IP Library Granted Patent US 12,309,167
Granted Patent B2
US 12,309,167 · App. 18/132,747 · Granted May 20, 2025

Network access management

Inventor: Yaron Koral (Cherry Hill, NJ)
Assignee: AT&T Intellectual Property I, L.P.
H04L63/108H04L63/068
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,309,167
App. No.
18/132,747
Granted
May 20, 2025
Kind
B2
Abstract

Network access management can include receiving a request to enable network access for a guest user device at a geographic location associated with a gateway device. Connection parameters can be defined, the connection parameters including an effective-from date and time and an effective-to date and time. Credentials associated with the guest user device can be stored with data defining limits associated with the network access for the guest user device, the limits including a date and time limit. The gateway device can detect a guest login using the credentials; enable network access for the guest user device; apply, to the network access, the limits; and determine if the date and time limit is satisfied. When the date and time limit is exceeded, the network access can be terminated and the credentials can be revoked.

Claims (74)

1. A system comprising:

a processor; and

a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising

receiving a request to enable network access for a guest user device at a geographic location associated with a gateway device,

determining, for the network access for the guest user device, connection parameters, wherein the connection parameters comprise an effective-from date and time, and an effective-to date and time,

storing, at the gateway device, credentials associated with the guest user device, wherein the gateway device stores data defining limits associated with the network access for the guest user device, and wherein the limits comprise a date and time limit comprising a time range for which the credentials are valid,

detecting, at the gateway device, a guest login using the credentials,

enabling the network access for the guest user device,

applying, to the network access, the limits,

determining, at the gateway device, if the date and time limit is satisfied,

if a determination is made that the date and time limit are not satisfied, terminating the network access for the guest user device and revoking the credentials, and

if a determination is made that the date and time limit are satisfied, continuing to enable the network access for the guest user device.

2. The system of claim 1 , wherein the limits associated with the network access further comprise a time limit comprising a total duration for which the network access has been used.

3. The system of claim 1 , wherein the limits associated with the network access further comprise a data limit comprising a total amount of data transmitted by way of the network access.

4. The system of claim 1 , wherein the limits associated with the network access further comprise a data limit comprising a list of permissible sites and resources and a list of impermissible sites and resources for the guest user device to access using the network access.

5. The system of claim 1 , wherein determining the connection parameters comprises interacting with a user device associated with an owner of the gateway device, wherein the user device presents a user interface comprising options for defining:

the effective-from date and time;

the effective-to date and time;

time limits associated with the network access for the guest user device; and

data limits associated with the network access for the guest user device.

6. The system of claim 1 , wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising obtaining, from a network access management service, the credentials, wherein the network access management service generates the credentials by performing operations comprising:

receiving, from the gateway device, a management request, the management request comprising date and time information, user information, time information, and data limits;

creating the credentials based on the management request; and

providing a copy of the credentials to the gateway device.

7. The system of claim 6 , wherein revoking the credentials comprises:

generating an update that indicates that the credentials have been revoked; and

sending the update to the network access management service.

8. A method comprising:

receiving, at a gateway device comprising a processor, a request to enable network access for a guest user device at a geographic location associated with the gateway device;

determining, by the processor and for the network access for the guest user device, connection parameters, wherein the connection parameters comprise an effective-from date and time, and an effective-to date and time;

storing, by the processor and at the gateway device, credentials associated with the guest user device, wherein the gateway device stores data defining limits associated with the network access for the guest user device, and wherein the limits comprise a date and time limit comprising a time range for which the credentials are valid;

detecting, by the processor and at the gateway device, a guest login using the credentials;

enabling, by the processor, the network access for the guest user device;

applying, by the processor and to the network access, the limits;

determining, by the processor and at the gateway device, if the date and time limit are satisfied;

if a determination is made that the date and time limit are not satisfied, terminating, by the processor, the network access for the guest user device and revoking the credentials; and

if a determination is made that the date and time limit are satisfied, continuing, by the processor, to enable the network access for the guest user device.

9. The method of claim 8 , wherein the limits associated with the network access further comprise a time limit comprising a total duration for which the network access has been used.

