Abstract: A passphrase is assigned to an end user device for use in authenticating the end user device for a network using SAE. An identification of the end user device is determined during an authentication process. The passphrase assigned to the end user device is determined at a network side using the identification of the end user device. A shared secret is generated using the passphrase. Whether the end user device has generated the shared secret is determined. The end user device is authenticated for the network, if it is determined that the end user device has generated the shared secret.

Abstract: A technique for network authentication interoperability involves initiating an authentication procedure on a first network, authenticating on a second network, and allowing access at the first network. The technique can include filtering access to a network, thereby restricting access to users with acceptable credentials. Offering a service that incorporates these techniques can enable incorporation of the techniques into an existing system with minimal impact to network configuration.

Abstract: A technique for deploying proximity beacons involves coupling proximity beacon transmitters and/or hubs to an enterprise network device. The coupling can be by way of physically connecting communication interfaces of the network device and the proximity beacon transmitter or hub. In some implementations, the communication interface can be implemented as a USB interface. In some implementations, the communication interface can be embedded within the network device, such that the communication interface can provide the physical connection in the form of an embedded or internal connection.

Abstract: Management of a proximity beacon transmitter using a network device. Operational characteristics are generated for a proximity beacon transmitter coupled to a network device. The proximity beacon is configured through the network device. It is determined if the proximity beacon transmitter is operating according to the operational characteristics generated for the proximity beacon transmitter. The proximity beacon transmitter is reconfigured to operate according to the operational characteristics if it is determined that the proximity beacon transmitter is operating in nonconformity with the operational characteristics.

Abstract: A technique for network authentication interoperability involves initiating an authentication procedure on a first network, authenticating on a second network, and allowing access at the first network. The technique can include filtering access to a network, thereby restricting access to users with acceptable credentials. Offering a service that incorporates these techniques can enable incorporation of the techniques into an existing system with minimal impact to network configuration.

Abstract: Systems and methods for network assignment based on priority are described in this application. In one aspect, a technique for network assignment based on priority relates to establishing a connection between a client and a virtual local area network (VLAN), based on an explicit or implicit network priority preference of the client. In an embodiment, multiple VLANs can be combined into one network bundle, the network bundle being a unit network for priority specification. In addition, multiple network bundles may be available for network assignment on a particular network controller (e.g., network switch). For example, the preferred network of a client may be comprised of several individual VLANs. Thus, the client can be assigned to any of the constituent VLANs included in the preferred network bundle.

Abstract: In various systems and methods, there can be received a request for a network service. A query for the network service can be formulated based on the request. A remote access device can be instructed to interrogate remote devices coupled to the remote network access device for the network service. Access parameters related to the network service can be received in response to the interrogation. The user device can be configured to access the network service based on the access parameters.

Abstract: Managing access for a client device to services or data provided through a network using a certificate received from a client device that is either an employee owned device or an employer owned device. User information of a user of the client device and device information of the client device is determined from the certificate. Access rights for the client device are determined based on the user information and the device information. Access to services or data provided through a network for the client device are managed using the determined access rights.

Abstract: A multicast frame directed to a plurality of devices coupled to a network can be received, where the plurality of devices comprising at least one intended recipient device and at least one unintended recipient device. A destination unicast address corresponding to an intended recipient device can be identified. The multicast frame can be converted into a unicast frame directed to the intended recipient device, the unicast frame configured with the destination unicast address. The unicast frame can be blocked from accessing the unintended recipient device. The unicast frame can be provided to the intended recipient device.

Abstract: A technique for improved throughput at an access point (AP) involves when frames are received for transmission by the AP, queuing the frames for a particular station. A system constructed according to the technique may include an aggregation and queuing layer. Station queues may be processed by the aggregation and queuing layer before being given to radio hardware for transmission. In an illustrative embodiment, when frames are received by the aggregation and queuing layer, the packet will be assigned a target delivery time (TDT) and an acceptable delivery time (ADT). The TDT is the “ideal” time to transmit a frame, based on its jitter and throughput requirements. Frames are mapped on to a time axis for transmission by TDT. In an illustrative embodiment, each frame is mapped by priority, so that there are separate maps for voice, video, best effort, and background frames. There will be gaps between frames for transmission that can be used for aggregation.

