Abstract: Aspects of the disclosure include a method and associated network device. The method includes authenticating an identity of a user of a client device after the client device is associated with an access network provider. Authenticating the identity of the user comprises receiving, from an identity provider, a credential associated with the identity, and receiving, from the identity provider, information identifying a network-based service to be applied to network traffic with the client device. The method further includes establishing, using the credential and the received information, a secure connection between the access network provider and a service provider that is capable of providing the network-based service. The method further includes receiving network traffic from the service provider. Packets of the network traffic include an assurance value that enables the client device to determine that the network-based service is being provided by the service provider.

Abstract: Techniques for improved peer-to-peer communication are provided. A set connectivity metrics among a set of wireless devices on a plurality of wireless channels in a wireless network is collected, and a wireless channel of the plurality of wireless channels is identified, based on the set of connectivity metrics, to use for peer-to-peer communication. A request is received, from a peer-to-peer device, for peer-to-peer communications, and the wireless channel is indicated to the peer-to-peer device, where the peer-to-peer device uses the first wireless channel for peer-to-peer communications in response to the indication.

Abstract: Techniques for delegated peer-to-peer scheduling are provided. A first peer-to-peer device determines one or more wireless channels allocated for peer-to-peer communication, and receives a request indicating a set of transmission characteristics from a second peer-to-peer device that uses the first peer-to-peer device as a communications proxy. The first peer-to-peer device schedules wireless resources of the one or more wireless channels to a plurality of peer-to-peer devices based at least in part on the set of transmission characteristics, and performs peer-to-peer communications with the second peer-to-peer device in accordance with the scheduled wireless resources.

Abstract: Techniques herein facilitate dynamic configuration of a wireless local area network (WLAN) for large public venue (LPV) environments. In one example, a method may include providing an initial configuration for access points APs of a WLAN for an event at an LPV based on a profile for the event, a location of each AP for the venue, and anticipated demand at the APs; determining, for a particular time for the event, a distribution of wireless devices and channel support capabilities of the wireless devices different locations for the LPV; and providing an updated configuration for one or more APs at the one or more locations for the venue based on the distribution of the wireless devices and the channel support capabilities of the wireless devices determined for the particular time for the event at the LPV.

Abstract: Techniques for improved peer-to-peer communication are provided. A roaming peer-to-peer device may identify a new access point (AP) and initiate a transition to the new AP. Initiating transition can involve sending, to the new AP, the current peer-to-peer communication schedule for approval and/or negotiating a modified peer-to-peer communication schedule with the new AP. When the roaming peer-to-peer device and the new AP agree on the peer-to-peer communication schedule, the peer-to-peer device may notify its counterpart that it has roamed to the new AP and also notify the counterpart of any updates to the peer-to-peer communication schedule.

Abstract: Providing for time sensitive networking (TSN) traffic in high density deployments is described. An access point (AP) is a high density deployment receives a message identifying another AP as a TSN neighbor and also detects a TSN device within an area covered by the APs. This arrangement may cause traffic interruptions for the TSN traffic between the TSN device and the APs. In order to prevent disruption in TSN traffic, a TSN time slot and a resource unit (RU) is determined for each of the APs, and the TSN traffic is communicated between the various devices in network according to the determined TSN time slot and RU.

Abstract: Federation policy exchange is provided in response to receiving a sharing query from an Access Point (AP) indicating that an associated wireless network supports federated identities with data sharing, determining whether the sharing query is within sharing preferences; and in response to determining that the sharing query is within the sharing preferences, transmitting, to the AP, a positive response for identity sharing that authorizes collection and sharing of identity data with at least one entity identified in a sharing policy for the associated wireless network. In various embodiments, federation policy exchange includes transmitting a support notification, via an AP, indicating support for federated identities with data sharing within a wireless network associated with the AP; and in response to receiving a first identify sharing preference from a User Equipment (UE) that indicates that negotiation is preferred, transmitting a sharing policy for the wireless network to the UE.

Abstract: Embodiments herein describe disconnecting, by an access node, a first device having a first media access control (MAC) address due to a network violation and receiving, by the access node, information about a second device having a second MAC address different from the first MAC address. In one embodiment, the information is generated by a certificate server based on a token generated by the second device. Further, when the access node determines, based on the information, that the second device is the first device, the access node denies a connection request from the second device.

Abstract: Techniques for access point (AP) based location computation are disclosed. A target wireless AP, communicatively coupled to a wireless station (STA), is identified. One or more location buddy APs, relating to the target AP, are identified based on the physical locations of the location buddy APs and the target AP. It is determined that a first location buddy AP, of the one or more location buddy APs, is communicatively coupled to the STA, and in response a location of the STA is determined using the target AP.

Abstract: A method for adaptive presence-based radio configuration of access points in a venue includes defining a number of regions in the venue in which access points are deployed, each region having a center point, and assigning a first access point to a first region, positioned at the center of the first region. The method also includes affecting a first energy level in the first region, which corresponds to a power of a transmit signal emitted by the first access point, and assigning to the first region a configurable capacity value that determines an acceptable overlap constraint between the first energy level of the first region and an energy level of a neighboring region. The method further includes generating data describing a tessellation graph in which a possible map of the access points is formed using an iterative descent process based on the first energy level and the overlap constraint.

