IP Library Granted Patent US 9,426,118
Granted Patent B2
US 9,426,118 · App. 14/525,443 · Granted Aug 23, 2016

Remote grant of network access

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,426,118
App. No.
14/525,443
Granted
Aug 23, 2016
Kind
B2
Abstract

Systems and techniques for granting of network access to a new network device are described. Specifically, various techniques and systems are provided for connecting a new network device to a network and limiting access of the network device while authenticating the new network device. Exemplary embodiments of the present invention include a computer-implemented method. The method comprises receiving, at a gateway on a network, a communication including a request for a new network device to join the network; establishing a connection between the new network device and the gateway; generating a firewall configured to prevent the new network device from communicating with an additional device on the network; transmitting a query, wherein the query includes a request to determine whether the new network device is associated with the network; receiving a communication including a response to the query indicating that the new network device is associated with the network; removing the firewall so as to allow the new network device to communicate with the additional network device.

Claims (44)

1. A computer-implemented method, comprising:

receiving, at a gateway on a network, a communication including a request for a new network device to join the network;

establishing a connection between the new network device and the gateway, wherein establishing the connection between the new network device and the gateway includes allowing the new network device to connect to a guest entry point of the network;

generating a firewall configured to prevent the new network device from communicating with an existing device on the network, wherein establishing a connection between the new network device and the gateway and generating a firewall configured to prevent the new network device from communicating with an additional device on the network occur at substantially the same time;

transmitting a query, wherein the query includes a request to determine whether the new network device is associated with the network;

receiving a communication including a response to the query indicating that the new network device is associated with the network; and

removing the firewall to allow the new network device to communicate with the existing network device.

2. The method of claim 1 , further comprising: storing a data table including media access control (MAC) addresses associated with network devices on the network, wherein the new network device is associated with a MAC address on the data table.

3. The method of claim 2 , wherein the data table is an address resolution protocol (ARP) table.

4. The method of claim 2 , wherein generating the firewall includes removing the MAC address of the new network device from the data table.

5. The method of claim 2 , wherein removing the firewall includes adding the MAC address of the new network device to the data table.

6. The method of claim 1 , wherein the query is transmitted in response to establishing the connection between the new network device and the gateway.

7. The method of claim 1 , wherein after the query is received, the query is presented on a display so as to allow a response to be entered at the display.

8. The method of claim 1 , further comprising: transmitting a communication, including network credentials, to the new network device so as to allow the new network device to connect to the network.

9. A computing device, comprising:

one or more processors; and

a memory having instructions stored thereon, which when executed by the one or more processors, cause the computing device to perform operations including:

receiving, at a gateway on a network, a communication including a request for a new network device to join the network;

establishing a connection between the new network device and the gateway, wherein establishing the connection between the new network device and the gateway includes allowing the new network device to connect to a guest entry point of the network;

generating a firewall configured to prevent the new network device from communicating with an existing device on the network, wherein establishing a connection between the new network device and the gateway and generating a firewall configured to prevent the new network device from communicating with an additional device on the network occur at substantially the same time;

transmitting a query, wherein the query includes a request to determine whether the new network device is associated with the network;

receiving a communication including a response to the query indicating that the new network device is associated with the network; and

removing the firewall to allow the new network device to communicate with the existing network device.

10. The computing device of claim 9 , further comprising instructions, which when executed by the one or more processors, cause the computing device to perform operations including: storing a data table including media access control (MAC) addresses associated with network devices on the network, wherein the new network device is associated with a MAC address on the data table.

11. The computing device of claim 10 , wherein the data table is an address resolution protocol (ARP) table.

12. The computing device of claim 10 , wherein generating the firewall includes removing the MAC address of the new network device from the ARP table.

13. The computing device of claim 10 , wherein removing the firewall includes adding the MAC address of the new network device to the ARP table.

14. The computing device of claim 9 , wherein the query is transmitted in response to establishing the connection between the new network device and the gateway.

15. The computing device of claim 9 , wherein after the query is received, the query is presented on a display so as to allow a response to be entered at the display.

16. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to:

receive, at a gateway on a network, a communication including a request for a new network device to join the network;

establish a connection between the new network device and the gateway, wherein establishing the connection between the new network device and the gateway includes allowing the new network device to connect to a guest entry point of the network;

generate a firewall configured to prevent the new network device from communicating with an existing device on the network, wherein establishing a connection between the new network device and the gateway and generating a firewall configured to prevent the new network device from communicating with an additional device on the network occur at substantially the same time;

transmit a query, wherein the query includes a request to determine whether the new network device is associated with the network;

receive a communication including a response to the query indicating that the new network device is associated with the network; and

remove the firewall to allow the new network device to communicate with the existing network device.

17. The computing device of claim 9 , further comprising instructions, which when executed by the one or more processors, cause the computing device to perform operations including: transmitting a communication, including network credentials, to the new network device so as to allow the new network device to connect to the network.

18. The computer-program product of claim 16 , further comprising instructions configured to cause the data processing apparatus to: store a data table including media access control (MAC) addresses associated with network devices on the network, wherein the new network device is associated with a MAC address on the data table.

19. The computer-program product of claim 18 , wherein the data table is an address resolution protocol (ARP) table.

20. The computer-program product of claim 18 , wherein generating the firewall includes removing the MAC address of the new network device from the data table.

21. The computer-program product of claim 18 , wherein removing the firewall includes adding the MAC address of the new network device to the data table.

22. The computer-program product of claim 16 , wherein the query is transmitted in response to establishing the connection between the new network device and the gateway.

23. The computer-program product of claim 16 , wherein after the query is received, the query is presented on a display so as to allow a response to be entered at the display.

24. The computer-program product of claim 16 , further comprising instructions configured to cause the data processing apparatus to: transmit a communication, including network credentials, to the new network device so as to allow the new network device to connect to the network.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 10, 2025
From: BELKIN INTERNATIONAL, INC.
To: ZEBRA TECHNOLOGIES CORPORATION
Reel/Frame 070796/0254 →
SUPPLEMENT NO. 13 TO PATENT SECURITY AGREEMENT Recorded Jul 20, 2015
From: BELKIN INTERNATIONAL, INC.
To: WELLS FARGO BANK, NATIONAL ASSOCIATION, AS AGENT
Reel/Frame 036135/0095 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 24, 2014
From: KIM, RYAN YONG
To: BELKIN INTERNATIONAL INC.
Reel/Frame 034252/0432 →