TOKEN-BASED DEVICE TRACKING
    2.
    发明申请

    公开(公告)号:US20220385661A1

    公开(公告)日:2022-12-01

    申请号:US17332589

    申请日:2021-05-27

    Abstract: Embodiments herein describe disconnecting, by an access node, a first device having a first media access control (MAC) address due to a network violation and receiving, by the access node, information about a second device having a second MAC address different from the first MAC address. In one embodiment, the information is generated by a certificate server based on a token generated by the second device. Further, when the access node determines, based on the information, that the second device is the first device, the access node denies a connection request from the second device.

    DIFFERENTIATED SERVICE IN A FEDERATION-BASED ACCESS NETWORK

    公开(公告)号:US20230007050A1

    公开(公告)日:2023-01-05

    申请号:US17305235

    申请日:2021-07-01

    Abstract: Differentiated service in a federation-based access network is provided by receiving, with a request for access to a wireless network offering at least a two different service levels based on user identities, a set of user credentials from a User Equipment (UE); forwarding, for authentication, the set of user credentials to an identity provider in an identity federation with the wireless network, wherein the identity provider is independent from the wireless network; in response to determining that the set of user credentials indicate a realm known to be associated with a given service level, providing network access to the UE according to the given service level; and in response to determining that the given service level is not a highest service level in the wireless network, transmitting a list of preferred realms to the UE that are associated with higher service levels than the given service level.

    USER TRUST SCORING FOR NETWORK ACCESS CONTROL

    公开(公告)号:US20220337629A1

    公开(公告)日:2022-10-20

    申请号:US17301928

    申请日:2021-04-19

    Abstract: A method includes receiving, at an access node of a local network, a connection request from a device and in response to the connection request, establishing a connection with an identity provider. The device, the access node, the local network, and the identity provider are members of an identity federation. The method further includes receiving an indication that the device previously violated a network policy of a network different from the local network and after the device is authenticated with the identity provider, determining, by the access node and based on the indication, whether to allow the device to communicate over the access node.

    TRUSTED ROAMING FOR FEDERATION-BASED NETWORKS

    公开(公告)号:US20230247427A1

    公开(公告)日:2023-08-03

    申请号:US18297136

    申请日:2023-04-07

    Abstract: Techniques for trusted roaming between identity federation based networks. A first wireless access point (AP) receives a roaming request from a wireless station (STA), to roam from the first AP to a second AP. The first AP is associated with a first access network provider (ANP), the second AP is associated with a second ANP, and the first ANP is different from the second ANP. Authentication information relating to the STA is transmitted from the first ANP to the second ANP using a trusted connection. The trusted connection was previously established between the first ANP and the second ANP based on a query to an identity federation to which both the first and second ANP belong. The STA is de-associated from the first AP. The STA is re-associated at the second AP using the transmitted authentication information.

    FEDERATION POLICY EXCHANGE
    10.
    发明申请

    公开(公告)号:US20230021627A1

    公开(公告)日:2023-01-26

    申请号:US17443287

    申请日:2021-07-23

    Abstract: Federation policy exchange is provided in response to receiving a sharing query from an Access Point (AP) indicating that an associated wireless network supports federated identities with data sharing, determining whether the sharing query is within sharing preferences; and in response to determining that the sharing query is within the sharing preferences, transmitting, to the AP, a positive response for identity sharing that authorizes collection and sharing of identity data with at least one entity identified in a sharing policy for the associated wireless network. In various embodiments, federation policy exchange includes transmitting a support notification, via an AP, indicating support for federated identities with data sharing within a wireless network associated with the AP; and in response to receiving a first identify sharing preference from a User Equipment (UE) that indicates that negotiation is preferred, transmitting a sharing policy for the wireless network to the UE.

Patent Agency Ranking