IP Library Granted Patent US 10,477,463
Granted Patent B2
US 10,477,463 · App. 15/289,873 · Granted Nov 12, 2019

Adaptive ownership and cloud-based configuration and control of network devices

Inventors: James Roskind (Redwood City, CA); Wan-Teh Chang (Sunnyvale, CA)
Assignee: Google LLC
H04W48/16G06F9/5072G06F9/5077G06F21/604H04L67/10H04L67/34H04W12/06H04W84/12H04W88/16
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,477,463
App. No.
15/289,873
Granted
Nov 12, 2019
Kind
B2
Abstract

Methods, systems, and computer program products for cloud-based adaptive configuration and control of a network device include, detecting an access by a user through the network device to a cloud-based service; and responsive to the detected access, configuring the network device to be controlled by the user via a cloud-based configuration controller. Further implementations include, receiving a configuration request from the network device, wherein the configuration request includes access information pertaining to an access made by a user to a cloud-based service; determining a cloud-based identity of the user based upon the received access information; associating the cloud-based identity with an ownership identifier; forming one or more instructions to configure the network device with the ownership identifier as an owner of the network device; and transmitting the one or more instructions to the network device.

Claims (74)

1. A method comprising:

receiving, at a cloud-based configuration controller, a configuration request from a wireless local area network gateway, the configuration request including a first unique stream identifier and access information pertaining to an access made by a client device associated with a user to a cloud-based service and including a second unique stream identifier, the cloud-based service being other than the cloud-based configuration controller;

determining a cloud-based identity of the user based upon the received access information;

associating the cloud-based identity with an ownership identifier;

forming one or more instructions to configure the wireless local area network gateway with the ownership identifier as an owner of the wireless local area network gateway and to configure one or more parameters of a network interface of the wireless local area network gateway; and

transmitting the one or more instructions to the wireless local area network gateway if the first unique stream identifier matches the second unique stream identifier.

2. The method of claim 1 , wherein the received access information includes one or more login credentials associated with the user, and wherein the one or more login credentials are used to successfully authenticate the client device associated with the user to the cloud-based service.

3. The method of claim 2 , wherein the determining the cloud-based identity comprises:

determining that the client device associated with the user accessed the cloud-based service through the wireless local area network gateway; and

obtaining the cloud-based identity from a cloud-based identity provider associated with the cloud-based service.

4. The method of claim 1 , wherein the ownership identifier does not include information that can identify the user.

5. The method of claim 1 , wherein the forming one or more instructions includes configuring one or more of the instructions to grant controlling user access privileges to the client device associated with the user.

6. The method of claim 5 , wherein the forming one or more instructions further includes configuring one or more of the instructions to set one or more operating parameters of the wireless local area network gateway according to a configuration profile associated with the cloud-based identity.

7. The method of claim 1 , further comprising:

receiving, at the cloud-based configuration controller, a request from an operator to reconfigure the wireless local area network gateway;

authenticating the operator to determine the operator's cloud-based identity;

determining that the operator's cloud-based identity is associated with the ownership identifier;

obtaining reconfiguration parameters from the operator; and

transmitting the reconfiguration parameters to the wireless local area network gateway.

8. The method of claim 1 , further comprising:

receiving, at the cloud-based configuration controller, a request from the client device associated with the user, the user being a first user, to delegate control of the wireless local area network gateway to a second user;

confirming that the first user is at present associated with the ownership identifier;

determining a second authenticated cloud-based identity, wherein the second authenticated cloud-based identity corresponds to the second user; and

delegating one or more control privileges of the wireless local area network gateway to the second user.

9. The method of claim 1 , wherein the first unique stream identifier or the second unique stream identifier comprises:

a public Internet Protocol (IP) address and a port of the wireless local area network gateway.

10. The method of claim 1 , wherein the first unique stream identifier or the second unique stream identifier comprises:

a stream sequence number within a transport protocol.

11. A system comprising:

a cloud-based configuration controller including:

a processor;

a configuration request receiving module executed by the processor and configured to receive a configuration request from a wireless local area network gateway, the configuration request including access information pertaining to an access made by a user to a cloud-based service, the cloud-based service being other than the cloud-based configuration controller;

a user identity module executed by the processor and configured to determine a cloud-based identity of the user based upon the received access information;

a pseudo-anonymous identity module executed by the processor and configured to associate the cloud-based identity of the user with an ownership identifier;

a configuration generation module executed by the processor and configured to form one or more instructions to configure the wireless local area network gateway with the ownership identifier as an owner of the wireless local area network gateway and to configure one or more parameters of a network interface of the wireless local area network gateway; and

a transmission module executed by the processor and configured to transmit the one or more instructions to the wireless local area network gateway if a first unique stream identifier associated with a request for authentication of the user matches a unique second stream identifier associated with the configuration request.

