US20090293106A1 - Method and apparatus for controlling wireless network access privileges based on wireless client location - Google Patents
Method and apparatus for controlling wireless network access privileges based on wireless client location Download PDFInfo
- Publication number
- US20090293106A1 US20090293106A1 US12/474,020 US47402009A US2009293106A1 US 20090293106 A1 US20090293106 A1 US 20090293106A1 US 47402009 A US47402009 A US 47402009A US 2009293106 A1 US2009293106 A1 US 2009293106A1
- Authority
- US
- United States
- Prior art keywords
- wireless client
- access
- location
- access privileges
- privileges
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/102—Entity profiles
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0227—Filtering policies
- H04L63/0254—Stateful filtering
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/107—Network architectures or network communication protocols for network security for controlling access to devices or network resources wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/108—Network architectures or network communication protocols for network security for controlling access to devices or network resources when the policy decisions are valid for a limited amount of time
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/60—Context-dependent security
- H04W12/69—Identity-dependent
- H04W12/79—Radio fingerprint
Definitions
- This invention relates to wireless networks and, more particularly, to controlling access privileges of wireless clients that either attempt to access the network or are connected to the network, but change their status.
- Wireless networks that link together multiple computers are commonplace and the technology for implementing such networks is rapidly growing.
- the common names for such networking technology are “wireless networking”, “WiFi” or “802.11 networking.”
- WiFi Wireless Fidelity
- 802.11 networking The big advantage of wireless networking is simplicity, because it allows computers to be connected anywhere in a home or office without the need for physical wires, thereby allowing the computers to be mobile.
- the computers called “wireless clients”, connect to the network using broadcast radio signals which can travel up to distances of approximately 100 feet.
- Wireless networks are generally governed by one of several standards promulgated by the Institute of Electrical and Electronics Engineers (IEEE).
- the basic standard is denoted as the 802.11 standard and covers wireless networks.
- the standard has several different versions labeled by a, b and g notations.
- the different standard versions differ in several respects, including the broadcast signal frequency, transmission speed and data coding techniques.
- the first wireless networking systems to reach the marketplace were constructed according to the 802.11b standard.
- Equipment that conforms to the 802.11b standard transmits at 2.4 GHz, can handle data transmission speeds up to 11 megabits per second and uses a data coding technique called “complementary code keying”.
- the 802.11a standard next appeared.
- Equipment conforming to this standard operates at 5 GHz, can handle up to 54 megabits per second and uses a data coding technique called “orthogonal frequency-division multiplexing” (OFDM).
- OFDM orthogonal frequency-division multiplexing
- the 802.11g standard has characteristics of both the 802.11a and 802.11b standards in that conforming equipment operates at 2.4 Ghz, but has data transmission speeds of 54 megabits per second and uses OFDM encoding.
- Wireless communications are usually designed to take place in a localized area quite often via a local communications network.
- a localized area may be a building, an area within a building, an area comprising several buildings, outdoor areas, or a combination of indoor and outdoor areas.
- persons outside of the localized area can often receive the signal and, thus, communicate with the network.
- information on the network is confidential and the ability of unauthorized persons to attach to the network is a serious problem.
- a common technique for enhancing the security of a wireless network is to encode the information broadcast via the radio-frequency signals with a WEP key.
- WEP stands for “Wired Equivalent Privacy”, and is an encryption standard that is part of the 802.11 standard.
- Another technique is to track the physical location of the mobile equipment and disconnect it from the network if the equipment strays outside of a predetermined localized area.
- the communication between mobile wireless devices and the local area network is often performed using devices, such as “access points” (APs) that are attached to the LAN.
- the APs are communication ports for wireless devices, which broadcast the radio-frequency signals to, and receive the radio-frequency signals from, the wireless clients.
- the APs pass messages received from the wireless device across the LAN to other servers, computers, applications, subsystems or systems, as appropriate.
- the APs are coupled to one or more network servers, which manage the message traffic flow.
- Application servers may be coupled to or accessed via the network servers, to provide data or typical application functionality to the wireless device.
- Detection and location within a defined local area is often performed using a LAN to which a set of sensors is attached.
- the local area network is equipped with a plurality of radio-frequency signal sensors, which may be incorporated into the access points or may be separate from the access points.
- RF fingerprinting a digital definition of the physical localized area is first developed and then a statistical signal strength model is developed to provide a context within which the detection and tracking will occur. Then the actual radio-frequency signal strength as measured at the sensors is compared to the model to calculate the physical location of each device.
- the digital definition of the localized area is comprised of a set of defined regions, areas or locations (collectively referred to as “locales”) taking into account various obstructions. Once the digital form of the localized area is formed, the locales are defined and the statistical signal strength model is then defined.
- the signal strength model can be determined.
- the signal strength model defines, for each access point within the localized area, a pattern of signal strength reception that is anticipated from a mobile device transmitting within the area, taking into account the obstructions and placement of the access points.
- the signal strength model can be created by actually installing sensors in the physical space and then measuring the strength of signals received at the sensors as a transmitting wireless client moves through the area.
- simulated access points and simulated wireless client readings can be used to generate the signals strength model.
- the location of a wireless client can be determined by collecting actual signal strength data from the device as it moves about or resides in the localized area and comparing the actual data against values predicted by the signal strength model.
- the RF fingerprinting process is described in more detail in U.S. Pat. No. 6,674,403, the contents of which are hereby incorporated in their entirety by reference.
- location techniques could be used.
- some known location techniques use the time of arrival of signals or differences between the time of arrival of signals from the wireless device at the APs to calculate the location of the wireless device. For example, such systems are described in U.S. Pat. Nos. 6,801,782 and 6,756,940.
- the access point through which a device attaches to the network determines the access privileges that will be accorded to the device based on a criteria set, such as the ID and physical location of the device requesting network access, the access point through which the device is connected to the network and user credentials.
- the criteria set is used to determine network access privileges that can include access (or lack thereof to different portions of the network, access to particular local hosts, access to the Internet, access to particular hosts on the Internet, access to particular services on the Internet (filtered either by port or by stateful protocol analysis), restrictions on bandwidth consumption, flagging of traffic with particular quality of service benefits or restrictions, or any number of other network configuration parameters.
- the network access privileges dynamically change in an appropriate manner. Similarly, if the network access privileges for that criteria set change, then the network access privileges for a device with that criteria set would change to conform. In some cases, when enough information has not been collected to accurately determine the location of a device, the device would be assigned default network access privileges.
- an access point contacts an access server on the network and requests network access privileges that should be provided to the device requesting access.
- the access server publishes the network access privilege information to all access points, either in response to a poll by an access point or asynchronously.
- VLANs virtual local area networks
- each device is assigned to a particular VLAN.
- Network access privileges can then be assigned to a particular VLAN.
- a VLAN is created by tagging each data packet or frame with an ID code associated with a particular VLAN. Special access points are used that detect the tag and use the VLAN ID code to determine the network access privileges accorded to the VLAN and, thus, to the user.
- network access restrictions can be applied by another device in the data path, such as a switch, router or gateway.
- restrictions could also be applied by a stateful packet filter.
- FIG. 1 is a block schematic diagram showing typical components in a wireless network.
- FIG. 2 is a more detailed block schematic diagram of a server in the system of FIG. 1 incorporating a location system and an access server.
- FIG. 3 is a flowchart showing the steps in an illustrative process for applying network access privileges to wireless clients in accordance with the principles of the invention.
- FIG. 1 is a block schematic diagram of a typical wireless network 100 .
- Two wireless clients, 102 and 104 are shown.
- the wireless clients 102 and 104 are linked to the network 100 by means of access points of which two access points 108 and 112 are illustrated in the figure.
- access points 108 and 112 are illustrated in the figure.
- Those skilled in the art would understand that at least one access point is required, but typical networks would have many access points.
- the access points 108 and 112 are connected to a network 116 which can be a LAN, such as an Ethernet network, or another type of network.
- the network 116 may also have other devices, such as servers 118 and 120 connected to it.
- Network 116 may further be connected to another network, such as a WAN or the Internet via a router 114 .
- One or more signal sensors may also be connected to the network 116 , of which two sensors, 106 and 110 , are shown. These sensors measure the signal strength of the RF signal generated by the wireless clients 102 and 104 and are used by a conventional location tracking system, for example, an RF fingerprinting system as described above. As known in the art, the sensors 106 and 110 may also be integrated into the access points 108 and 112 .
- the location tracking system typically operates on one of the servers, such as server 118 . In accordance with the principles of the invention, the server 118 may also incorporate an access control system.
- the access control system operates when a wireless client, such as client 102 connects to a wireless access point, such as access point 108 .
- Access point 108 then contacts the access control server 118 and requests information on the network access privileges that should be provided to the client 102 .
- the server then accesses a database to retrieve the privileges assigned to the client based on information identifying the client, the device location, the access point to which the client is connected and other user authentication credentials.
- the wireless client device can be identified by using the device Media Access Control (MAC) address as a client device ID.
- the access point is identified by its network IP address.
- the additional information can include user credentials. This information is sent to the access control server with the request.
- information that identifies the wireless client may be sent directly from the wireless client, via the access point, to the access control server.
- FIG. 2 A more detailed view of server 118 incorporating the access system is shown in FIG. 2 and the process performed by the system is shown in FIG. 3 .
- the process begins in step 300 and proceeds to step 302 where a wireless client requests access to the network from a wireless access point.
- the wireless access point requests access to the network from the access system and specifically from an access server 210 over the network 208 as shown in step 304 .
- the access server 210 is a RADIUS (Remote Authentication Dial In User Services) server.
- a RADIUS server performs access control services in accordance with the well-known RADIUS access control protocol that defines a request/response process.
- the RADIUS protocol is well-known and is defined by the Internet Engineering Task Force (IETF) in Request for Comment (RFC) 2865 and expanded in additional documents published by the IETF.
- the access server 210 acts as a RADIUS security server. When an access point makes a request on behalf of a wireless client for network access, the access server 210 also receives information identifying the wireless client and access point from the access point.
- the access server 210 consults a policy server 204 as set forth in step 306 , which generates network access privileges assigned to that wireless client. In accordance with the RADIUS protocol, the access server 210 then returns a permit access or deny access response to the access point. If a permit access response is returned, the access server uses the privilege information returned by the policy server to specify additional restrictions or privileges to be applied to the wireless client. Restrictions on access to a particular device are implemented using the media access control (MAC) address of that device. Restrictions based on the access point use the access point ID code. User credential restrictions are based on user credentials specified in a set of standards known as IEEE 802.11i standards which build upon an IEEE 802.1X standard.
- MAC media access control
- the access server 210 consults a policy server 204 that is also running in the access server 118 .
- the policy server 204 receives a request from the access server 210 for network access privilege information for a particular wireless client, as set forth in step 308 , it requests location information from a location system 200 running in server 118 as indicated schematically by arrow 202 using the client device ID received from the access point, via the access server 210 , to identify the client.
- location system 200 uses information collected from signal strength sensors to calculate the location of wireless clients in the system.
- the location informed returned by the location system 200 may take one of several forms.
- the location information is a label which may have hierarchical, adjacency and geometric relationships with other labeled locations.
- two very broad locations called “zones” may be used called the “inside” zone and the “outside” zone.
- the “Inside” zone may be composed of sub-zones, such as “engineering”, “executive” and “sales”.
- the “engineering” sub-zone and the “sales” sub-zone may be adjacent, but the “engineering” sub-zone may not be adjacent to the “executive” sub-zone.
- each location may have a specified geometry associated with it in one or more coordinate frames (called “views”) corresponding to different maps or visualizations of a space.
- the location information may also take the form of a set of coordinates, xyz at a minimum and theoretically also containing other degrees of freedom.
- Location information may further consist of multiple labels or coordinates and associated confidences. For example “inside”: 90%, “outside”: 10%, “engineering”: 70% and “sales”: 30%. In this arrangement, due to the hierarchical nature of the locations, the confidences only sum to 100% at the same level in the hierarchy.
