Abstract: Provided are devices, methods, and systems for generating and deploying networking profiles for enabling computing devices to connect to wireless networks in a secure manner. For example, a method may include: receiving a request for a networking profile from a second computing device, the networking profile configured to enable the second computing device to access to a wireless network; generating, based on the received request for the networking profile, a code for presentation; transmitting the code for presentation to the second computing device; receiving an indication of a content of the code for presentation from a first computing device different than the second computing device; generating the networking profile based on receiving the indication of the content of the code for presentation; and transmitting the generated networking profile to the second computing device.

Abstract: During operation, an access point may provide a first WLAN and a second WLAN, where the first WLAN uses a WPA2-compatible authentication protocol and the second WLAN uses a WPA3-compatible authentication protocol. In response to an association request or a probe request associated with (or from) an electronic device, the access point may establish a connection with the electronic device using the first WLAN. Then, the access point may confirm, with a computer system, that a binding between a passphrase associated with the electronic device and the second WLAN exists. Alternatively, when the binding does not exist, the access point may establish the binding in the computer system. Next, the access point may perform a BSS transition of the electronic device from the first WLAN to the second WLAN.

Abstract: An electronic device that applies attributes or characteristics of a persona group is described. Notably, the electronic device may authenticate, using an associated authentication technique, a given second electronic device in a set of second electronic devices to a network, where at least some second electronic devices in the set of second electronic devices use different authentication techniques to authenticate to the network. Then, the electronic device may obtain (e.g., in a non-transitory memory), based at least in part on an identifier of a user associated with the set of second electronic devices, information specifying the persona group. Moreover, the electronic device may apply, based at least in part on the information, the attributes or characteristics of the persona group to the set of second electronic devices.

Abstract: An electronic device that selectively provides secure access of a second electronic device to a network is described. This electronic device receives an access request associated with a computer, where the access request includes one or more authentication parameters associated with a user. In response, the electronic device confirms the one or more authentication parameters to determine whether there is an authentication match. Moreover, when there is an authentication match, the electronic device accesses a policy associated with or that includes: a spatial criterion, a temporal criterion, information associated with the user, information associated with the one or more authentication parameters, and/or information associated with the network.

Abstract: An electronic device that selectively provides secure access of a second electronic device to a network is described. This electronic device receives an access request associated with a computer, where the access request includes one or more authentication parameters associated with a user. In response, the electronic device confirms the one or more authentication parameters to determine whether there is an authentication match. Moreover, when there is an authentication match, the electronic device accesses a policy associated with or that includes: a spatial criterion, a temporal criterion, information associated with the user, information associated with the one or more authentication parameters, and/or information associated with the network.

Abstract: During operation, an access point may provide a first WLAN and a second WLAN, where the first WLAN uses a WPA2-compatible authentication protocol and the second WLAN uses a WPA3-compatible authentication protocol. In response to an association request or a probe request associated with (or from) an electronic device, the access point may establish a connection with the electronic device using the first WLAN. Then, the access point may confirm, with a computer system, that a binding between a passphrase associated with the electronic device and the second WLAN exists. Alternatively, when the binding does not exist, the access point may establish the binding in the computer system. Next, the access point may perform a BSS transition of the electronic device from the first WLAN to the second WLAN.

Abstract: Provided are devices, methods, and systems for generating and deploying networking profiles for enabling computing devices to connect to wireless networks in a secure manner. For example, a method may include: receiving a request for a networking profile from a second computing device, the networking profile configured to enable the second computing device to access to a wireless network; generating, based on the received request for the networking profile, a code for presentation; transmitting the code for presentation to the second computing device; receiving an indication of a content of the code for presentation from a first computing device different than the second computing device; generating the networking profile based on receiving the indication of the content of the code for presentation; and transmitting the generated networking profile to the second computing device.

Abstract: During operation, a computer network device may provide an identifier for a network (such as an SSID for a WLAN) that supports certificate-based authentication and pre-shared-key-based authentication. Then, during an authentication procedure, the computer network device may receive an authentication request associated with an electronic device, where the authentication request specifies an instance of the certificate-based authentication or an instance of the pre-shared-key-based authentication. Moreover, the computer network device may provide authentication information addressed to a computer based at least in part on the authentication request.

Abstract: An electronic device that selectively provides secure access of a second electronic device to a network is described. This electronic device receives an access request associated with a computer, where the access request includes one or more authentication parameters associated with a user. In response, the electronic device confirms the one or more authentication parameters to determine whether there is an authentication match. Moreover, when there is an authentication match, the electronic device accesses a policy associated with or that includes: a spatial criterion, a temporal criterion, information associated with the user, information associated with the one or more authentication parameters, and/or information associated with the network.