12. The system of claim 11 , wherein the received access information includes one or more login credentials associated with the user, wherein the one or more login credentials are used to successfully authenticate a client device associated with user to the cloud-based service, and wherein to determine the cloud-based identity, the user identity module is configured to:

determine that the user accessed the cloud-based service through the wireless local area network gateway; and

obtain the cloud-based identity from a cloud-based identity provider associated with the cloud-based service.

13. The system of claim 11 , wherein the ownership identifier does not include information that can identify the user.

14. The system of claim 11 , wherein to form the one or more instructions, the configuration generation module is configured to:

configure one or more of the instructions to grant controlling user access privileges to the user; and

configure one or more of the instructions to set one or more operating parameters of the wireless local area network gateway according to a configuration profile associated with the cloud-based identity.

15. The system of claim 11 , further comprising a reconfiguration module executed by the processor and configured to:

receive, at the cloud-based configuration controller, a request from an operator to reconfigure the wireless local area network gateway;

authenticate the operator to determine the operator's cloud-based identity;

determine that the operator's cloud-based identity is associated with the ownership identifier;

obtain reconfiguration parameters from the operator; and

transmit the reconfiguration parameters to the wireless local area network gateway.

16. The system of claim 11 , further comprising a delegation module executed by the processor and configured to:

receive, at the cloud-based configuration controller, a request from the user, who is a first user, to delegate control of the wireless local area network gateway to a second user;

confirm that the first user is at present associated with the ownership identifier;

determine a second authenticated cloud-based identity, wherein the second authenticated cloud-based identity corresponds to the second user; and

delegate one or more control privileges of the wireless local area network gateway to the second user.

17. The system of claim 11 , wherein the first unique stream identifier or the second unique stream identifier comprises:

a public Internet Protocol (IP) address and a port of the wireless local area network gateway; or

a stream sequence number within a transport protocol.

18. A non-transitory computer readable storage medium comprising instructions for causing a processor to execute a method comprising:

receiving, at a cloud-based configuration controller, a configuration request from a wireless local area network gateway, the configuration request including access information pertaining to an access made by a user to a cloud-based service, the cloud-based service being other than the cloud-based configuration controller;

determining a cloud-based identity of the user based upon the received access information;

associating the cloud-based identity with an ownership identifier, the ownership identifier not including information that can identify the user;

forming one or more instructions to configure the wireless local area network gateway with the ownership identifier as an owner of the wireless local area network gateway and to configure one or more parameters of a network interface of the wireless local area network gateway; and

transmitting the one or more instructions to the wireless local area network gateway if a first unique stream identifier associated with a request for authentication matches a second unique stream identifier associated with the configuration request.

19. The non-transitory computer readable storage medium of claim 18 , the method further comprising:

receiving, at the cloud-based configuration controller, a request from an operator to reconfigure the wireless local area network gateway;

authenticating the operator to determine the operator's cloud-based identity;

determining that the operator's cloud-based identity is associated with the ownership identifier;

obtaining reconfiguration parameters from the operator; and

transmitting the reconfiguration parameters to the wireless local area network gateway.

20. The non-transitory computer readable storage medium of claim 18 , the method further comprising:

receiving, at the cloud-based configuration controller, a request from a client device associated with the user, the user being a first user, to delegate control of the wireless local area network gateway to a second user;

confirming that the first user is at present associated with the ownership identifier;

determining a second authenticated cloud-based identity, wherein the second authenticated cloud-based identity corresponds to the second user; and

delegating one or more control privileges of the wireless local area network gateway to the second user.

Assignments (2)
CHANGE OF NAME Recorded Oct 5, 2017
From: GOOGLE INC.
To: GOOGLE LLC
Reel/Frame 044129/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 28, 2016
From: ROSKIND, JAMES; CHANG, WAN-TEH
To: GOOGLE INC.
Reel/Frame 040160/0506 →
Continuity (2)
Division 13460707 · Apr 30, 2012
Related Publication 20170026902A1 · Jan 26, 2017