- the location information is returned from the location system 200 to the access server 204 as indicated schematically by arrow 212 .
- the policy server 204 accesses the privilege database 206 and retrieves the privilege set associated with the combination of information provided by the access point.
- the location information may be used to control access by a particular configured mapping, such as a client device located in the “outside” zone is not granted access; a client device located in the “inside” zone is granted “standard access” and a client device located in the “engineering” sub-zone is granted “privileged access.”
- the location information may be applied such that rights are dynamically granted and revoked.
- a client device may be initially fully restricted and with no privileges and thus be unable to access any services on the network. If the same device moves to the “inside” zone, it is granted rights A, B and C. Later, if that device moves to the “sales” sub-zone, it is granted right D and right A is revoked. Still later if the device moves to the “engineering” sub-zone, it is granted grant right E and right B is revoked. Alternatively, if that device is located in the “executive” sub-zone, it is granted rights D, F and G and rights A and C are revoked.
- policies may be applied based on “second order” information about the location. For example, a client device may be granted network access only if it is in the same location as a device in previously defined privileged group or a device may be granted access if it has been in a particular location in the past twenty-four hours. Finally, in each of these cases the applied policy could be determined by asking an external system
- a wide range of other qualifications could apply, including the time of day, any previously-visited locations, the presence of other particular users in the same location, the quantity of users in the same location, the presence or quantity of users in some other fixed or related location, the data rate of communication, the presence or absence of other users on the same access point, the relative location of the user and the access point and permutations of the aforementioned criteria.
- privileges and restrictions may be applied for a period of time during which the privileges and restrictions are valid. For example, a given set of privileges and restrictions may be applied for the next ten minutes.
- the policy server can specify an additional action that can be performed. For example, the policy server may specify that, after the period of time has expired, the network connection will be terminated, or the wireless client will be required to request an additional time period for access.
- the privilege set retrieved from the database 206 specifies various privileges or restrictions that are applied to the wireless client. These privileges and restriction can include granting, or denial, of access to (1) different portions of the network 208 , (2) particular hosts on the network 208 , (3) the Internet, (4) particular hosts on the Internet and (5) particular services on the Internet (filtered either by port or by stateful protocol analysis). Other restrictions can include restrictions on bandwidth consumption. Other operations can also be performed, such as flagging of traffic with particular quality of service restrictions or benefits or any number of other network configuration parameters. Privileges and restrictions are typically applied by a component in the data path between the wireless client device and the network to which it is connected. This component will typically be an access point, a switch or a router. The inline component will apply the privileges and restrictions by routing, dropping, redirecting, modifying or responding to each packet based on the privilege set.
- the policy server 204 obtains the privilege set and restrictions from the privilege database 206 , it returns the access information to the access server 210 in step 312 . Then, in step 314 , the access server 210 applies the restrictions to the wireless client identified by the client device ID. The process then finishes in step 314 .
- access restrictions and privileges are applied across the network by using the RADIUS access server 210 to assign each client device to a virtual local network (VLAN) that is established using VLAN tagging.
- VLAN virtual local network
- a particular restriction and privilege set is associated with a VLAN and inline components mentioned above are programmed to provide privileges and restrictions to all devices on that VLAN.
- a particular restriction and privilege set is applied to a client by assigning that client to a VLAN that has been programmed to implement those privileges and restrictions.
- a VLAN can be established by tagging each data packet generated by a device assigned to that VLAN with information that identifies the VLAN.
- VLAN tagging can be carried out in compliance with an IEEE standard known as the 802.1q standard. This standard was originally written to define the operation of VLAN bridges that permit the definition, operation and administration of VLAN topologies within a bridged LAN infrastructure. In particular, the standard specifies the contents of a tag field containing VLAN information that can be inserted into an Ethernet frame.
- these tagged frames can carry VLAN membership information, such as an ID that identifies the VLAN, which allows the device to apply restrictions associated with that VLAN by permitting or denying the tagged frame to pass through the device.
- VLAN membership information such as an ID that identifies the VLAN, which allows the device to apply restrictions associated with that VLAN by permitting or denying the tagged frame to pass through the device.
- the policy server would retrieve a VLAN tag from the privilege database and in steps 312 and 314 , this VLAN tag would be provided to the access server 210 , which, in turn, would cause the access point to which the client device is connected to apply that VLAN tag to all data packets sent from that device. Then, as previously mentioned, the VLAN tag will cause the other inline components to apply the policy by permitting or denying the tagged frame to pass through the component.
- the device may be assigned to a new VLAN by changing the VLAN tag. This new VLAN may have different privileges and restrictions.
- a new network address must be assigned to a client device when it changes from one VLAN to another VLAN.
- each access point then periodically polls the access server to verify that the appropriate access permissions are still in place. Therefore, when a device changes its user credentials, its location (by moving) or its access point, the access restrictions can be changed appropriately. Similarly, if the policy for the combination of the device, user, location and access change, the restrictions would change to conform. In some cases, when enough information has not been collected to accurately determine the location of the device, the device would be assigned temporarily a default set of permissions.
- the access server could either publish privilege information to all access points or could notify the access points of changes to the access permissions asynchronously.
- the access point or another gateway device could determine the location of the wireless client instead of the location system running in a server.
- any device such as a switch, router or gateway, in the data path could control access.
- the restrictions could instead be applied through a stateful packet filter.
- a software implementation of the above-described embodiment may comprise a series of computer instructions either fixed on a tangible medium, such as a computer readable media, for example, a diskette, a CD-ROM, a ROM memory, or a fixed disk, or transmittable to a computer system, via a modem or other interface device over a medium.
- the medium either can be a tangible medium, including but not limited to optical or analog communications lines, or may be implemented with wireless techniques, including but not limited to microwave, infrared or other transmission techniques. It may also be the Internet.
- the series of computer instructions embodies all or part of the functionality previously described herein with respect to the invention.
- Such computer instructions can be written in a number of programming languages for use with many computer architectures or operating systems. Further, such instructions may be stored using any memory technology, present or future, including, but not limited to, semiconductor, magnetic, optical or other memory devices, or transmitted using any communications technology, present or future, including but not limited to optical, infrared, microwave, or other transmission technologies. It is contemplated that such a computer program product may be distributed as a removable media with accompanying printed or electronic documentation, e.g., shrink wrapped software, pre-loaded with a computer system, e.g., on system ROM or fixed disk, or distributed from a server or electronic bulletin board over a network, e.g., the Internet or World Wide Web.
- a removable media with accompanying printed or electronic documentation, e.g., shrink wrapped software, pre-loaded with a computer system, e.g., on system ROM or fixed disk, or distributed from a server or electronic bulletin board over a network, e.g., the Internet or World Wide Web.
Abstract
Description
- This invention relates to wireless networks and, more particularly, to controlling access privileges of wireless clients that either attempt to access the network or are connected to the network, but change their status.
- Wireless networks that link together multiple computers are commonplace and the technology for implementing such networks is rapidly growing. The common names for such networking technology are “wireless networking”, “WiFi” or “802.11 networking.” The big advantage of wireless networking is simplicity, because it allows computers to be connected anywhere in a home or office without the need for physical wires, thereby allowing the computers to be mobile. The computers, called “wireless clients”, connect to the network using broadcast radio signals which can travel up to distances of approximately 100 feet.
- Wireless networks are generally governed by one of several standards promulgated by the Institute of Electrical and Electronics Engineers (IEEE). The basic standard is denoted as the 802.11 standard and covers wireless networks. The standard has several different versions labeled by a, b and g notations. The different standard versions differ in several respects, including the broadcast signal frequency, transmission speed and data coding techniques. For example, the first wireless networking systems to reach the marketplace were constructed according to the 802.11b standard. Equipment that conforms to the 802.11b standard transmits at 2.4 GHz, can handle data transmission speeds up to 11 megabits per second and uses a data coding technique called “complementary code keying”. The 802.11a standard next appeared. Equipment conforming to this standard operates at 5 GHz, can handle up to 54 megabits per second and uses a data coding technique called “orthogonal frequency-division multiplexing” (OFDM). The 802.11g standard has characteristics of both the 802.11a and 802.11b standards in that conforming equipment operates at 2.4 Ghz, but has data transmission speeds of 54 megabits per second and uses OFDM encoding.
- Wireless communications are usually designed to take place in a localized area quite often via a local communications network. Such a localized area may be a building, an area within a building, an area comprising several buildings, outdoor areas, or a combination of indoor and outdoor areas. However, due to the broadcast nature of the radio-frequency signal, persons outside of the localized area can often receive the signal and, thus, communicate with the network. In many environments, information on the network is confidential and the ability of unauthorized persons to attach to the network is a serious problem.
- A common technique for enhancing the security of a wireless network is to encode the information broadcast via the radio-frequency signals with a WEP key. WEP stands for “Wired Equivalent Privacy”, and is an encryption standard that is part of the 802.11 standard. Another technique is to track the physical location of the mobile equipment and disconnect it from the network if the equipment strays outside of a predetermined localized area.
- The communication between mobile wireless devices and the local area network (LAN) is often performed using devices, such as “access points” (APs) that are attached to the LAN. The APs are communication ports for wireless devices, which broadcast the radio-frequency signals to, and receive the radio-frequency signals from, the wireless clients. The APs pass messages received from the wireless device across the LAN to other servers, computers, applications, subsystems or systems, as appropriate. Typically, the APs are coupled to one or more network servers, which manage the message traffic flow. Application servers may be coupled to or accessed via the network servers, to provide data or typical application functionality to the wireless device.
- Detection and location within a defined local area is often performed using a LAN to which a set of sensors is attached. In order to use such a local area network to determine the physical location of a wireless client, the local area network is equipped with a plurality of radio-frequency signal sensors, which may be incorporated into the access points or may be separate from the access points. Using a technique called “RF fingerprinting” a digital definition of the physical localized area is first developed and then a statistical signal strength model is developed to provide a context within which the detection and tracking will occur. Then the actual radio-frequency signal strength as measured at the sensors is compared to the model to calculate the physical location of each device.
- The digital definition of the localized area is comprised of a set of defined regions, areas or locations (collectively referred to as “locales”) taking into account various obstructions. Once the digital form of the localized area is formed, the locales are defined and the statistical signal strength model is then defined.
- With the digital form of the physical space defined, the signal strength model can be determined. The signal strength model defines, for each access point within the localized area, a pattern of signal strength reception that is anticipated from a mobile device transmitting within the area, taking into account the obstructions and placement of the access points. The signal strength model can be created by actually installing sensors in the physical space and then measuring the strength of signals received at the sensors as a transmitting wireless client moves through the area. Alternatively, simulated access points and simulated wireless client readings can be used to generate the signals strength model.
- After the signal strength model is determined, the location of a wireless client can be determined by collecting actual signal strength data from the device as it moves about or resides in the localized area and comparing the actual data against values predicted by the signal strength model. The RF fingerprinting process is described in more detail in U.S. Pat. No. 6,674,403, the contents of which are hereby incorporated in their entirety by reference.
- Alternatively, other location techniques could be used. For example, some known location techniques use the time of arrival of signals or differences between the time of arrival of signals from the wireless device at the APs to calculate the location of the wireless device. For example, such systems are described in U.S. Pat. Nos. 6,801,782 and 6,756,940.
- Once a wireless client has been located, access is usually denied if the unit is outside the localized area. This provides security and prevents unauthorized users from attaching or staying attached to the network, but is not very flexible because the system cannot differentiate between authorized users who are properly attached to the network.
- In accordance with the principles of the invention, the access point through which a device attaches to the network determines the access privileges that will be accorded to the device based on a criteria set, such as the ID and physical location of the device requesting network access, the access point through which the device is connected to the network and user credentials. The criteria set is used to determine network access privileges that can include access (or lack thereof to different portions of the network, access to particular local hosts, access to the Internet, access to particular hosts on the Internet, access to particular services on the Internet (filtered either by port or by stateful protocol analysis), restrictions on bandwidth consumption, flagging of traffic with particular quality of service benefits or restrictions, or any number of other network configuration parameters.