Abstract: A method for calibrating a magnetometer of a device is provided. The method includes collecting, with a portable calibration device having a magnetometer, magnetic field measurements in a spatial region about a mounting location where the device is to be installed for operation, estimating magnetometer compensation parameters to correct for magnetic field distortion at the mounting location based on the magnetic field measurements collected by the portable calibration device, and configuring the device installed at the mounting location based on the magnetometer compensation parameters.

Abstract: A method for providing adaptive radio transmit power based on antenna pattern and elevation tilt measured through an accelerometer is provided. The method includes estimating an orientation of a wireless device using an orientation sensor integrated in or on the wireless device, and determining an adjustment factor for a transmitter of the wireless device based on the orientation. The method further includes adjusting output power of the transmitter of the wireless device based on the adjustment factor.

Abstract: In one embodiment, a device receives discovery data generated by a plurality of networking devices in a network. The device determines, based on the discovery data, a hierarchy of layers of the network. The device receives a request by a client that is external to the network to access remotely a particular endpoint in the network. The device configures, and in response to the request, a proxy chain of remote access agents executed by a subset of networking devices from the plurality of networking devices to allow the client to access remotely the particular endpoint, each of those networking devices proxying traffic between different layers of the network.

Abstract: Differentiated service in a federation-based access network is provided by receiving, with a request for access to a wireless network offering at least a two different service levels based on user identities, a set of user credentials from a User Equipment (UE); forwarding, for authentication, the set of user credentials to an identity provider in an identity federation with the wireless network, wherein the identity provider is independent from the wireless network; in response to determining that the set of user credentials indicate a realm known to be associated with a given service level, providing network access to the UE according to the given service level; and in response to determining that the given service level is not a highest service level in the wireless network, transmitting a list of preferred realms to the UE that are associated with higher service levels than the given service level.

Abstract: An authorization device obtains a registration request associated with an end device, the registration request including a new randomized media access control (MAC) address associated with the end device; determines whether the end device is authorized to use the new randomized MAC address; transmits a message to the end device with a first randomly generated number when it is determined that the end device is authorized to use the new randomized MAC address; obtains integrity information associated with the end device, the first integrity information being computed based on the first randomly generated number; transmits a request to a validation system to validate the end device based on the first integrity information; obtains an indication that the end device is validated; determines policies associated with the end device when it is determined that the end device is validated; and applies the policies to the end device.

Abstract: Techniques are provided for controlling access entitlement for networking device data. In one example, a geographic location of a networking device is determined. A request to access data associated with the networking device is obtained from a user device. A user parameter of a user associated with the user device is determined. An access policy that controls access to the data based on the geographic location of the networking device and the user parameter is identified. The request to access the data is permitted or denied based on the geographic location of the networking device, the user parameter, and the access policy.

Abstract: A host clock value may be provided to a client device. An Access Point (AP) may obtain a Timing Synchronization Function (TSF)-based time stamp. Next, the TSF-based time stamp may be placed in an Information Element (IE) that was intended to contain follow up information. The IE may then be transmitted.

Abstract: Balancing Multi-link Operation (MLO) usage may be provided. A list of a plurality of Access Points (APs) for each of a plurality of Multi-link Operation (MLO) types indicating availability of each of the plurality of APs may be received. A first request indicating an MLO type associated with the first request is a first MLO type may be received. In response to the first request, a first subset of the list of the plurality of APs that support the MLO type associated with the first request may be sent. A second request indicating that an MLO type associated with the second request is the first MLO type may be received. In response to the second request, a second subset of the list of the plurality of APs that support the MLO type associated with the second request may be sent. The first subset is different from the second subset.

Abstract: A method comprises, at a wireless network controller of wireless access points through which wireless client devices that are wireless communicate with the controller: upon receiving, from a wireless client device, a dynamic host configuration protocol (DHCP) request having a media access control (MAC) address, determining whether the wireless client device rotated its MAC address from a previous MAC address to the MAC address; when the wireless client device rotated its MAC address, forwarding, to a DHCP service, the DHCP request with a notification of a MAC address rotation to cause the DHCP service to reassign a previously assigned Internet Protocol (IP) address to the wireless client device; and upon receiving, from the DHCP service, a DHCP offer asserting the previously assigned IP address, forwarding the DHCP offer to the wireless client device.

Abstract: Adaptive guard interval calibration may be provided. A computing device may receive a first plurality of delay spread values. Each of the first plurality of delay spread values may respectively comprise an amount of time between when each of a respective first plurality Access Points (APs) receives a first tuning symbol from a first calibrating AP and when each of the respective first plurality APs receives a final multipath reflection of the first tuning symbol. Next, a first Guard Interval (GI) may be determined based on the first plurality of delay spread values. The first calibrating AP may then be provisioned with the first GI.