Systems and methods for enforcing access-control policies

1. A computer-implemented method for enforcing access-control policies, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

detecting, at a network device for configuring networks according to access-control policies, an attempt to connect a client to an access-controlled network, wherein the attempt includes a network identifier corresponding to a prior access-controlled network previously accessed by the client;

providing, via the network device, a guest network to allow the client to contact a server in association with the attempt to connect the client to the access-controlled network;

determining, by the server, the network device is available to configure the access-controlled network;

identifying, by the server, the prior access-controlled network previously accessed by the client by determining, from the attempt to connect the client to the access-controlled network, the network identifier corresponding to the prior access-controlled network;

identifying and retrieving, from the server, an access-control policy that applies to the access-controlled network, wherein the access-control policy is identified based at least on a policy associated with the network identifier and having previously been applied to the client to connect to the prior access-controlled network;

instructing, by the server, the network device to configure the access-controlled network by establishing, based on the network identifier, a network configured to enforce one or more provisions of the access-control policy;

notifying the client that the access-controlled network is available; and

connecting the client to the access-controlled network.

2. The computer-implemented method of claim 1 , wherein:

detecting the connection attempt comprises detecting a request from the client to connect to the access-controlled network.

3. The computer-implemented method of claim 1 , wherein:

detecting the connection attempt comprises detecting the network device capable of configuring networks according to access-control policies.

4. The computer-implemented method of claim 1 , wherein the client requests, via a mobile device network, the access-control policy server to provide the access-control policy to the network device.

5. The computer-implemented method of claim 1 , wherein the client requests, via a public network, the access-control policy server to provide the access-control policy to the network device.

6. The computer-implemented method of claim 5 , wherein the public network is provided by the network device.

7. The computer-implemented method of claim 1 , wherein:

detecting the attempt to connect the client to the access-controlled network comprises receiving, at the access-control policy server, a request to identify the network device, the request comprising at least one network device identifier; and

identifying the access-control policy that applies to the access-controlled network comprises:

receiving, at the access-control policy server, identification of the access-control policy; and

providing the access-control policy to the network device.

8. A system for enforcing access-control policies, the system comprising:

a connection module, stored in memory, that detects, at a network device for configuring networks according to access-control policies, an attempt to connect a client to an access-controlled network, and, in response to detecting the attempt, provides, via the network device, a guest network to allow the client to contact the system in association with the attempt, wherein the attempt includes a network identifier corresponding to a prior access-controlled network previously accessed by the client;

a policy module, stored in memory, that:

identifies the prior access-controlled network previously accessed by the client by determining, from the attempt to connect the client to the access-controlled network, the network identifier corresponding to the prior access-controlled network, and

identifies and retrieves an access-control policy that applies to the access-controlled network based at least on a policy associated with the network identifier and having previously been applied to the client to connect to the prior access-controlled network;

a configuration module, stored in memory, that instructs the network device to configure the access-controlled network by establishing, based on the network identifier, a network configured to enforce one or more provisions of the access-control policy;

a notification module, stored in memory, that notifies the client that the access-controlled network is available and enables the client to connect to the access-controlled network; and

at least one physical processor configured to execute the connection module, the policy module, the configuration module, and the notification module.

9. The system of claim 8 , wherein:

the connection module detects the connection attempt by detecting a request from the client to connect to the access-controlled network.

10. The system of claim 8 , wherein:

the connection module detects the connection attempt by detecting the network device capable of configuring networks according to access-control policies.

11. The system of claim 8 , wherein the client requests, via a mobile device network, the access-control policy server to provide the access-control policy to the network device.

12. The system of claim 8 , wherein the client requests, via a public network, the access-control policy server to provide the access-control policy to the network device.

13. The system of claim 12 , wherein the public network is provided by the network device.

14. The system of claim 8 , wherein:

the connection module detects the attempt to connect the client to the access-controlled network by receiving, at the access-control policy server, a request to identify the network device, the request comprising at least one network device identifier; and

the policy module identifies the access-control policy that applies to the access-controlled network by:

receiving, at the access-control policy server, identification of the access-control policy; and

providing the access-control policy to the network device.

15. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

detect, at a network device for configuring networks according to access-control policies, an attempt to connect a client to an access-controlled network, wherein the attempt includes a network identifier corresponding to a prior access-controlled network previously accessed by the client;

provide, via the network device, a guest network to allow the client to contact a server in association with the attempt to connect the client to the access-controlled network;

determine the network device is available to configure the access-controlled network;

identify the prior access-controlled network previously accessed by the client by determining, from the attempt to connect the client to the access-controlled network, the network identifier corresponding to the prior access-controlled network;

identify and retrieve an access-control policy that applies to the access-controlled network based at least on a policy associated with the network identifier and having previously been applied to the client to connect to the prior access-controlled network;

instruct the network device to configure the access-controlled network by establishing, based on the network identifier, a network configured to enforce one or more provisions of the access-control policy;

notify the client that the access-controlled network is available; and

enable the client to connect to the access-controlled network.

16. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions cause the computing device to:

detect the connection attempt by detecting a request from the client to connect to the access-controlled network.

17. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions cause the computing device to:

detect the connection attempt by detecting the network device capable of configuring networks according to access-control policies.

18. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions cause the computing device to request, via a mobile device network, the access-control policy server to provide the access-control policy to the network device.

19. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions cause the computing device to request, via a public network, the access-control policy server to provide the access-control policy to the network device.

20. The non-transitory computer-readable medium of claim 19 , wherein the one or more computer-readable instructions cause the computing device to:

detect the attempt to connect the client to the access-controlled network by receiving, at the access-control policy server, a request to identify the network device, the request comprising at least one network device identifier; and

identify the access-control policy that applies to the access-controlled network by:

receiving, at the access-control policy server, identification of the access-control policy; and

providing the access-control policy to the network device.