- When a device changes any of the criteria in the criteria set, the network access privileges dynamically change in an appropriate manner. Similarly, if the network access privileges for that criteria set change, then the network access privileges for a device with that criteria set would change to conform. In some cases, when enough information has not been collected to accurately determine the location of a device, the device would be assigned default network access privileges.
- In one embodiment, an access point contacts an access server on the network and requests network access privileges that should be provided to the device requesting access. In another embodiment, the access server publishes the network access privilege information to all access points, either in response to a poll by an access point or asynchronously.
- In another embodiment, virtual local area networks (VLANs) are established on the network and each device is assigned to a particular VLAN. Network access privileges can then be assigned to a particular VLAN.
- In still another embodiment, a VLAN is created by tagging each data packet or frame with an ID code associated with a particular VLAN. Special access points are used that detect the tag and use the VLAN ID code to determine the network access privileges accorded to the VLAN and, thus, to the user.
- In yet another embodiment, network access restrictions can be applied by another device in the data path, such as a switch, router or gateway. In addition, restrictions could also be applied by a stateful packet filter.
- The above and further advantages of the invention may be better understood by referring to the following description in conjunction with the accompanying drawings in which:
-
FIG. 1 is a block schematic diagram showing typical components in a wireless network. -
FIG. 2 is a more detailed block schematic diagram of a server in the system ofFIG. 1 incorporating a location system and an access server. -
FIG. 3 is a flowchart showing the steps in an illustrative process for applying network access privileges to wireless clients in accordance with the principles of the invention. -
FIG. 1 is a block schematic diagram of atypical wireless network 100. Two wireless clients, 102 and 104, are shown. Thewireless clients network 100 by means of access points of which twoaccess points - The access points 108 and 112 are connected to a
network 116 which can be a LAN, such as an Ethernet network, or another type of network. Thenetwork 116 may also have other devices, such asservers Network 116 may further be connected to another network, such as a WAN or the Internet via arouter 114. - One or more signal sensors may also be connected to the
network 116, of which two sensors, 106 and 110, are shown. These sensors measure the signal strength of the RF signal generated by thewireless clients sensors access points server 118. In accordance with the principles of the invention, theserver 118 may also incorporate an access control system. - In one embodiment, the access control system operates when a wireless client, such as
client 102 connects to a wireless access point, such asaccess point 108.Access point 108 then contacts theaccess control server 118 and requests information on the network access privileges that should be provided to theclient 102. The server then accesses a database to retrieve the privileges assigned to the client based on information identifying the client, the device location, the access point to which the client is connected and other user authentication credentials. For example in one embodiment, the wireless client device can be identified by using the device Media Access Control (MAC) address as a client device ID. Similarly, the access point is identified by its network IP address. The additional information can include user credentials. This information is sent to the access control server with the request. Alternatively, information that identifies the wireless client may be sent directly from the wireless client, via the access point, to the access control server. - A more detailed view of
server 118 incorporating the access system is shown inFIG. 2 and the process performed by the system is shown inFIG. 3 . The process begins instep 300 and proceeds to step 302 where a wireless client requests access to the network from a wireless access point. The wireless access point, in turn, requests access to the network from the access system and specifically from anaccess server 210 over thenetwork 208 as shown instep 304. - In one embodiment, the
access server 210 is a RADIUS (Remote Authentication Dial In User Services) server. A RADIUS server performs access control services in accordance with the well-known RADIUS access control protocol that defines a request/response process. The RADIUS protocol is well-known and is defined by the Internet Engineering Task Force (IETF) in Request for Comment (RFC) 2865 and expanded in additional documents published by the IETF. In this embodiment, theaccess server 210 acts as a RADIUS security server. When an access point makes a request on behalf of a wireless client for network access, theaccess server 210 also receives information identifying the wireless client and access point from the access point. Using this information, theaccess server 210 consults apolicy server 204 as set forth instep 306, which generates network access privileges assigned to that wireless client. In accordance with the RADIUS protocol, theaccess server 210 then returns a permit access or deny access response to the access point. If a permit access response is returned, the access server uses the privilege information returned by the policy server to specify additional restrictions or privileges to be applied to the wireless client. Restrictions on access to a particular device are implemented using the media access control (MAC) address of that device. Restrictions based on the access point use the access point ID code. User credential restrictions are based on user credentials specified in a set of standards known as IEEE 802.11i standards which build upon an IEEE 802.1X standard. - As noted above, the
access server 210 consults apolicy server 204 that is also running in theaccess server 118. When thepolicy server 204 receives a request from theaccess server 210 for network access privilege information for a particular wireless client, as set forth instep 308, it requests location information from alocation system 200 running inserver 118 as indicated schematically byarrow 202 using the client device ID received from the access point, via theaccess server 210, to identify the client. In particular, as previously mentioned,location system 200 uses information collected from signal strength sensors to calculate the location of wireless clients in the system. - The location informed returned by the
location system 200 may take one of several forms. In one form, the location information is a label which may have hierarchical, adjacency and geometric relationships with other labeled locations. For example, two very broad locations called “zones” may be used called the “inside” zone and the “outside” zone. The “Inside” zone may be composed of sub-zones, such as “engineering”, “executive” and “sales”. The “engineering” sub-zone and the “sales” sub-zone may be adjacent, but the “engineering” sub-zone may not be adjacent to the “executive” sub-zone. Further, each location may have a specified geometry associated with it in one or more coordinate frames (called “views”) corresponding to different maps or visualizations of a space. The location information may also take the form of a set of coordinates, xyz at a minimum and theoretically also containing other degrees of freedom. Location information may further consist of multiple labels or coordinates and associated confidences. For example “inside”: 90%, “outside”: 10%, “engineering”: 70% and “sales”: 30%. In this arrangement, due to the hierarchical nature of the locations, the confidences only sum to 100% at the same level in the hierarchy. The location information is returned from thelocation system 200 to theaccess server 204 as indicated schematically byarrow 212. - Next, in
step 310, using the client device ID, the device location, the access point to which the client is connected and the other user authentication credentials provided by the access point, thepolicy server 204 accesses theprivilege database 206 and retrieves the privilege set associated with the combination of information provided by the access point. For example, the location information may be used to control access by a particular configured mapping, such as a client device located in the “outside” zone is not granted access; a client device located in the “inside” zone is granted “standard access” and a client device located in the “engineering” sub-zone is granted “privileged access.” - Alternatively, the location information may be applied such that rights are dynamically granted and revoked. For example, a client device may be initially fully restricted and with no privileges and thus be unable to access any services on the network. If the same device moves to the “inside” zone, it is granted rights A, B and C. Later, if that device moves to the “sales” sub-zone, it is granted right D and right A is revoked. Still later if the device moves to the “engineering” sub-zone, it is granted grant right E and right B is revoked. Alternatively, if that device is located in the “executive” sub-zone, it is granted rights D, F and G and rights A and C are revoked.
- Further, policies may be applied based on “second order” information about the location. For example, a client device may be granted network access only if it is in the same location as a device in previously defined privileged group or a device may be granted access if it has been in a particular location in the past twenty-four hours. Finally, in each of these cases the applied policy could be determined by asking an external system
- In addition to the combination of the client device ID, device location, access point ID and user authentication credentials, a wide range of other qualifications could apply, including the time of day, any previously-visited locations, the presence of other particular users in the same location, the quantity of users in the same location, the presence or quantity of users in some other fixed or related location, the data rate of communication, the presence or absence of other users on the same access point, the relative location of the user and the access point and permutations of the aforementioned criteria. Further, privileges and restrictions may be applied for a period of time during which the privileges and restrictions are valid. For example, a given set of privileges and restrictions may be applied for the next ten minutes. After the period of time has expired, the policy server can specify an additional action that can be performed. For example, the policy server may specify that, after the period of time has expired, the network connection will be terminated, or the wireless client will be required to request an additional time period for access.
- The privilege set retrieved from the
database 206 specifies various privileges or restrictions that are applied to the wireless client. These privileges and restriction can include granting, or denial, of access to (1) different portions of thenetwork 208, (2) particular hosts on thenetwork 208, (3) the Internet, (4) particular hosts on the Internet and (5) particular services on the Internet (filtered either by port or by stateful protocol analysis). Other restrictions can include restrictions on bandwidth consumption. Other operations can also be performed, such as flagging of traffic with particular quality of service restrictions or benefits or any number of other network configuration parameters. Privileges and restrictions are typically applied by a component in the data path between the wireless client device and the network to which it is connected. This component will typically be an access point, a switch or a router. The inline component will apply the privileges and restrictions by routing, dropping, redirecting, modifying or responding to each packet based on the privilege set. - In the aforementioned embodiment using RADIUS servers, once the
policy server 204 obtains the privilege set and restrictions from theprivilege database 206, it returns the access information to theaccess server 210 instep 312. Then, instep 314, theaccess server 210 applies the restrictions to the wireless client identified by the client device ID. The process then finishes instep 314. - In another embodiment, access restrictions and privileges are applied across the network by using the
RADIUS access server 210 to assign each client device to a virtual local network (VLAN) that is established using VLAN tagging. More specifically, a particular restriction and privilege set is associated with a VLAN and inline components mentioned above are programmed to provide privileges and restrictions to all devices on that VLAN. With this arrangement, a particular restriction and privilege set is applied to a client by assigning that client to a VLAN that has been programmed to implement those privileges and restrictions. - A VLAN can be established by tagging each data packet generated by a device assigned to that VLAN with information that identifies the VLAN. VLAN tagging can be carried out in compliance with an IEEE standard known as the 802.1q standard. This standard was originally written to define the operation of VLAN bridges that permit the definition, operation and administration of VLAN topologies within a bridged LAN infrastructure. In particular, the standard specifies the contents of a tag field containing VLAN information that can be inserted into an Ethernet frame. If a port has an 802.1q-compliant device attached (such as a network switch or router), these tagged frames can carry VLAN membership information, such as an ID that identifies the VLAN, which allows the device to apply restrictions associated with that VLAN by permitting or denying the tagged frame to pass through the device.
- In accordance with this VLAN tagging embodiment, in
step 310, the policy server would retrieve a VLAN tag from the privilege database and insteps access server 210, which, in turn, would cause the access point to which the client device is connected to apply that VLAN tag to all data packets sent from that device. Then, as previously mentioned, the VLAN tag will cause the other inline components to apply the policy by permitting or denying the tagged frame to pass through the component. When the device moves to a different location, it may be assigned to a new VLAN by changing the VLAN tag. This new VLAN may have different privileges and restrictions. - Typically, a new network address must be assigned to a client device when it changes from one VLAN to another VLAN. In order to avoid this change in the network address, it is also possible in another embodiment to assign each client device to a VLAN that is dedicated to that device. Then privileges and restrictions for a device are changed by changing the privileges and restrictions assigned to the VLAN dedicated to that device.
- In still another embodiment, after the privilege information has been applied, each access point then periodically polls the access server to verify that the appropriate access permissions are still in place. Therefore, when a device changes its user credentials, its location (by moving) or its access point, the access restrictions can be changed appropriately. Similarly, if the policy for the combination of the device, user, location and access change, the restrictions would change to conform. In some cases, when enough information has not been collected to accurately determine the location of the device, the device would be assigned temporarily a default set of permissions.
- In yet additional embodiments, the access server could either publish privilege information to all access points or could notify the access points of changes to the access permissions asynchronously. In other embodiments, the access point or another gateway device could determine the location of the wireless client instead of the location system running in a server. Further, instead of the access point applying any restrictions, any device, such as a switch, router or gateway, in the data path could control access. In addition, instead of applying network restrictions via an 802.1q VLAN tag, the restrictions could instead be applied through a stateful packet filter.
