Granted Patent B2

US 11,399,283 · App. 16/546,014 · Granted Jul 26, 2022

Inventors: Swaminathan Anantha (Mountain View, CA); Mickael James Graham (Bellevue Hill, AU); Anvesh Reddy Podduturi (San Jose, CA)

Assignee: CISCO TECHNOLOGY, INC.

H04W12/069H04L63/0807H04L63/0892H04W4/80H04W76/11H04W84/12

Abstract

Claims (69)

1. A computer-implemented method, comprising:

receiving a request to reserve a shared workspace for a specific time period, the shared workspace including at least access to a physical location and access to a wireless local area network (WLAN);

provisioning a service set identifier (SSID) to be activated for the specific time period in an access point to enable a first client device to access the WLAN for a specified time period, wherein upon expiration of the specific time period the SSID is disabled;

transmitting the SSID and authentication data for receipt by the first client device;

transmitting access, via the SSID, to and automated entry device at the physical location for receipt by the first client device;

in response to successfully authenticating the first client device, enabling the first client device to authorize a second client device to access the WLAN; and

providing the second client device with access to the WLAN upon authorization by the first client device.

2. The computer-implemented method of claim 1 , wherein the authentication data includes an authentication token for the SSID.

3. The computer-implemented method of claim 2 , further comprising:

generating first instructions to activate the SSID at a start time of the specified time period;

generating second instructions to disable the SSID at an end time of the specified time period;

causing the first instructions to be executed at the start time; and

causing the second instructions to be executed at the end time.

4. The computer-implemented method of claim 1 , further comprising:

notifying one or more second access points of the WLAN that the first client device is an authorization server for the SSID.

5. The computer-implemented method of claim 1 , wherein the authentication data includes a Pre-Shared Key (PSK) that is associated with the first client device and the SSID and that is received from an authentication, authorization, and accounting (AAA) server.

6. The computer-implemented method of claim 5 , further comprising:

causing the PSK to be activated at a start time of the specified time period; and

causing the PSK to be disabled at an end time of the specified time period.

7. The computer-implemented method of claim 1 , further comprising:

receiving a request from the second client device to connect to the WLAN via the SSID;

transmitting a request to the first client device to authorize the second client device to access the WLAN via the SSID; and

receiving the authentication data from the first client device in response to the first client device authorizing the second client device to access the WLAN.

8. The computer-implemented method of claim 7 , further comprising:

receiving location data of the second client device,

wherein transmitting the request to the first client device to authorize the second client device to access the WLAN via the SSID occurs in response to determining whether the second client device is within a specified distance from the first client device based on the location data.

9. The computer-implemented method of claim 1 , further comprising:

configuring the WLAN and a virtual local area network (VLAN) to allow a client device that connects to the WLAN via the SSID to access one or more third devices connected to the VLAN.

10. The computer-implemented method of claim 1 , further comprising:

provisioning the SSID in the first client device for automatic connection to and authentication by the access point.

11. The computer-implemented method of claim 1 , further comprising:

receiving a request for access to the WLAN for the first client device for the specified time period from a booking system; and

transmitting the SSID and the authentication data to the booking system in response to the request for access to the WLAN for the first client device for the specified time period.

12. The computer-implemented method of claim 11 , further comprising:

receiving, by an application executing on the client device, a request to reserve a space at the physical location for the specified time period;

receiving, by the application, the SSID and the authentication data; and

provisioning, by the application, automatic connection and authentication of the first client device for access to the WLAN by the one or more access points using the SSID and the authentication data.

13. A system, comprising:

one or more processors; and

memory including instructions that, when executed by the one or more processors, cause the system to:

receive a request to reserve a shared workspace for a specific time period, the shared workspace including at least access to a physical location and access to a wireless local area network (WLAN);

provision a service set identifier (SSID) to be activated for the specific time period in an access point to enable a first client device to access the WLAN for a specified time period, wherein upon expiration of the specific time period the SSID is disabled;

transmit the SSID and authentication data for receipt by the first client device;

transmit access, via the SSID, to and automated entry device at the physical location for receipt by the first client device;

in response to successfully authenticating the first client device, enable the first client device to authorize a second client device to access the WLAN; and

provide the second client device with access to the WLAN upon authorization by the first client device.

14. The system of claim 13 , wherein the instructions, when executed, further cause the system to:

receive the SSID and the authentication data from the first client device over Bluetooth; and

register the first client device to receive one or more notifications from the access point over Bluetooth.

15. The system of claim 13 , wherein the instructions, when executed, further cause the system to:

add an identifier of the second client device to a whitelist that is stored on the first client device and that automatically authorizes client devices identified in the whitelist to access the WLAN via the SSID.

16. The system of claim 13 , wherein the instructions, when executed, further cause the system to:

add an identifier of the second client device to a plurality of whitelists that are stored on a plurality of access points of the network and that automatically authorizes client devices identified in each of the plurality of whitelists to access the WLAN via the SSID.

17. A non-transitory computer-readable storage medium including instructions that, upon being executed by one or more processors of a system, cause the system to:

receive a request to reserve a shared workspace, the shared workspace including at least access to a physical location and access to a wireless local area network (WLAN);

provision a service set identifier (SSID) to be activated for the specific time period in an access point to enable a first client device to access the WLAN for a specified time period, wherein upon expiration of the specific time period the SSID is disabled;

transmit the SSID and authentication data for receipt by the first client device;

transmit access, via the SSID, to and automated entry device at the physical location for receipt by the first client device;

in response to successfully authenticating the first client device, enable the first client device to authorize a second client device to access the WLAN; and

provide the second client device with access to the WLAN upon authorization by the first client device.

18. The non-transitory computer-readable storage medium of claim 17 , wherein the instructions, when executed, further cause the system to:

add an identifier of the first client device and the SSID to a Guest Confirmation Server table of the access point.

19. The non-transitory computer-readable storage medium of claim 18 , wherein the instructions, when executed, further cause the system to:

receive a request from the second client device to connect to the WLAN via the SSID;

transmit a request to one or more client devices identified in the Guest Confirmation Server table to authorize the second client device to access the WLAN via the SSID; and

receive the authentication data from the one or more client devices in response to the one or more devices authorizing the second client device to access the WLAN.

20. The non-transitory computer-readable storage medium of claim 18 , wherein the instructions, when executed, further cause the system to:

encrypt first network traffic between the access point and the first client device; and

encrypt second network traffic between the access point and the second client device.

Assignments (1)

Continuity (2)

Cited By (10)

US 12,457,493 US 12,461,801 US 12,463,802 US 12,470,372 US 12,476,793 US 12,537,829 US 12,640,908 US 12,641,423 US 12,683,988 US 12,717,939