IP Library Granted Patent US 11,005,836
Granted Patent B2
US 11,005,836 · App. 15/623,122 · Granted May 11, 2021

Seamless wireless device onboarding

Inventors: John William Hanay (Palo Alto, CA); Daniel O'Rorke (Sunnyvale, CA); Shruti Narayan (Sunnyvale, CA)
Assignee: Extreme Networks, Inc.
H04L63/083H04L63/0435H04L63/062H04L63/068H04L63/0876H04L63/102H04W12/0023H04W12/04H04W12/06H04W48/02
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,005,836
App. No.
15/623,122
Granted
May 11, 2021
Kind
B2
Abstract

Techniques for seamlessly onboarding a wireless device. A system utilizing such techniques can include a key-based authentication system and a unique pre-shared key seamless onboarding system. A method utilizing such techniques can include key-based authentication management and unique pre-shared key seamless onboarding management.

Claims (59)

1. A method, comprising:

receiving, through a wireless network and from a wireless device of a plurality of wireless devices, authentication data generated using a common key for providing a plurality of network services to the plurality of wireless devices;

determining, based on the authentication data and the common key, whether an onboarding service is available to the wireless device using a pre-shared key that is uniquely associated with the plurality of wireless devices associated with a profile;

based on the determining, providing the pre-shared key to the wireless device through the wireless network over a connection established using the common key; and

onboarding the wireless device to provide a set of network services associated with the pre-shared key.

2. The method of claim 1 , further comprising configuring the wireless device to be authenticated using the pre-shared key absent intervention from a network administrator.

3. The method of claim 1 , further comprising:

controlling transmission of data to and from the wireless device in response to onboarding the wireless device using the pre-shared key.

4. The method of claim 1 , further comprising:

receiving network service access rights instructions indicating network service access rights for the wireless device in authenticating with the pre-shared key; and

updating key data to indicate an association of the network service access rights for the wireless device with the pre-shared key.

5. The method of claim 1 , further comprising:

determining a first media access control (MAC) address of the wireless device; and

binding the first MAC address to the pre-shared key for determining if the pre-shared key is compromised in response to onboarding using the pre-shared key and a second MAC address that is different than the first MAC address.

6. The method of claim 1 , further comprising:

determining a first media access control (MAC) address of the wireless device using the authentication data; and

binding the first MAC address to the pre-shared key for determining if the pre-shared key is compromised in response to onboarding using the pre-shared key and a second MAC address that is different than the first MAC address.

7. The method of claim 1 , further comprising:

determining a first media access control (MAC) address of the wireless device;

binding the first MAC address to the pre-shared key for determining if the pre-shared key is compromised in response to onboarding using the pre-shared key and a second MAC address that is different than the first MAC address; and

updating key data to indicate the binding of the first MAC address to the pre-shared key.

8. The method of claim 1 , further comprising providing the pre-shared key to the wireless device by displaying the pre-shared key at the wireless device to input or identify the pre-shared key for authenticating the wireless device.

9. The method of claim 1 , further comprising:

receiving disassociation instructions;

disassociating the wireless device from the pre-shared key in response to the disassociation instructions;

assigning a new pre-shared key to the wireless device; and

providing the new pre-shared key to the wireless device as part of onboarding the wireless device.

10. The method of claim 1 , further comprising determining, based on the authentication data and the common key, network service access rights associated with the common key or the pre-shared key.

11. The method of claim 1 , wherein the authentication data comprises at least one of a key, data generated using the key, user data describing the profile associated with the wireless device, and data of the wireless device that comprises a media access control (MAC) address of the wireless device.

12. A system, comprising:

a memory for storing operations;

one or more processors communicatively coupled to the memory and configured to perform the operations comprising:

receiving, through a wireless network from a wireless device of a plurality of wireless devices, authentication data generated using a common key for providing a plurality of network services to the plurality of wireless devices;

determining, based on the authentication data and the common key, whether an onboarding service is available to the wireless device using a pre-shared key that is uniquely associated with the plurality of wireless devices associated with a profile;

based on the determining, providing the pre-shared key to the wireless device through the wireless network over a connection established using the common key; and

onboarding the wireless device to provide a set of network services associated with the pre-shared key.

13. The system of claim 12 , wherein the operations further comprise configuring the wireless device to enable onboarding using the pre-shared key absent intervention from a network administrator.

14. The system of claim 12 , wherein the operations further comprise:

controlling transmission of data to and from the wireless device through the network services as part of onboarding the wireless device using the pre-shared key.

15. The system of claim 12 , wherein the operations further comprise:

receiving network service access rights instructions indicating network service access rights for the wireless device; and

updating key data to indicate an association of the network service access rights for the wireless device with the pre-shared key.

16. The system of claim 12 , wherein the operations further comprise:

determining a first media access control (MAC) address of the wireless device; and

binding the first MAC address to the pre-shared key for determining if the pre-shared key is compromised in response to onboarding using the pre-shared key and a second MAC address that is different than the first MAC address.

17. The system of claim 12 , wherein the operations further comprise:

determining a first media access control (MAC) address of the wireless device using the authentication data generated using the common key; and

binding the first MAC address to the pre-shared key for determining if the pre-shared key is compromised in response to onboarding using the pre-shared key and a second MAC address that is different than the first MAC address.

18. The system of claim 12 , wherein the operations further comprise providing the pre-shared key to the wireless device by displaying the pre-shared key at the wireless device to input or identify the pre-shared key for onboarding the wireless device.

19. The system of claim 12 , wherein the operations further comprise:

receiving disassociation instructions;

disassociating the wireless device from the pre-shared key in response to the disassociation instructions;

assigning a new pre-shared key to the wireless device; and

providing the new pre-shared key to the wireless device as part of onboarding the wireless device.

20. A non-transitory, tangible computer-readable device having instructions stored thereon that, when executed by at least one computing device, causes the at least one computing device to perform operations comprising:

receiving, through a wireless network from a wireless device of a set of wireless devices of a plurality of wireless devices, authentication data generated using a common key for providing a plurality of network services to the plurality of wireless devices;

determining, based on the authentication data and the common key, whether an onboarding service is available to the wireless device using a pre-shared key that is uniquely associated with the set of wireless devices associated with a profile;

based on the determining, providing the pre-shared key to the wireless device through the wireless network over a connection established using the common key; and

onboarding the wireless device to provide a set of network services associated with the pre-shared key.

Assignments (4)
AMENDED SECURITY AGREEMENT Recorded Aug 18, 2023
From: EXTREME NETWORKS, INC.; AEROHIVE NETWORKS, INC.
To: BANK OF MONTREAL
Reel/Frame 064782/0971 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 23, 2020
From: AEROHIVE NETWORKS, INC.
To: EXTREME NETWORKS, INC.
Reel/Frame 052473/0843 →
SECURITY INTEREST Recorded Aug 12, 2019
From: EXTREME NETWORKS, INC.; AEROHIVE NETWORKS, INC.
To: BANK OF MONTREAL
Reel/Frame 050023/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 14, 2017
From: HANAY, JOHN WILLIAM; O'RORKE, DANIEL; NARAYAN, SHRUTI
To: AEROHIVE NETWORKS, INC.
Reel/Frame 042711/0273 →
Continuity (2)
Provisional Application 62350158 · Jun 14, 2016
Related Publication 20170359332A1 · Dec 14, 2017
Cited By (2)
US 12,640,908 US 12,641,423