- A software implementation of the above-described embodiment may comprise a series of computer instructions either fixed on a tangible medium, such as a computer readable media, for example, a diskette, a CD-ROM, a ROM memory, or a fixed disk, or transmittable to a computer system, via a modem or other interface device over a medium. The medium either can be a tangible medium, including but not limited to optical or analog communications lines, or may be implemented with wireless techniques, including but not limited to microwave, infrared or other transmission techniques. It may also be the Internet. The series of computer instructions embodies all or part of the functionality previously described herein with respect to the invention. Those skilled in the art will appreciate that such computer instructions can be written in a number of programming languages for use with many computer architectures or operating systems. Further, such instructions may be stored using any memory technology, present or future, including, but not limited to, semiconductor, magnetic, optical or other memory devices, or transmitted using any communications technology, present or future, including but not limited to optical, infrared, microwave, or other transmission technologies. It is contemplated that such a computer program product may be distributed as a removable media with accompanying printed or electronic documentation, e.g., shrink wrapped software, pre-loaded with a computer system, e.g., on system ROM or fixed disk, or distributed from a server or electronic bulletin board over a network, e.g., the Internet or World Wide Web.
- Although an exemplary embodiment of the invention has been disclosed, it will be apparent to those skilled in the art that various changes and modifications can be made which will achieve some of the advantages of the invention without departing from the spirit and scope of the invention. For example, it will be obvious to those reasonably skilled in the art that, in other implementations, other mechanisms for computing the location of the wireless client and for granting privileges may be used. In addition, although client server networks have been shown for purposes of illustration, access policies could also be imposed on network traffic on conventional mesh-style networks using the principles of the invention. Other aspects, such as the specific process flow and the order of the illustrated steps, as well as other modifications to the inventive concept are intended to be covered by the appended claims.
Claims (36)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US12/474,020 US20090293106A1 (en) | 2005-03-31 | 2009-05-28 | Method and apparatus for controlling wireless network access privileges based on wireless client location |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/094,987 US7551574B1 (en) | 2005-03-31 | 2005-03-31 | Method and apparatus for controlling wireless network access privileges based on wireless client location |
US12/474,020 US20090293106A1 (en) | 2005-03-31 | 2009-05-28 | Method and apparatus for controlling wireless network access privileges based on wireless client location |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/094,987 Continuation US7551574B1 (en) | 2005-03-31 | 2005-03-31 | Method and apparatus for controlling wireless network access privileges based on wireless client location |
Publications (1)
Publication Number | Publication Date |
---|---|
US20090293106A1 true US20090293106A1 (en) | 2009-11-26 |
Family
ID=37003370
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/094,987 Active 2026-09-26 US7551574B1 (en) | 2005-03-31 | 2005-03-31 | Method and apparatus for controlling wireless network access privileges based on wireless client location |
US12/474,020 Abandoned US20090293106A1 (en) | 2005-03-31 | 2009-05-28 | Method and apparatus for controlling wireless network access privileges based on wireless client location |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/094,987 Active 2026-09-26 US7551574B1 (en) | 2005-03-31 | 2005-03-31 | Method and apparatus for controlling wireless network access privileges based on wireless client location |
Country Status (6)
Country | Link |
---|---|
US (2) | US7551574B1 (en) |
EP (1) | EP1720370B1 (en) |
JP (1) | JP2006304285A (en) |
AT (1) | ATE433641T1 (en) |
CA (1) | CA2541424A1 (en) |
DE (1) | DE602006007192D1 (en) |
Cited By (32)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060218273A1 (en) * | 2006-06-27 | 2006-09-28 | Stephen Melvin | Remote Log Repository With Access Policy |
US20070199048A1 (en) * | 2006-02-07 | 2007-08-23 | Stefan Kaleja | Method for controlling the access to a data network |
US8116275B2 (en) | 2005-10-13 | 2012-02-14 | Trapeze Networks, Inc. | System and network for wireless network monitoring |
US8150357B2 (en) | 2008-03-28 | 2012-04-03 | Trapeze Networks, Inc. | Smoothing filter for irregular update intervals |
US8161278B2 (en) | 2005-03-15 | 2012-04-17 | Trapeze Networks, Inc. | System and method for distributing keys in a wireless network |
US8218449B2 (en) | 2005-10-13 | 2012-07-10 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
US8238942B2 (en) | 2007-11-21 | 2012-08-07 | Trapeze Networks, Inc. | Wireless station location detection |
US8238298B2 (en) | 2008-08-29 | 2012-08-07 | Trapeze Networks, Inc. | Picking an optimal channel for an access point in a wireless network |
US8301753B1 (en) | 2006-06-27 | 2012-10-30 | Nosadia Pass Nv, Limited Liability Company | Endpoint activity logging |
US8340110B2 (en) | 2006-09-15 | 2012-12-25 | Trapeze Networks, Inc. | Quality of service provisioning for wireless networks |
US8457031B2 (en) | 2005-10-13 | 2013-06-04 | Trapeze Networks, Inc. | System and method for reliable multicast |
US20130155851A1 (en) * | 2011-12-19 | 2013-06-20 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US8565793B1 (en) | 2012-05-15 | 2013-10-22 | Cisco Technology, Inc. | System and method for scoped paging in multi-radio heterogeneous networks |
US20130340033A1 (en) * | 2012-06-19 | 2013-12-19 | Appsense Limited | Apparatus, methods and media for location based data access policies |
US8638762B2 (en) | 2005-10-13 | 2014-01-28 | Trapeze Networks, Inc. | System and method for network integrity |
US20140028437A1 (en) * | 2012-07-26 | 2014-01-30 | Bby Solutions, Inc. | Automatically applying geographical constraints on electronic device functionality: method and apparatus |
US8670383B2 (en) | 2006-12-28 | 2014-03-11 | Trapeze Networks, Inc. | System and method for aggregation and queuing in a wireless network |
US8818322B2 (en) | 2006-06-09 | 2014-08-26 | Trapeze Networks, Inc. | Untethered access point mesh system and method |
US8902904B2 (en) | 2007-09-07 | 2014-12-02 | Trapeze Networks, Inc. | Network assignment based on priority |
US8964747B2 (en) | 2006-05-03 | 2015-02-24 | Trapeze Networks, Inc. | System and method for restricting network access using forwarding databases |
US8966018B2 (en) | 2006-05-19 | 2015-02-24 | Trapeze Networks, Inc. | Automated network device configuration and network deployment |
US8978105B2 (en) | 2008-07-25 | 2015-03-10 | Trapeze Networks, Inc. | Affirming network relationships and resource access via related networks |
US20150195362A1 (en) * | 2014-01-09 | 2015-07-09 | Comcast Cable Communications, Llc | Network Filter |
EP2608457A3 (en) * | 2011-12-19 | 2015-09-16 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US9191799B2 (en) | 2006-06-09 | 2015-11-17 | Juniper Networks, Inc. | Sharing data between wireless switches system and method |
US20160014674A1 (en) * | 2014-07-10 | 2016-01-14 | Lg Electronics Inc. | Method for location based access control in wireless communication system and apparatus therefor |
US9258702B2 (en) | 2006-06-09 | 2016-02-09 | Trapeze Networks, Inc. | AP-local dynamic switching |
US9408177B2 (en) | 2011-12-19 | 2016-08-02 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US9661522B2 (en) | 2012-07-09 | 2017-05-23 | Cisco Technology, Inc. | System and method associated with a service flow router |
EP3435622A1 (en) * | 2017-07-24 | 2019-01-30 | Cyber-Ark Software Ltd. | Providing privileged access to non-privileged accounts |
US11457487B2 (en) | 2016-04-01 | 2022-09-27 | Comcast Cable Communications, Llc | Methods and systems for connecting to a wireless network |
US20230064926A1 (en) * | 2021-08-27 | 2023-03-02 | The Toronto-Dominion Bank | System and Method for Determining a Physical Location Associated with an Activity Detected on a Mobile Device |
Families Citing this family (60)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8108554B1 (en) * | 2002-05-16 | 2012-01-31 | F5 Networks, Inc. | Method and system for automatically mapping secure network address translations |
WO2007073470A2 (en) | 2005-12-23 | 2007-06-28 | Perdiem, Llc | System and method for defining an event based on a relationship between an object location and a user-defined zone |
US7525425B2 (en) | 2006-01-20 | 2009-04-28 | Perdiem Llc | System and method for defining an event based on relationship between an object location and a user-defined zone |
US8151322B2 (en) | 2006-05-16 | 2012-04-03 | A10 Networks, Inc. | Systems and methods for user access authentication based on network access point |
US8902839B2 (en) * | 2006-07-05 | 2014-12-02 | Nokia Corporation | Service/mobility domain with handover for private short-range wireless networks |
US8326296B1 (en) | 2006-07-12 | 2012-12-04 | At&T Intellectual Property I, L.P. | Pico-cell extension for cellular network |
US7716378B2 (en) | 2006-10-17 | 2010-05-11 | A10 Networks, Inc. | System and method to associate a private user identity with a public user identity |
US8312507B2 (en) | 2006-10-17 | 2012-11-13 | A10 Networks, Inc. | System and method to apply network traffic policy to an application session |
US20080222707A1 (en) * | 2007-03-07 | 2008-09-11 | Qualcomm Incorporated | Systems and methods for controlling service access on a wireless communication device |
US9185123B2 (en) | 2008-02-12 | 2015-11-10 | Finsphere Corporation | System and method for mobile identity protection for online user authentication |
US8280348B2 (en) | 2007-03-16 | 2012-10-02 | Finsphere Corporation | System and method for identity protection using mobile device signaling network derived location pattern recognition |
US9456348B2 (en) * | 2007-03-16 | 2016-09-27 | Visa International Service Association | Systems and methods for authenticating a user of a computer application, network, or device using a wireless device |
US8983051B2 (en) | 2007-04-03 | 2015-03-17 | William F. Barton | Outgoing call classification and disposition |
US8131556B2 (en) | 2007-04-03 | 2012-03-06 | Microsoft Corporation | Communications using different modalities |
US20090083826A1 (en) * | 2007-09-21 | 2009-03-26 | Microsoft Corporation | Unsolicited communication management via mobile device |
US20090119762A1 (en) * | 2007-11-06 | 2009-05-07 | Cisco Technology, Inc. | WLAN Access Integration with Physical Access Control System |
US8719420B2 (en) * | 2008-05-13 | 2014-05-06 | At&T Mobility Ii Llc | Administration of access lists for femtocell service |
US8490156B2 (en) | 2008-05-13 | 2013-07-16 | At&T Mobility Ii Llc | Interface for access management of FEMTO cell coverage |
