IP Library Granted Patent US 10,044,709
Granted Patent B2
US 10,044,709 · App. 15/169,663 · Granted Aug 7, 2018

Multi-device single network sign-on

Inventors: Sunil Menon (Los Gatos, CA); Shailesh Patel (San Jose, CA)
Assignee: EXTREME NETWORKS, INC.
H04L63/0853G06F21/35G06F21/41H04L63/0815H04W12/06H04L63/107
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,044,709
App. No.
15/169,663
Filed
May 31, 2016
Granted
Aug 7, 2018
Kind
B2
Art Unit
2439
USPC
726/7
Abstract

Methods, systems and computer readable media for multi-device single network sign-on are described. For example, a method can include authenticating a first device for network access via a first authentication process, the first device being associated with a user account. The method can also include receiving an access request from a second device associated with the user account, and determining whether the second device is within an access perimeter of the first device. The method can further include permitting the second device to access the network without a second authentication process when the second device is within the access perimeter of the first device.

Claims (40)

1. A method comprising:

storing access perimeter configuration information for each of a plurality of user accounts, wherein the access perimeter configuration information is configured specifically for each of the plurality of user accounts;

authenticating a first device for network access via a first authentication process, the first device being associated with a first user account of the plurality of user accounts;

receiving an access request from a second device registered with the first user account;

retrieving, from the access perimeter configuration information for the first device, an access perimeter specific to the first user account of the plurality of user accounts;

determining, based on the retrieved access perimeter specific to the first user account, whether a distance between the second device and the first device indicates that the second device is within the access perimeter; and

when the distance between the second device and the first device indicates that the second device is within the access perimeter of the first device, permitting the second device to access the network without a second authentication process.

2. The method of claim 1 , further comprising registering the second device from an authenticated log-in session of the first device so as to register the second device with the first user account.

3. The method of claim 1 , further comprising registering a plurality of secondary devices from an authenticated log-in session of the first device so as to register each of the plurality of secondary devices with the first user account.

4. The method of claim 1 , wherein determining whether the distance between the second device and the first device is within the access perimeter further comprises determining whether the second device is connected to a defined one or more access points associated with the first device.

5. The method of claim 1 , wherein the access perimeter of the first device is configurable based on a network access point of the first device and a network access point of a second device.

6. The method of claim 1 , further comprising denying access to the second device when the distance between the second device and the first device is not within the access perimeter of the first device.

7. A system, comprising:

a first device configured to request network access to a network via a first authentication process, the first device being associated with a first user account of a plurality of user accounts;

a second device configured to request network access to the network, the second device registered with the first user account of the plurality of user accounts; and

a wireless controller configured to:

store access perimeter configuration information for each of the plurality of user accounts, wherein the access perimeter configuration information is configured specifically for each of the plurality of user accounts;

receive a first request from the first device;

authenticate the first device via the first authentication process;

receive a second request from the second device;

retrieve, from the access perimeter configuration information for the first device, an access perimeter specific to the first user account of the plurality of user accounts;

determine, based on the retrieved access perimeter specific to the first user account, whether a distance between the second device and the first device indicates that the second device is within the access perimeter of the first device; and

permit the second device to access the network without a second authentication process when the distance between the second device and the first device indicates that the second device is within the access perimeter of the first device.

8. The system of claim 7 , wherein the wireless controller is further configured to register the second device from an authenticated log-in session of the first device so as to register the second device with the first user account.

9. The system of claim 7 , wherein the wireless controller is further configured to register a plurality of secondary devices from an authenticated log-in session of the first device so as to register each of the plurality of secondary devices with the first user account.

10. The system of claim 7 , wherein the wireless controller is configured to determine whether the distance between the second device and the first device is within the access perimeter by determining whether the second device is connected to a defined one or more access points associated with the first device.

11. The system of claim 7 , wherein the access perimeter of the first device is configurable based on a network access point of the first device and a network access point of a second device.

12. The system of claim 7 , wherein the wireless controller is further configured to deny access to the second device when the distance between the second device and the first device is not within the access perimeter of the first device.

13. A non-transitory computer readable medium having stored thereon instructions that, when executed by a processor of a wireless controller, cause the processor to perform operations including:

storing access perimeter configuration information for each of a plurality of user accounts, wherein the access perimeter configuration information is configured specifically for each of the plurality of user accounts;

authenticating a first device for network access via a first authentication process, the first device being associated with a first user account of the plurality of user accounts;

receiving an access request from a second device registered with the user account;

retrieving, from the access perimeter configuration information for the first device, an access perimeter specific to the first user account of the plurality of user accounts;

determining, based on the retrieved access perimeter specific to the first user account, whether a distance between the second device and the first device indicates that the second device is within the access perimeter; and

when the distance between the second device and the first device indicates that the second device is within the access perimeter of the first device, permitting the second device to access the network without a second authentication process.

14. The non-transitory computer readable medium of claim 13 , wherein the operations further include registering the second device from an authenticated log-in session of the first device so as to register the second device with the first user account.

15. The non-transitory computer readable medium of claim 13 , wherein the operations further include registering a plurality of secondary devices from an authenticated login session of the first device so as to register each of the plurality of secondary devices with the first user account.

16. The non-transitory computer readable medium of claim 13 , wherein determining whether the distance between the second device and the first device is within the access perimeter further comprises determining whether the second device is connected to a defined one or more access points associated with the first device.

17. The non-transitory computer readable medium of claim 13 , wherein the access perimeter of the first device is configurable based on a network access point of the first device and a network access point of a second device.

18. The non-transitory computer readable medium of claim 13 , wherein the operations further include denying access to the second device when the distance between the second device and the first device is not within the access perimeter of the first device.

Assignments (6)
RELEASE OF PATENT AND TRADEMARK SECURITY INTEREST AT REEL/FRAME NO. 46050/0546 Recorded Jul 30, 2026
From: BANK OF MONTREAL, AS AGENT
To: EXTREME NETWORKS, INC.
Reel/Frame 076081/0088 →
SECURITY INTEREST Recorded Jul 29, 2026
From: EXTREME NETWORKS, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 076078/0590 →
AMENDED SECURITY AGREEMENT Recorded Aug 18, 2023
From: EXTREME NETWORKS, INC.; AEROHIVE NETWORKS, INC.
To: BANK OF MONTREAL
Reel/Frame 064782/0971 →
RELEASE OF SECURITY INTEREST Recorded May 1, 2018
From: SILICON VALLEY BANK
To: EXTREME NETWORKS, INC.
Reel/Frame 046051/0775 →
SECURITY INTEREST Recorded May 1, 2018
From: EXTREME NETWORKS, INC.
To: BANK OF MONTREAL
Reel/Frame 046050/0546 →
THIRD AMENDED AND RESTATED PATENT AND TRADEMARK SECURITY AGREEMENT Recorded Oct 31, 2017
From: EXTREME NETWORKS, INC.
To: SILICON VALLEY BANK
Reel/Frame 044639/0300 →
Continuity (2)
Continuation 13929750 · Jun 27, 2013
Related Publication 20170026365A1 · Jan 26, 2017