified resources of the enterprise network included in the guest virtual LAN.

12. The system of claim 11 , wherein the object is a guest access card.

13. The system of claim 11 , further comprising:

a guest access account device to receive the information from the object.

14. The system of claim 13 , further comprising:

a user output device to indicate the one or more guest account credentials to the guest user.

15. The system of claim 11 , wherein the guest access management server is operative to receive the one or more guest account credentials from a user device of the guest user, and to authorize access for the guest user access to the network resources through the enterprise network based on the one or more guest account credentials.

16. A computer-readable storage medium encoded with computer-readable instructions that, as a result of being executed by a computer, control the computer to perform a method of enabling a guest user to access network resources through an enterprise network, the method comprising acts of:

receiving by a guest access management server of the enterprise network, information from an object in the possession of the guest user;

determining, by the guest access management server, based on the read received information, one or more guest account credentials of the guest user;

verifying, by the guest access management server, the guest account credentials of the guest user;

establishing, by the guest access management server, a guest virtual LAN that allows access by the guest user to specified resources of the enterprise network and separates guest traffic from enterprise traffic on the enterprise network; and

after verifying the guest account credentials of the guest user, the guest management access server enabling guest user access to the specified resources of the enterprise network included in the guest virtual LAN.

17. The computer-readable storage medium of claim 16 , where receiving the one or more guest account credentials from a user device of the guest user; and

providing the guest user access to the network resources through the enterprise network based on the one or more guest account credentials.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 9, 2014
From: MICROSOFT CORPORATION
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 034542/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 23, 2006
From: HASSAN, AMER A; BARON, ANDREW T.; HUITEMA, CHRISTIAN; WU, DEYUN; KHADEER, MAHMOOD H.; PARIKH, VISHESH M.; YAHYAOUI, WAJIH
To: MICROSOFT CORPORATION
Reel/Frame 017658/0333 →