US8743776B2 (en) | 2008-06-12 | 2014-06-03 | At&T Mobility Ii Llc | Point of sales and customer support for femtocell service and equipment |
ES2337437B8 (en) | 2008-10-22 | 2011-08-02 | Telefonica S.A. | S NETWORK INSURANCE BASED ON CONTEXTOPROCEDIMENT AND SYSTEM TO CONTROL WIRELESS ACCESS TO RESOURCE. |
US8811987B2 (en) * | 2008-12-19 | 2014-08-19 | Telefonaktiebolaget L M Ericsson (Publ) | Method and arrangement for creation of association between user equipment and an access point |
US8560645B2 (en) * | 2009-01-27 | 2013-10-15 | Watchguard Technologies, Inc. | Location-aware configuration |
US20110055890A1 (en) * | 2009-08-25 | 2011-03-03 | Gaulin Pascal | Method and system to configure security rights based on contextual information |
US8595796B2 (en) * | 2009-10-12 | 2013-11-26 | Qualcomm Incorporated | Apparatus and method for authorization for access point name (APN) usage in a specific access |
US8510801B2 (en) | 2009-10-15 | 2013-08-13 | At&T Intellectual Property I, L.P. | Management of access to service in an access point |
US9602425B2 (en) * | 2009-12-31 | 2017-03-21 | Cable Television Laboratories, Inc. | Zero sign-on authentication |
KR101534995B1 (en) * | 2011-02-05 | 2015-07-07 | 애플 인크. | Method and apparatus for mobile location determination |
JP5729061B2 (en) * | 2011-03-22 | 2015-06-03 | 日本電気株式会社 | Connection control device, network connection control system, network connection method, and information processing program |
JP5941632B2 (en) * | 2011-08-10 | 2016-06-29 | 株式会社日立ソリューションズ | Network system, mobile communication terminal and program |
US9066284B2 (en) * | 2011-10-14 | 2015-06-23 | Microsoft Technology Licensing, Llc | System, method and device for call policy enforcement and routing based on user location |
FR2987542B1 (en) * | 2012-02-23 | 2015-03-20 | Chat In The City | METHOD FOR MANAGING THE ACCESS OF A TERMINAL TO A VIRTUAL COMMUNICATION SPACE, COMPUTER PROGRAM PRODUCT AND MANAGEMENT SERVER THEREFOR |
US9055440B2 (en) * | 2012-10-19 | 2015-06-09 | Saife, Inc. | Geospatial cryptography |
US8660536B1 (en) * | 2012-12-07 | 2014-02-25 | Enterprising Apps, LLC | Mobile Device Management Solution |
US10657278B2 (en) | 2013-03-15 | 2020-05-19 | Live Nation Entertainment, Inc. | Prioritized link establishment for data transfer using task scheduling |
US9066153B2 (en) | 2013-03-15 | 2015-06-23 | Time Warner Cable Enterprises Llc | Apparatus and methods for multicast delivery of content in a content delivery network |
US9798892B2 (en) * | 2013-03-15 | 2017-10-24 | Live Nation Entertainment, Inc. | Prioritized link establishment for data transfer using task scheduling |
US9122853B2 (en) | 2013-06-24 | 2015-09-01 | A10 Networks, Inc. | Location determination for user authentication |
US9313568B2 (en) * | 2013-07-23 | 2016-04-12 | Chicago Custom Acoustics, Inc. | Custom earphone with dome in the canal |
US20150067762A1 (en) * | 2013-09-03 | 2015-03-05 | Samsung Electronics Co., Ltd. | Method and system for configuring smart home gateway firewall |
US11165770B1 (en) | 2013-12-06 | 2021-11-02 | A10 Networks, Inc. | Biometric verification of a human internet user |
US20150381658A1 (en) * | 2014-06-30 | 2015-12-31 | Mcafee, Inc. | Premises-aware security and policy orchestration |
US10757671B2 (en) | 2014-09-30 | 2020-08-25 | Apple Inc. | Location fingerprinting for a transit system |
US9758183B2 (en) | 2014-09-30 | 2017-09-12 | Apple Inc. | Location fingerprinting for transit systems |
US9846525B2 (en) * | 2014-11-19 | 2017-12-19 | Imprivata, Inc. | Location-based healthcare collaboration, data management and access control |
US9621579B2 (en) * | 2014-11-21 | 2017-04-11 | Symantec Corporation | Systems and methods for protecting against unauthorized network intrusions |
US9871820B2 (en) * | 2014-12-27 | 2018-01-16 | Intel Corporation | Technologies for managing network privileges based on physical presence |
DE102015201516A1 (en) * | 2015-01-29 | 2016-08-04 | Siemens Aktiengesellschaft | Apparatus and method for dynamically adapting a client's access to a server |
CN104703183A (en) * | 2015-03-05 | 2015-06-10 | 北京成众志科技有限公司 | Special line APN (Access Point Name) security-enhanced access method and device |
US10171439B2 (en) * | 2015-09-24 | 2019-01-01 | International Business Machines Corporation | Owner based device authentication and authorization for network access |
US10327187B2 (en) | 2015-12-04 | 2019-06-18 | Time Warner Cable Enterprises Llc | Apparatus and method for wireless network extensibility and enhancement |
US9986578B2 (en) | 2015-12-04 | 2018-05-29 | Time Warner Cable Enterprises Llc | Apparatus and methods for selective data network access |
US9918345B2 (en) | 2016-01-20 | 2018-03-13 | Time Warner Cable Enterprises Llc | Apparatus and method for wireless network services in moving vehicles |
US10492034B2 (en) | 2016-03-07 | 2019-11-26 | Time Warner Cable Enterprises Llc | Apparatus and methods for dynamic open-access networks |
DE102016109721B4 (en) * | 2016-05-25 | 2019-10-17 | PHYSEC GmbH | Method of operating a cyber-physical information delivery system |
US10164858B2 (en) | 2016-06-15 | 2018-12-25 | Time Warner Cable Enterprises Llc | Apparatus and methods for monitoring and diagnosing a wireless network |
US10897709B2 (en) | 2016-12-09 | 2021-01-19 | Arris Enterprises Llc | Wireless network authorization using a trusted authenticator |
US10645547B2 (en) | 2017-06-02 | 2020-05-05 | Charter Communications Operating, Llc | Apparatus and methods for providing wireless service in a venue |
US10638361B2 (en) | 2017-06-06 | 2020-04-28 | Charter Communications Operating, Llc | Methods and apparatus for dynamic control of connections to co-existing radio access networks |
SE542532C2 (en) | 2018-09-28 | 2020-06-02 | Telia Co Ab | A method and a network device for providing services to user devices in a wireless network |
EP3840302A1 (en) * | 2019-12-17 | 2021-06-23 | Siemens Aktiengesellschaft | Access rights management in technical installations |
Citations (99)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3641433A (en) * | 1969-06-09 | 1972-02-08 | Us Air Force | Transmitted reference synchronization system |
US4247908A (en) * | 1978-12-08 | 1981-01-27 | Motorola, Inc. | Re-linked portable data terminal controller system |
US4494238A (en) * | 1982-06-30 | 1985-01-15 | Motorola, Inc. | Multiple channel data link system |
US4500987A (en) * | 1981-11-24 | 1985-02-19 | Nippon Electric Co., Ltd. | Loop transmission system |
US4503533A (en) * | 1981-08-20 | 1985-03-05 | Stanford University | Local area communication network utilizing a round robin access scheme with improved channel utilization |
US4635221A (en) * | 1985-01-18 | 1987-01-06 | Allied Corporation | Frequency multiplexed convolver communication system |
US4639914A (en) * | 1984-12-06 | 1987-01-27 | At&T Bell Laboratories | Wireless PBX/LAN system with optimum combining |
US4644523A (en) * | 1984-03-23 | 1987-02-17 | Sangamo Weston, Inc. | System for improving signal-to-noise ratio in a direct sequence spread spectrum signal receiver |
US4672658A (en) * | 1985-10-16 | 1987-06-09 | At&T Company And At&T Bell Laboratories | Spread spectrum wireless PBX |
US4673805A (en) * | 1982-01-25 | 1987-06-16 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable scanning head for reading bar code symbols |
US4730340A (en) * | 1980-10-31 | 1988-03-08 | Harris Corp. | Programmable time invariant coherent spread symbol correlator |
US4736095A (en) * | 1982-01-25 | 1988-04-05 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols |
US4740792A (en) * | 1986-08-27 | 1988-04-26 | Hughes Aircraft Company | Vehicle location system |
US4829540A (en) * | 1986-05-27 | 1989-05-09 | Fairchild Weston Systems, Inc. | Secure communication system for multiple remote units |
US4894842A (en) * | 1987-10-15 | 1990-01-16 | The Charles Stark Draper Laboratory, Inc. | Precorrelation digital spread spectrum receiver |
US4901307A (en) * | 1986-10-17 | 1990-02-13 | Qualcomm, Inc. | Spread spectrum multiple access communication system using satellite or terrestrial repeaters |
US4933952A (en) * | 1988-04-08 | 1990-06-12 | Lmt Radioprofessionnelle | Asynchronous digital correlator and demodulators including a correlator of this type |
US4933953A (en) * | 1987-09-10 | 1990-06-12 | Kabushiki Kaisha Kenwood | Initial synchronization in spread spectrum receiver |
US5008899A (en) * | 1989-07-03 | 1991-04-16 | Futaba Denshi Kogyo Kabushiki Kaisha | Receiver for spectrum spread communication |
US5103461A (en) * | 1989-06-29 | 1992-04-07 | Symbol Technologies, Inc. | Signal quality measure in packet data communication |
US5103459A (en) * | 1990-06-25 | 1992-04-07 | Qualcomm Incorporated | System and method for generating signal waveforms in a cdma cellular telephone system |
US5109390A (en) * | 1989-11-07 | 1992-04-28 | Qualcomm Incorporated | Diversity receiver in a cdma cellular telephone system |
US5187575A (en) * | 1989-12-29 | 1993-02-16 | Massachusetts Institute Of Technology | Source adaptive television system |
US5280498A (en) * | 1989-06-29 | 1994-01-18 | Symbol Technologies, Inc. | Packet data communication system |
US5285494A (en) * | 1992-07-31 | 1994-02-08 | Pactel Corporation | Network management system |
US5418812A (en) * | 1992-06-26 | 1995-05-23 | Symbol Technologies, Inc. | Radio network initialization method and apparatus |
US5483676A (en) * | 1988-08-04 | 1996-01-09 | Norand Corporation | Mobile radio data communication system and method |
US5488569A (en) * | 1993-12-20 | 1996-01-30 | At&T Corp. | Application-oriented telecommunication system interface |
US5491644A (en) * | 1993-09-07 | 1996-02-13 | Georgia Tech Research Corporation | Cell engineering tool and methods |
US5517495A (en) * | 1994-12-06 | 1996-05-14 | At&T Corp. | Fair prioritized scheduling in an input-buffered switch |
US5519762A (en) * | 1994-12-21 | 1996-05-21 | At&T Corp. | Adaptive power cycling for a cordless telephone |
US5528621A (en) * | 1989-06-29 | 1996-06-18 | Symbol Technologies, Inc. | Packet data communication system |
US5598532A (en) * | 1993-10-21 | 1997-01-28 | Optimal Networks | Method and apparatus for optimizing computer networks |
US5630207A (en) * | 1995-06-19 | 1997-05-13 | Lucent Technologies Inc. | Methods and apparatus for bandwidth reduction in a two-way paging system |
US5640414A (en) * | 1992-03-05 | 1997-06-17 | Qualcomm Incorporated | Mobile station assisted soft handoff in a CDMA cellular communications system |
US5872968A (en) * | 1996-10-16 | 1999-02-16 | International Business Machines Corporation | Data processing network with boot process using multiple servers |
US5875179A (en) * | 1996-10-29 | 1999-02-23 | Proxim, Inc. | Method and apparatus for synchronized communication over wireless backbone architecture |
US5896561A (en) * | 1992-04-06 | 1999-04-20 | Intermec Ip Corp. | Communication network having a dormant polling protocol |
US5915214A (en) * | 1995-02-23 | 1999-06-22 | Reece; Richard W. | Mobile communication service provider selection system |
US6011784A (en) * | 1996-12-18 | 2000-01-04 | Motorola, Inc. | Communication system and method using asynchronous and isochronous spectrum for voice and data |
US6070243A (en) * | 1997-06-13 | 2000-05-30 | Xylan Corporation | Deterministic user authentication service for communication network |
US6073075A (en) * | 1995-11-01 | 2000-06-06 | Hitachi, Ltd. | Method and system for providing information for a mobile terminal |
