公开(公告)号：US20200382485A1

公开(公告)日：2020-12-03

申请号：US16426420

申请日：2019-05-30

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Antoni Milton ,  Rajesh Kumar Ganapathy Achari ,  Bhagya Prasad Nittur

IPC: H04L29/06 ,  G06F16/245

Abstract: An authentication server associated with a network authenticates a primary user credential responsive to a request from a client device to access the network. The authentication server queries a database server for contact information for obtaining a secondary user credential. The contact information is provided to a third-party authentication server to obtain and authenticate the secondary user credential. In response to both the third-party authentication server obtaining and authenticating the secondary user credential successfully and the authentication server authenticating the primary user credential successfully, the client device is granted access to the network.

公开(公告)号：US10581827B2

公开(公告)日：2020-03-03

申请号：US16260390

申请日：2019-01-29

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Venkatraju Tumkur Venkatanaranappa ,  Rajesh Kumar Ganapathy Achari ,  Anoop Kumaran Nair ,  Santhosh Cheeniyil

IPC: G06F7/04 ,  G06F15/16 ,  G06F17/30 ,  H04L29/06

Abstract: In general, in one aspect, embodiments relate to receiving, by a system comprising one or more network devices, a first client authentication information comprising a first indication that a first client device was successfully authenticated by a first authentication server based on credentials provided by the first client device, and forwarding, by the system, the first client authentication information to a second authentication server without determining that the client device was already successfully authenticated by the first authentication server based on the credentials provided by the first client device. The operations further include receiving, by the system from the second authentication server, a second indication that the first client device was successfully authenticated, and based on the second indication received by the system from the second authentication server, granting, by the system, network access to the first client device.

公开(公告)号：US20200067777A1

公开(公告)日：2020-02-27

申请号：US16106789

申请日：2018-08-21

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Sebastien Tandel ,  Rajesh Kumar Ganapathy Achari ,  Anoop Kumaran Nair

IPC: H04L12/24 ,  H04L12/26

Abstract: An example non-transitory memory resource including instructions executable by the processing resource to monitor device information for a plurality of devices, wherein the plurality of devices comprise at least one device of an unknown device type, identify behavior attributes for the plurality of devices based on the monitored device information, cluster the plurality of devices into groups based on the behavior attributes, identify a device type for the plurality of devices based on the group of the plurality of devices; and present identifiers for each of the plurality of devices, based on the device type of the plurality of devices.

公开(公告)号：US11418515B2

公开(公告)日：2022-08-16

申请号：US16429375

申请日：2019-06-03

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Rajesh Kumar Ganapathy Achari ,  Anoop Kumaran Nair ,  Pattabhi Attaluri ,  Venkatesh Ramachandran ,  Bhagya Prasad Nittur ,  Antoni Milton

IPC: H04L9/40 ,  H04L41/0806

Abstract: Methods and systems for specifying and enforcing network policies are provided. One method for configuring a network that includes a plurality of heterogeneous network access devices includes creating a network enforcement profile based on at least one enforcement policy, and determining a network access device group of the plurality of heterogeneous network access devices that are capable of managing the enforcement profile. The method further includes providing vendor-specific configuration parameters for at least one network access device of the network access device group so as to cause the network to manage the network enforcement profile, and applying the vendor-specific configuration parameters to the at least one network access device.

公开(公告)号：US11201864B2

公开(公告)日：2021-12-14

申请号：US16429462

申请日：2019-06-03

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Rajesh Kumar Ganapathy Achari ,  Anoop Kumaran Nair ,  Venkatesh Ramachandran ,  Pattabhi Attaluri ,  Bhagya Prasad Nittur ,  Antoni Milton

IPC: G06F21/44 ,  G06F21/45 ,  H04L29/06 ,  G06F21/71

Abstract: Methods and systems for providing vendor agnostic captive portal authentication in a network that includes a plurality of network access devices are provided. For instance, one method includes receiving a redirect request for a communication between a first user-terminal and a first network access device, the redirect request including at least one of a vendor-specific item of information of the first network access device and an Internet Protocol (IP) address of the first network access device. The method further includes comparing the at least one of the vendor-specific item of information of the first network access device and the IP address of the first network access device against each of a plurality of entries of a network access device database, and providing the first user-terminal access to a captive portal page in response to an appropriate match.

公开(公告)号：US20190173871A1

公开(公告)日：2019-06-06

申请号：US16260390

申请日：2019-01-29

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Venkatraju Tumkur Venkatanaranappa ,  Rajesh Kumar Ganapathy Achari ,  Anoop Kumaran Nair ,  Santhosh Cheeniyil

IPC: H04L29/06

CPC classification number: H04L63/0815

Abstract: In general, in one aspect, embodiments relate to receiving, by a system comprising one or more network devices, a first client authentication information comprising a first indication that a first client device was successfully authenticated by a first authentication server based on credentials provided by the first client device, and forwarding, by the system, the first client authentication information to a second authentication server without determining that the client device was already successfully authenticated by the first authentication server based on the credentials provided by the first client device. The operations further include receiving, by the system from the second authentication server, a second indication that the first client device was successfully authenticated, and based on the second indication received by the system from the second authentication server, granting, by the system, network access to the first client device.