10. The method of claim 8 , wherein the limits associated with the network access further comprise a data limit comprising a total amount of data transmitted by way of the network access.

11. The method of claim 8 , wherein the limits associated with the network access further comprise a data limit comprising a list of permissible sites and resources and a list of impermissible sites and resources for the guest user device to access using the network access.

12. The method of claim 8 , wherein determining the connection parameters comprises interacting with a user device associated with an owner of the gateway device, wherein the user device presents a user interface comprising options for defining:

the effective-from date and time;

the effective-to date and time;

time limits associated with the network access for the guest user device; and

data limits associated with the network access for the guest user device.

13. The method of claim 8 , further comprising:

obtaining, from a network access management service, the credentials, wherein the network access management service generates the credentials by performing operations comprising:

receiving, from the gateway device, a management request, the management request comprising date and time information, user information, time information, and data limits;

creating the credentials based on the management request; and

providing a copy of the credentials to the gateway device.

14. A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:

receiving a request to enable network access for a guest user device at a geographic location associated with a gateway device;

determining, for the network access for the guest user device, connection parameters, wherein the connection parameters comprise an effective-from date and time, and an effective-to date and time;

storing, at the gateway device, credentials associated with the guest user device, wherein the gateway device stores data defining limits associated with the network access for the guest user device, and wherein the limits comprise a date and time limit comprising a time range for which the credentials are valid;

detecting, at the gateway device, a guest login using the credentials;

enabling the network access for the guest user device;

applying, to the network access, the limits;

determining, at the gateway device, if the date and time limit are satisfied;

if a determination is made that the date and time limit are not satisfied, terminating the network access for the guest user device and revoking the credentials; and

if a determination is made that the date and time limit are satisfied, continuing to enable the network access for the guest user device.

15. The computer storage medium of claim 14 , wherein the limits associated with the network access further comprise a time limit comprising a total duration for which the network access has been used.

16. The computer storage medium of claim 14 , wherein the limits associated with the network access further comprise a data limit comprising a total amount of data transmitted by way of the network access.

17. The computer storage medium of claim 14 , wherein the limits associated with the network access further comprise a data limit comprising a list of permissible sites and resources and a list of impermissible sites and resources for the guest user device to access using the network access.

18. The computer storage medium of claim 14 , wherein determining the connection parameters comprises interacting with a user device associated with an owner of the gateway device, wherein the user device presents a user interface comprising options for defining:

the effective-from date and time;

the effective-to date and time;

time limits associated with the network access for the guest user device; and

data limits associated with the network access for the guest user device.

19. The computer storage medium of claim 14 , wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising obtaining, from a network access management service, the credentials, wherein the network access management service generates the credentials by performing operations comprising:

receiving, from the gateway device, a management request, the management request comprising date and time information, user information, time information, and data limits;

creating the credentials based on the management request; and

providing a copy of the credentials to the gateway device.

20. The computer storage medium of claim 19 , wherein revoking the credentials comprises: generating an update that indicates that the credentials have been revoked; and

sending the update to the network access management service.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 10, 2023
From: KORAL, YARON
To: AT&T INTELLECTUAL PROPERTY I, L.P.
Reel/Frame 063277/0167 →
Continuity (1)
Related Publication 20240340289A1 · Oct 10, 2024
References Cited (13)
US 10606224B2 · Rumble · 2020 [cited by examiner]
US 11361101B2 · Vas · 2022 [cited by examiner]
US 12147559B1 · Rangappa · 2024 [cited by examiner]
US 20130318573A1 · Reunamaki · 2013 [cited by examiner]
US 20140373121A1 · Wied · 2014 [cited by examiner]
US 20150128219A1 · Guday · 2015 [cited by examiner]
US 20170076523A1 · Rumble · 2017 [cited by examiner]
US 20180307858A1 · Vas · 2018 [cited by examiner]
US 20190297115A1 · Lin · 2019 [cited by examiner]
US 20210406382A1 · Shah · 2021 [cited by examiner]
US 20220198860A1 · Truong · 2022 [cited by examiner]
US 20230128367A1 · Iila · 2023 [cited by examiner]
US 20230283682A1 · Scarborough · 2023 [cited by examiner]