US6078568A (en) * | 1997-02-25 | 2000-06-20 | Telefonaktiebolaget Lm Ericsson | Multiple access communication network with dynamic access control |
US6177905B1 (en) * | 1998-12-08 | 2001-01-23 | Avaya Technology Corp. | Location-triggered reminder for mobile user devices |
US6188649B1 (en) * | 1996-06-28 | 2001-02-13 | Matsushita Electric Industrial Co., Ltd. | Method for reading magnetic super resolution type magneto-optical recording medium |
US6199032B1 (en) * | 1997-07-23 | 2001-03-06 | Edx Engineering, Inc. | Presenting an output signal generated by a receiving device in a simulated communication system |
US6208629B1 (en) * | 1996-04-30 | 2001-03-27 | 3Com Corporation | Method and apparatus for assigning spectrum of a local area network |
US6208841B1 (en) * | 1999-05-03 | 2001-03-27 | Qualcomm Incorporated | Environmental simulator for a wireless communication device |
US6218930B1 (en) * | 1999-03-10 | 2001-04-17 | Merlot Communications | Apparatus and method for remotely powering access equipment over a 10/100 switched ethernet network |
US6240083B1 (en) * | 1997-02-25 | 2001-05-29 | Telefonaktiebolaget L.M. Ericsson | Multiple access communication network with combined contention and reservation mode access |
US6336035B1 (en) * | 1998-11-19 | 2002-01-01 | Nortel Networks Limited | Tools for wireless network planning |
US6336152B1 (en) * | 1994-05-27 | 2002-01-01 | Microsoft Corporation | Method for automatically configuring devices including a network adapter without manual intervention and without prior configuration information |
US6347091B1 (en) * | 1998-06-19 | 2002-02-12 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for dynamically adapting a connection state in a mobile communications system |
US6356758B1 (en) * | 1997-12-31 | 2002-03-12 | Nortel Networks Limited | Wireless tools for data manipulation and visualization |
US20020052205A1 (en) * | 2000-01-26 | 2002-05-02 | Vyyo, Ltd. | Quality of service scheduling scheme for a broadband wireless access system |
US6393290B1 (en) * | 1999-06-30 | 2002-05-21 | Lucent Technologies Inc. | Cost based model for wireless architecture |
US6397040B1 (en) * | 1997-04-14 | 2002-05-28 | British Telecommunications Public Limited Company | Telecommunications apparatus and method |
US20020069278A1 (en) * | 2000-12-05 | 2002-06-06 | Forsloew Jan | Network-based mobile workgroup system |
US6404772B1 (en) * | 2000-07-27 | 2002-06-11 | Symbol Technologies, Inc. | Voice and data wireless communications network and method |
US20020078361A1 (en) * | 2000-12-15 | 2002-06-20 | David Giroux | Information security architecture for encrypting documents for remote access while maintaining access control |
US20030014646A1 (en) * | 2001-07-05 | 2003-01-16 | Buddhikot Milind M. | Scheme for authentication and dynamic key exchange |
US20030018889A1 (en) * | 2001-07-20 | 2003-01-23 | Burnett Keith L. | Automated establishment of addressability of a network device for a target network enviroment |
US6512916B1 (en) * | 2000-02-23 | 2003-01-28 | America Connect, Inc. | Method for selecting markets in which to deploy fixed wireless communication systems |
US6526275B1 (en) * | 2000-04-24 | 2003-02-25 | Motorola, Inc. | Method for informing a user of a communication device where to obtain a product and communication system employing same |
US6564380B1 (en) * | 1999-01-26 | 2003-05-13 | Pixelworld Networks, Inc. | System and method for sending live video on the internet |
US20030110131A1 (en) * | 2001-12-12 | 2003-06-12 | Secretseal Inc. | Method and architecture for providing pervasive security to digital assets |
US20030107590A1 (en) * | 2001-11-07 | 2003-06-12 | Phillippe Levillain | Policy rule management for QoS provisioning |
US6580700B1 (en) * | 1995-10-27 | 2003-06-17 | Symbol Technologies, Inc. | Data rate algorithms for use in wireless local area networks |
US20040002343A1 (en) * | 2002-06-28 | 2004-01-01 | Compaq Information Technologies Group, L.P. | Location determination in a wireless communication network |
US6674403B2 (en) * | 2001-09-05 | 2004-01-06 | Newbury Networks, Inc. | Position detection and location tracking in a wireless network |
US6678516B2 (en) * | 2001-05-21 | 2004-01-13 | Nokia Corporation | Method, system, and apparatus for providing services in a privacy enabled mobile and Ubicom environment |
US6677894B2 (en) * | 1998-04-28 | 2004-01-13 | Snaptrack, Inc | Method and apparatus for providing location-based information via a computer network |
US6687498B2 (en) * | 2000-08-14 | 2004-02-03 | Vesuvius Inc. | Communique system with noncontiguous communique coverage areas in cellular communication networks |
US20040025044A1 (en) * | 2002-07-30 | 2004-02-05 | Day Christopher W. | Intrusion detection system |
US20040038687A1 (en) * | 1999-12-29 | 2004-02-26 | Roderick Nelson | Monitoring network performance using individual cell phone location and performance information |
US20040047320A1 (en) * | 2002-09-09 | 2004-03-11 | Siemens Canada Limited | Wireless local area network with clients having extended freedom of movement |
US20040064560A1 (en) * | 2002-09-26 | 2004-04-01 | Cisco Technology, Inc., A California Corporation | Per user per service traffic provisioning |
US6725260B1 (en) * | 1998-09-11 | 2004-04-20 | L.V. Partners, L.P. | Method and apparatus for configuring configurable equipment with configuration information received from a remote location |
US20040095932A1 (en) * | 2002-11-18 | 2004-05-20 | Toshiba America Information Systems, Inc. | Method for SIP - mobility and mobile - IP coexistence |
US20040095914A1 (en) * | 2002-11-19 | 2004-05-20 | Toshiba America Research, Inc. | Quality of service (QoS) assurance system using data transmission control |
US20040120370A1 (en) * | 2002-08-13 | 2004-06-24 | Agilent Technologies, Inc. | Mounting arrangement for high-frequency electro-optical components |
US6839338B1 (en) * | 2002-03-20 | 2005-01-04 | Utstarcom Incorporated | Method to provide dynamic internet protocol security policy service |
US6847892B2 (en) * | 2001-10-29 | 2005-01-25 | Digital Angel Corporation | System for localizing and sensing objects and providing alerts |
US20050021979A1 (en) * | 2003-06-05 | 2005-01-27 | Ulrich Wiedmann | Methods and systems of remote authentication for computer networks |
US20050030929A1 (en) * | 2003-07-15 | 2005-02-10 | Highwall Technologies, Llc | Device and method for detecting unauthorized, "rogue" wireless LAN access points |
US20050040968A1 (en) * | 2003-07-31 | 2005-02-24 | Chanakya Damarla | Method for RF fingerprinting |
US20050054350A1 (en) * | 2003-08-26 | 2005-03-10 | Chris Zegelin | Real time location system |
US20050059405A1 (en) * | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Simulation driven wireless LAN planning |
US20050059406A1 (en) * | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Wireless LAN measurement feedback |
US20050058132A1 (en) * | 2002-05-20 | 2005-03-17 | Fujitsu Limited | Network repeater apparatus, network repeater method and network repeater program |
US20050064873A1 (en) * | 2003-09-22 | 2005-03-24 | Jeyhan Karaoguz | Automatic quality of service based resource allocation |
US20050068925A1 (en) * | 2002-07-26 | 2005-03-31 | Stephen Palm | Wireless access point setup and management within wireless local area network |
US20050073980A1 (en) * | 2003-09-17 | 2005-04-07 | Trapeze Networks, Inc. | Wireless LAN management |
US6879812B2 (en) * | 2002-02-08 | 2005-04-12 | Networks Associates Technology Inc. | Portable computing device and associated method for analyzing a wireless local area network |
US6993683B2 (en) * | 2002-05-10 | 2006-01-31 | Microsoft Corporation | Analysis of pipelined networks |
US20060045050A1 (en) * | 2004-08-27 | 2006-03-02 | Andreas Floros | Method and system for a quality of service mechanism for a wireless network |
US20060046744A1 (en) * | 2004-08-27 | 2006-03-02 | Microsoft Corporation | System and method for enforcing location privacy using rights management |
US7020773B1 (en) * | 2000-07-17 | 2006-03-28 | Citrix Systems, Inc. | Strong mutual authentication of devices |
US7324489B1 (en) * | 2003-02-18 | 2008-01-29 | Cisco Technology, Inc. | Managing network service access |
Family Cites Families (20)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6429879B1 (en) * | 1997-09-30 | 2002-08-06 | Compaq Computer Corporation | Customization schemes for content presentation in a device with converged functionality |
US6148199A (en) * | 1998-01-30 | 2000-11-14 | Motorola, Inc. | Apparatus and method of updating a mobility database |
US6269246B1 (en) | 1998-09-22 | 2001-07-31 | Ppm, Inc. | Location determination using RF fingerprinting |
US6393294B1 (en) * | 1998-09-22 | 2002-05-21 | Polaris Wireless, Inc. | Location determination using RF fingerprinting |
CA2280103A1 (en) * | 1998-09-29 | 2000-03-29 | Lucent Technologies Inc. | Computer access dependent on the location of the accessing terminal |
US6453168B1 (en) | 1999-08-02 | 2002-09-17 | Itt Manufacturing Enterprises, Inc | Method and apparatus for determining the position of a mobile communication device using low accuracy clocks |
US20020022483A1 (en) * | 2000-04-18 | 2002-02-21 | Wayport, Inc. | Distributed network communication system which allows multiple wireless service providers to share a common network infrastructure |
US6826399B1 (en) * | 2000-06-30 | 2004-11-30 | Motorola, Inc. | Apparatus and method of updating a mobility database |
US6920329B2 (en) | 2001-01-16 | 2005-07-19 | Allen Telecom | Method and system for applying wireless geolocation technology |
JP2004530210A (en) * | 2001-04-30 | 2004-09-30 | ノキア コーポレイション | Improvements in content delivery |
US6756940B2 (en) | 2001-12-18 | 2004-06-29 | Intel Corporation | Remote terminal location algorithm |
JP2003234751A (en) * | 2002-02-08 | 2003-08-22 | Nippon Telegr & Teleph Corp <Ntt> | Dynamic vlan system, tag converter and authentication server |
US7719980B2 (en) * | 2002-02-19 | 2010-05-18 | Broadcom Corporation | Method and apparatus for flexible frame processing and classification engine |
JP3750634B2 (en) * | 2002-06-27 | 2006-03-01 | 日本電気株式会社 | User authentication QoS policy management system, method and LAN switch |
US6950628B1 (en) | 2002-08-02 | 2005-09-27 | Cisco Technology, Inc. | Method for grouping 802.11 stations into authorized service sets to differentiate network access and services |
JP2004153736A (en) * | 2002-11-01 | 2004-05-27 | Hitachi Ltd | Access control method for radio terminal and system therefor |
KR100581290B1 (en) * | 2003-12-10 | 2006-05-17 | 한국전자통신연구원 | Base station and mobile terminal for location detecting, its method for location detecting |
US7640024B2 (en) * | 2003-12-30 | 2009-12-29 | Symbol Technologies, Inc. | Location tracking using directional antennas combined with signal strength measurements |
US7372839B2 (en) * | 2004-03-24 | 2008-05-13 | Broadcom Corporation | Global positioning system (GPS) based secure access |
WO2006110181A2 (en) * | 2004-10-29 | 2006-10-19 | Skyhook Wireless, Inc. | Location beacon database and server, method of building location beacon database, and location based service using same |
-
2005
- 2005-03-31 US US11/094,987 patent/US7551574B1/en active Active
-
2006
- 2006-03-24 CA CA002541424A patent/CA2541424A1/en not_active Abandoned