Abstract: A technique for network authentication interoperability involves initiating an authentication procedure on a first network, authenticating on a second network, and allowing access at the first network. The technique can include filtering access to a network, thereby restricting access to users with acceptable credentials. Offering a service that incorporates these techniques can enable incorporation of the techniques into an existing system with minimal impact to network configuration.

Abstract: A technique for controlling the amount of power consumed by access points (APs) of a wireless network involves implementing throttleable APs (TAPs). It would be desirable for the TAPs to be in a relatively low power mode during periods of low activity, and switch to a high power mode in response to increased wireless activity. To that end, a throttling engine can be implemented to throttle TAPs up in power in response to increases in wireless activity, and throttle TAPs down in power in response to decreases in wireless activity.

Abstract: A convergence engine may provide a high level message for a high level engine representative of multiple messages received by a network interface or other physical layer transmission device. The high level engine may access one or more high level messages via functions describing the state of a non-network-portal station.

Abstract: A technique for improving quality of service involves dynamically provisioning quality of service parameters. An example according to this technique is a system including a server and an access point. The server provisions quality of service parameters restricting the station's transmission of data through the access point to one or more access classes of varying priority.

Abstract: A technique for controlling the amount of power consumed by access points (APs) of a wireless network involves implementing throttleable APs (TAPs). It would be desirable for the TAPs to be in a relatively low power mode during periods of low activity, and switch to a high power mode in response to increased wireless activity. To that end, a throttling engine can be implemented to throttle TAPs up in power in response to increases in wireless activity, and throttle TAPs down in power in response to decreases in wireless activity.

Abstract: A technique for locating a device uses connectivity to find a distance between an access point (AP) and a device. The AP transmits a frame to a device and receives an acknowledgement frame from the device. The amount of time for a signal to pass between the AP and the device is estimated and multiplied by the speed of light to find the distance between the AP and the device.

Abstract: A technique for controlling the amount of power consumed by access points (APs) of a wireless network involves implementing throttleable APs (TAPs). It would be desirable for the TAPs to be in a relatively low power mode during periods of low activity, and switch to a high power mode in response to increased wireless activity. To that end, a throttling engine can be implemented to throttle TAPs up in power in response to increases in wireless activity, and throttle TAPs down in power in response to decreases in wireless activity.

Abstract: A technique for locating a device uses connectivity to find a distance between an access point (AP) and a device. The AP transmits a frame to a device and receives an acknowledgement frame from the device. The amount of time for a signal to pass between the AP and the device is estimated and multiplied by the speed of light to find the distance between the AP and the device.

Abstract: A technique for improved throughput at an access point (AP) involves when frames are received for transmission by the AP, queuing the frames for a particular station. A system constructed according to the technique may include an aggregation and queuing layer. Station queues may be processed by the aggregation and queuing layer before being given to radio hardware for transmission. In an illustrative embodiment, when frames are received by the aggregation and queuing layer, the packet will be assigned a target delivery time (TDT) and an acceptable delivery time (ADT). The TDT is the “ideal” time to transmit a frame, based on its jitter and throughput requirements. Frames are mapped on to a time axis for transmission by TDT. In an illustrative embodiment, each frame is mapped by priority, so that there are separate maps for voice, video, best effort, and background frames. There will be gaps between frames for transmission that can be used for aggregation.

Abstract: A technique for improved throughput at an access point (AP) involves when frames are received for transmission by the AP, queuing the frames for a particular station. A system constructed according to the technique may include an aggregation and queuing layer. Station queues may be processed by the aggregation and queuing layer before being given to radio hardware for transmission. In an illustrative embodiment, when frames are received by the aggregation and queuing layer, the packet will be assigned a target delivery time (TDT) and an acceptable delivery time (ADT). The TDT is the “ideal” time to transmit a frame, based on its jitter and throughput requirements. Frames are mapped on to a time axis for transmission by TDT. In an illustrative embodiment, each frame is mapped by priority, so that there are separate maps for voice, video, best effort, and background frames. There will be gaps between frames for transmission that can be used for aggregation.