- 2006-03-28 JP JP2006088348A patent/JP2006304285A/en active Pending
- 2006-03-29 EP EP06006504A patent/EP1720370B1/en active Active
- 2006-03-29 AT AT06006504T patent/ATE433641T1/en not_active IP Right Cessation
- 2006-03-29 DE DE602006007192T patent/DE602006007192D1/en active Active
-
2009
- 2009-05-28 US US12/474,020 patent/US20090293106A1/en not_active Abandoned
Patent Citations (100)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3641433A (en) * | 1969-06-09 | 1972-02-08 | Us Air Force | Transmitted reference synchronization system |
US4247908A (en) * | 1978-12-08 | 1981-01-27 | Motorola, Inc. | Re-linked portable data terminal controller system |
US4730340A (en) * | 1980-10-31 | 1988-03-08 | Harris Corp. | Programmable time invariant coherent spread symbol correlator |
US4503533A (en) * | 1981-08-20 | 1985-03-05 | Stanford University | Local area communication network utilizing a round robin access scheme with improved channel utilization |
US4500987A (en) * | 1981-11-24 | 1985-02-19 | Nippon Electric Co., Ltd. | Loop transmission system |
US4736095A (en) * | 1982-01-25 | 1988-04-05 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols |
US4673805A (en) * | 1982-01-25 | 1987-06-16 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable scanning head for reading bar code symbols |
US4494238A (en) * | 1982-06-30 | 1985-01-15 | Motorola, Inc. | Multiple channel data link system |
US4644523A (en) * | 1984-03-23 | 1987-02-17 | Sangamo Weston, Inc. | System for improving signal-to-noise ratio in a direct sequence spread spectrum signal receiver |
US4639914A (en) * | 1984-12-06 | 1987-01-27 | At&T Bell Laboratories | Wireless PBX/LAN system with optimum combining |
US4635221A (en) * | 1985-01-18 | 1987-01-06 | Allied Corporation | Frequency multiplexed convolver communication system |
US4672658A (en) * | 1985-10-16 | 1987-06-09 | At&T Company And At&T Bell Laboratories | Spread spectrum wireless PBX |
US4829540A (en) * | 1986-05-27 | 1989-05-09 | Fairchild Weston Systems, Inc. | Secure communication system for multiple remote units |
US4740792A (en) * | 1986-08-27 | 1988-04-26 | Hughes Aircraft Company | Vehicle location system |
US4901307A (en) * | 1986-10-17 | 1990-02-13 | Qualcomm, Inc. | Spread spectrum multiple access communication system using satellite or terrestrial repeaters |
US4933953A (en) * | 1987-09-10 | 1990-06-12 | Kabushiki Kaisha Kenwood | Initial synchronization in spread spectrum receiver |
US4894842A (en) * | 1987-10-15 | 1990-01-16 | The Charles Stark Draper Laboratory, Inc. | Precorrelation digital spread spectrum receiver |
US4933952A (en) * | 1988-04-08 | 1990-06-12 | Lmt Radioprofessionnelle | Asynchronous digital correlator and demodulators including a correlator of this type |
US5483676A (en) * | 1988-08-04 | 1996-01-09 | Norand Corporation | Mobile radio data communication system and method |
US5103461A (en) * | 1989-06-29 | 1992-04-07 | Symbol Technologies, Inc. | Signal quality measure in packet data communication |
US5280498A (en) * | 1989-06-29 | 1994-01-18 | Symbol Technologies, Inc. | Packet data communication system |
US5528621A (en) * | 1989-06-29 | 1996-06-18 | Symbol Technologies, Inc. | Packet data communication system |
US5008899A (en) * | 1989-07-03 | 1991-04-16 | Futaba Denshi Kogyo Kabushiki Kaisha | Receiver for spectrum spread communication |
US5109390A (en) * | 1989-11-07 | 1992-04-28 | Qualcomm Incorporated | Diversity receiver in a cdma cellular telephone system |
US5187575A (en) * | 1989-12-29 | 1993-02-16 | Massachusetts Institute Of Technology | Source adaptive television system |
US5103459A (en) * | 1990-06-25 | 1992-04-07 | Qualcomm Incorporated | System and method for generating signal waveforms in a cdma cellular telephone system |
US5103459B1 (en) * | 1990-06-25 | 1999-07-06 | Qualcomm Inc | System and method for generating signal waveforms in a cdma cellular telephone system |
US5640414A (en) * | 1992-03-05 | 1997-06-17 | Qualcomm Incorporated | Mobile station assisted soft handoff in a CDMA cellular communications system |
US5896561A (en) * | 1992-04-06 | 1999-04-20 | Intermec Ip Corp. | Communication network having a dormant polling protocol |
US5418812A (en) * | 1992-06-26 | 1995-05-23 | Symbol Technologies, Inc. | Radio network initialization method and apparatus |
US5285494A (en) * | 1992-07-31 | 1994-02-08 | Pactel Corporation | Network management system |
US5491644A (en) * | 1993-09-07 | 1996-02-13 | Georgia Tech Research Corporation | Cell engineering tool and methods |
US5598532A (en) * | 1993-10-21 | 1997-01-28 | Optimal Networks | Method and apparatus for optimizing computer networks |
US5488569A (en) * | 1993-12-20 | 1996-01-30 | At&T Corp. | Application-oriented telecommunication system interface |
US6336152B1 (en) * | 1994-05-27 | 2002-01-01 | Microsoft Corporation | Method for automatically configuring devices including a network adapter without manual intervention and without prior configuration information |
US5517495A (en) * | 1994-12-06 | 1996-05-14 | At&T Corp. | Fair prioritized scheduling in an input-buffered switch |
US5519762A (en) * | 1994-12-21 | 1996-05-21 | At&T Corp. | Adaptive power cycling for a cordless telephone |
US5915214A (en) * | 1995-02-23 | 1999-06-22 | Reece; Richard W. | Mobile communication service provider selection system |
US5630207A (en) * | 1995-06-19 | 1997-05-13 | Lucent Technologies Inc. | Methods and apparatus for bandwidth reduction in a two-way paging system |
US6580700B1 (en) * | 1995-10-27 | 2003-06-17 | Symbol Technologies, Inc. | Data rate algorithms for use in wireless local area networks |
US6073075A (en) * | 1995-11-01 | 2000-06-06 | Hitachi, Ltd. | Method and system for providing information for a mobile terminal |
US6208629B1 (en) * | 1996-04-30 | 2001-03-27 | 3Com Corporation | Method and apparatus for assigning spectrum of a local area network |
US6188649B1 (en) * | 1996-06-28 | 2001-02-13 | Matsushita Electric Industrial Co., Ltd. | Method for reading magnetic super resolution type magneto-optical recording medium |
US5872968A (en) * | 1996-10-16 | 1999-02-16 | International Business Machines Corporation | Data processing network with boot process using multiple servers |
US5875179A (en) * | 1996-10-29 | 1999-02-23 | Proxim, Inc. | Method and apparatus for synchronized communication over wireless backbone architecture |
US6011784A (en) * | 1996-12-18 | 2000-01-04 | Motorola, Inc. | Communication system and method using asynchronous and isochronous spectrum for voice and data |
US6078568A (en) * | 1997-02-25 | 2000-06-20 | Telefonaktiebolaget Lm Ericsson | Multiple access communication network with dynamic access control |
US6240083B1 (en) * | 1997-02-25 | 2001-05-29 | Telefonaktiebolaget L.M. Ericsson | Multiple access communication network with combined contention and reservation mode access |
US6397040B1 (en) * | 1997-04-14 | 2002-05-28 | British Telecommunications Public Limited Company | Telecommunications apparatus and method |
US6070243A (en) * | 1997-06-13 | 2000-05-30 | Xylan Corporation | Deterministic user authentication service for communication network |
US6199032B1 (en) * | 1997-07-23 | 2001-03-06 | Edx Engineering, Inc. | Presenting an output signal generated by a receiving device in a simulated communication system |
US6356758B1 (en) * | 1997-12-31 | 2002-03-12 | Nortel Networks Limited | Wireless tools for data manipulation and visualization |
US6677894B2 (en) * | 1998-04-28 | 2004-01-13 | Snaptrack, Inc | Method and apparatus for providing location-based information via a computer network |
US6347091B1 (en) * | 1998-06-19 | 2002-02-12 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for dynamically adapting a connection state in a mobile communications system |
US6725260B1 (en) * | 1998-09-11 | 2004-04-20 | L.V. Partners, L.P. | Method and apparatus for configuring configurable equipment with configuration information received from a remote location |
US6336035B1 (en) * | 1998-11-19 | 2002-01-01 | Nortel Networks Limited | Tools for wireless network planning |
US6177905B1 (en) * | 1998-12-08 | 2001-01-23 | Avaya Technology Corp. | Location-triggered reminder for mobile user devices |
US6564380B1 (en) * | 1999-01-26 | 2003-05-13 | Pixelworld Networks, Inc. | System and method for sending live video on the internet |
US6218930B1 (en) * | 1999-03-10 | 2001-04-17 | Merlot Communications | Apparatus and method for remotely powering access equipment over a 10/100 switched ethernet network |
US6208841B1 (en) * | 1999-05-03 | 2001-03-27 | Qualcomm Incorporated | Environmental simulator for a wireless communication device |
US6393290B1 (en) * | 1999-06-30 | 2002-05-21 | Lucent Technologies Inc. | Cost based model for wireless architecture |
US20040038687A1 (en) * | 1999-12-29 | 2004-02-26 | Roderick Nelson | Monitoring network performance using individual cell phone location and performance information |
US20020052205A1 (en) * | 2000-01-26 | 2002-05-02 | Vyyo, Ltd. | Quality of service scheduling scheme for a broadband wireless access system |
US6512916B1 (en) * | 2000-02-23 | 2003-01-28 | America Connect, Inc. | Method for selecting markets in which to deploy fixed wireless communication systems |
US6526275B1 (en) * | 2000-04-24 | 2003-02-25 | Motorola, Inc. | Method for informing a user of a communication device where to obtain a product and communication system employing same |
US7020773B1 (en) * | 2000-07-17 | 2006-03-28 | Citrix Systems, Inc. | Strong mutual authentication of devices |
US6404772B1 (en) * | 2000-07-27 | 2002-06-11 | Symbol Technologies, Inc. | Voice and data wireless communications network and method |
US6687498B2 (en) * | 2000-08-14 | 2004-02-03 | Vesuvius Inc. | Communique system with noncontiguous communique coverage areas in cellular communication networks |
US20020069278A1 (en) * | 2000-12-05 | 2002-06-06 | Forsloew Jan | Network-based mobile workgroup system |
US20020078361A1 (en) * | 2000-12-15 | 2002-06-20 | David Giroux | Information security architecture for encrypting documents for remote access while maintaining access control |
US6678516B2 (en) * | 2001-05-21 | 2004-01-13 | Nokia Corporation | Method, system, and apparatus for providing services in a privacy enabled mobile and Ubicom environment |
US20030014646A1 (en) * | 2001-07-05 | 2003-01-16 | Buddhikot Milind M. | Scheme for authentication and dynamic key exchange |
US20030018889A1 (en) * | 2001-07-20 | 2003-01-23 | Burnett Keith L. | Automated establishment of addressability of a network device for a target network enviroment |
US6674403B2 (en) * | 2001-09-05 | 2004-01-06 | Newbury Networks, Inc. | Position detection and location tracking in a wireless network |
US6847892B2 (en) * | 2001-10-29 | 2005-01-25 | Digital Angel Corporation | System for localizing and sensing objects and providing alerts |
US20030107590A1 (en) * | 2001-11-07 | 2003-06-12 | Phillippe Levillain | Policy rule management for QoS provisioning |
US20030110131A1 (en) * | 2001-12-12 | 2003-06-12 | Secretseal Inc. | Method and architecture for providing pervasive security to digital assets |
US6879812B2 (en) * | 2002-02-08 | 2005-04-12 | Networks Associates Technology Inc. | Portable computing device and associated method for analyzing a wireless local area network |
US6839338B1 (en) * | 2002-03-20 | 2005-01-04 | Utstarcom Incorporated | Method to provide dynamic internet protocol security policy service |
US6993683B2 (en) * | 2002-05-10 | 2006-01-31 | Microsoft Corporation | Analysis of pipelined networks |
US20050058132A1 (en) * | 2002-05-20 | 2005-03-17 | Fujitsu Limited | Network repeater apparatus, network repeater method and network repeater program |
US20040002343A1 (en) * | 2002-06-28 | 2004-01-01 | Compaq Information Technologies Group, L.P. | Location determination in a wireless communication network |
US20050068925A1 (en) * | 2002-07-26 | 2005-03-31 | Stephen Palm | Wireless access point setup and management within wireless local area network |
US20040025044A1 (en) * | 2002-07-30 | 2004-02-05 | Day Christopher W. | Intrusion detection system |
US20040120370A1 (en) * | 2002-08-13 | 2004-06-24 | Agilent Technologies, Inc. | Mounting arrangement for high-frequency electro-optical components |
US20040047320A1 (en) * | 2002-09-09 | 2004-03-11 | Siemens Canada Limited | Wireless local area network with clients having extended freedom of movement |
US20040064560A1 (en) * | 2002-09-26 | 2004-04-01 | Cisco Technology, Inc., A California Corporation | Per user per service traffic provisioning |
US20040095932A1 (en) * | 2002-11-18 | 2004-05-20 | Toshiba America Information Systems, Inc. | Method for SIP - mobility and mobile - IP coexistence |
US20040095914A1 (en) * | 2002-11-19 | 2004-05-20 | Toshiba America Research, Inc. | Quality of service (QoS) assurance system using data transmission control |
US7324489B1 (en) * | 2003-02-18 | 2008-01-29 | Cisco Technology, Inc. | Managing network service access |
US20050021979A1 (en) * | 2003-06-05 | 2005-01-27 | Ulrich Wiedmann | Methods and systems of remote authentication for computer networks |
US20050030929A1 (en) * | 2003-07-15 | 2005-02-10 | Highwall Technologies, Llc | Device and method for detecting unauthorized, "rogue" wireless LAN access points |
US20050040968A1 (en) * | 2003-07-31 | 2005-02-24 | Chanakya Damarla | Method for RF fingerprinting |
US20050054350A1 (en) * | 2003-08-26 | 2005-03-10 | Chris Zegelin | Real time location system |
US20050073980A1 (en) * | 2003-09-17 | 2005-04-07 | Trapeze Networks, Inc. | Wireless LAN management |
US20050059406A1 (en) * | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Wireless LAN measurement feedback |
US20050059405A1 (en) * | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Simulation driven wireless LAN planning |
US20050064873A1 (en) * | 2003-09-22 | 2005-03-24 | Jeyhan Karaoguz | Automatic quality of service based resource allocation |
US20060045050A1 (en) * | 2004-08-27 | 2006-03-02 | Andreas Floros | Method and system for a quality of service mechanism for a wireless network |
US20060046744A1 (en) * | 2004-08-27 | 2006-03-02 | Microsoft Corporation | System and method for enforcing location privacy using rights management |
Cited By (52)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8161278B2 (en) | 2005-03-15 | 2012-04-17 | Trapeze Networks, Inc. | System and method for distributing keys in a wireless network |
US8635444B2 (en) | 2005-03-15 | 2014-01-21 | Trapeze Networks, Inc. | System and method for distributing keys in a wireless network |
US8116275B2 (en) | 2005-10-13 | 2012-02-14 | Trapeze Networks, Inc. | System and network for wireless network monitoring |
US8218449B2 (en) | 2005-10-13 | 2012-07-10 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
US8638762B2 (en) | 2005-10-13 | 2014-01-28 | Trapeze Networks, Inc. | System and method for network integrity |
US8514827B2 (en) | 2005-10-13 | 2013-08-20 | Trapeze Networks, Inc. | System and network for wireless network monitoring |
US8457031B2 (en) | 2005-10-13 | 2013-06-04 | Trapeze Networks, Inc. | System and method for reliable multicast |
US8438657B2 (en) * | 2006-02-07 | 2013-05-07 | Siemens Aktiengesellschaft | Method for controlling the access to a data network |
US20070199048A1 (en) * | 2006-02-07 | 2007-08-23 | Stefan Kaleja | Method for controlling the access to a data network |
US8964747B2 (en) | 2006-05-03 | 2015-02-24 | Trapeze Networks, Inc. | System and method for restricting network access using forwarding databases |
US8966018B2 (en) | 2006-05-19 | 2015-02-24 | Trapeze Networks, Inc. | Automated network device configuration and network deployment |
US10327202B2 (en) | 2006-06-09 | 2019-06-18 | Trapeze Networks, Inc. | AP-local dynamic switching |
US10638304B2 (en) | 2006-06-09 | 2020-04-28 | Trapeze Networks, Inc. | Sharing data between wireless switches system and method |
US11758398B2 (en) | 2006-06-09 | 2023-09-12 | Juniper Networks, Inc. | Untethered access point mesh system and method |
US11627461B2 (en) | 2006-06-09 | 2023-04-11 | Juniper Networks, Inc. | AP-local dynamic switching |
US11432147B2 (en) | 2006-06-09 | 2022-08-30 | Trapeze Networks, Inc. | Untethered access point mesh system and method |
US10834585B2 (en) | 2006-06-09 | 2020-11-10 | Trapeze Networks, Inc. | Untethered access point mesh system and method |
US10798650B2 (en) | 2006-06-09 | 2020-10-06 | Trapeze Networks, Inc. | AP-local dynamic switching |
US9838942B2 (en) | 2006-06-09 | 2017-12-05 | Trapeze Networks, Inc. | AP-local dynamic switching |
US9258702B2 (en) | 2006-06-09 | 2016-02-09 | Trapeze Networks, Inc. | AP-local dynamic switching |
US9191799B2 (en) | 2006-06-09 | 2015-11-17 | Juniper Networks, Inc. | Sharing data between wireless switches system and method |
US8818322B2 (en) | 2006-06-09 | 2014-08-26 | Trapeze Networks, Inc. | Untethered access point mesh system and method |
US8301753B1 (en) | 2006-06-27 | 2012-10-30 | Nosadia Pass Nv, Limited Liability Company | Endpoint activity logging |
US8214482B2 (en) * | 2006-06-27 | 2012-07-03 | Nosadia Pass Nv, Limited Liability Company | Remote log repository with access policy |
US20060218273A1 (en) * | 2006-06-27 | 2006-09-28 | Stephen Melvin | Remote Log Repository With Access Policy |
US8340110B2 (en) | 2006-09-15 | 2012-12-25 | Trapeze Networks, Inc. | Quality of service provisioning for wireless networks |
US8670383B2 (en) | 2006-12-28 | 2014-03-11 | Trapeze Networks, Inc. | System and method for aggregation and queuing in a wireless network |
US8902904B2 (en) | 2007-09-07 | 2014-12-02 | Trapeze Networks, Inc. | Network assignment based on priority |
US8238942B2 (en) | 2007-11-21 | 2012-08-07 | Trapeze Networks, Inc. | Wireless station location detection |
US8150357B2 (en) | 2008-03-28 | 2012-04-03 | Trapeze Networks, Inc. | Smoothing filter for irregular update intervals |
US8978105B2 (en) | 2008-07-25 | 2015-03-10 | Trapeze Networks, Inc. | Affirming network relationships and resource access via related networks |
US8238298B2 (en) | 2008-08-29 | 2012-08-07 | Trapeze Networks, Inc. | Picking an optimal channel for an access point in a wireless network |
EP2608457A3 (en) * | 2011-12-19 | 2015-09-16 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US9210728B2 (en) * | 2011-12-19 | 2015-12-08 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US9137171B2 (en) * | 2011-12-19 | 2015-09-15 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US9408177B2 (en) | 2011-12-19 | 2016-08-02 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
EP2608458A3 (en) * | 2011-12-19 | 2015-09-09 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US20130155851A1 (en) * | 2011-12-19 | 2013-06-20 | Cisco Technology, Inc. | System and method for resource management for operator services and internet |
US8565793B1 (en) | 2012-05-15 | 2013-10-22 | Cisco Technology, Inc. | System and method for scoped paging in multi-radio heterogeneous networks |
US20130340033A1 (en) * | 2012-06-19 | 2013-12-19 | Appsense Limited | Apparatus, methods and media for location based data access policies |
GB2503230A (en) * | 2012-06-19 | 2013-12-25 | Appsense Ltd | Location based network access |
US9661522B2 (en) | 2012-07-09 | 2017-05-23 | Cisco Technology, Inc. | System and method associated with a service flow router |
US9668161B2 (en) | 2012-07-09 | 2017-05-30 | Cisco Technology, Inc. | System and method associated with a service flow router |
US20140028437A1 (en) * | 2012-07-26 | 2014-01-30 | Bby Solutions, Inc. | Automatically applying geographical constraints on electronic device functionality: method and apparatus |
US10681142B2 (en) * | 2014-01-09 | 2020-06-09 | Comcast Cable Communications, Llc | Network filter |
US11489837B2 (en) | 2014-01-09 | 2022-11-01 | Comcast Cable Communications, Llc | Network filter |
US20150195362A1 (en) * | 2014-01-09 | 2015-07-09 | Comcast Cable Communications, Llc | Network Filter |
US20160014674A1 (en) * | 2014-07-10 | 2016-01-14 | Lg Electronics Inc. | Method for location based access control in wireless communication system and apparatus therefor |
US11457487B2 (en) | 2016-04-01 | 2022-09-27 | Comcast Cable Communications, Llc | Methods and systems for connecting to a wireless network |
US10567438B2 (en) | 2017-07-24 | 2020-02-18 | Cyberark Software Ltd. | Providing privileged access to non-privileged accounts |
EP3435622A1 (en) * | 2017-07-24 | 2019-01-30 | Cyber-Ark Software Ltd. | Providing privileged access to non-privileged accounts |
US20230064926A1 (en) * | 2021-08-27 | 2023-03-02 | The Toronto-Dominion Bank | System and Method for Determining a Physical Location Associated with an Activity Detected on a Mobile Device |
Also Published As
Publication number | Publication date |
---|---|
DE602006007192D1 (en) | 2009-07-23 |
EP1720370A1 (en) | 2006-11-08 |
CA2541424A1 (en) | 2006-09-30 |
EP1720370B1 (en) | 2009-06-10 |
US7551574B1 (en) | 2009-06-23 |
JP2006304285A (en) | 2006-11-02 |
ATE433641T1 (en) | 2009-06-15 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7551574B1 (en) | Method and apparatus for controlling wireless network access privileges based on wireless client location | |
EP2375690B1 (en) | Locating devices in a data network | |
US7342906B1 (en) | Distributed wireless network security system | |
US8448257B2 (en) | Method and system for controlling context-based wireless access to secured network resources | |
US20020157007A1 (en) | User authentication system and user authentication method used therefor | |
WO2014074721A1 (en) | Policy-based resource access via nfc | |
US11431508B1 (en) | Distributed ledger-based ad-hoc system, apparatus and method | |
US11539715B1 (en) | Distributed ledger-based ad-hoc system, apparatus and method using fingerprint verification | |
US7551601B2 (en) | Wireless network service provision method and wireless network system | |
CA2814829C (en) | Location aware data network | |
Lee et al. | Intelligent home network authentication: home device authentication using device certification | |
KR20190054409A (en) | Security search server and method for enhancing security using the same | |
MXPA06001088A (en) | System and method for controlling access to a network using redirection |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: BELDEN INC.,MISSOURI Free format text: CHANGE OF NAME;ASSIGNOR:TRAPEZE NETWORKS, INC.;REEL/FRAME:023985/0751 Effective date: 20091221 Owner name: BELDEN INC., MISSOURI Free format text: CHANGE OF NAME;ASSIGNOR:TRAPEZE NETWORKS, INC.;REEL/FRAME:023985/0751 Effective date: 20091221 |
|
AS | Assignment |
Owner name: TRAPEZE NETWORKS, INC., CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:BELDEN INC.;REEL/FRAME:025327/0302 Effective date: 20101108 |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |