Abstract: Methods and systems for mitigating the impact of beamforming on the accuracy of Wi-Fi based location tracking of client devices. An embodiment takes the form of a process that includes (a) obtaining a plurality of received signal strength indicator (RSSI) values respectively associated with frames in a plurality of frames that were (i) received by various access points in a plurality of access points and (ii) transmitted by a client device that is connected to a first access point in the plurality of access points; (b) segmenting the access points in the plurality of access points into (i) a beamforming-path set of one or more access points and (ii) a non-beamforming-path set of one or more access points; (c) identifying a location-determination subset of the obtained RSSI values; and (d) determining a location of the client device using the identified location-determination subset of the obtained RSSI values.

Abstract: Implementations generally relate methods, systems, and computer readable media for providing threat index based wireless local area networks (WLAN) security and quality of service. In one implementation, a method includes receiving a request from a client device connected to a network via a network link. The method further includes determining a threat index value for the client device. The method further includes determining one or more security policies associated with one or more respective network resources, where each security policy applies one or more rules for allocating one of the network resources. The method further includes determining allocation of one or more of the network resources to the client device based on the one or more security policies and the threat index value.

Abstract: Implementations generally relate methods, systems, and computer readable media for providing threat index based wireless local area networks (WLAN) security and quality of service. In one implementation, a method includes receiving a request from a client device connected to a network via a network link. The method further includes determining a threat index value for the client device. The method further includes determining one or more security policies associated with one or more respective network resources, where each security policy applies one or more rules for allocating one of the network resources. The method further includes determining allocation of one or more of the network resources to the client device based on the one or more security policies and the threat index value.

Abstract: Implementations generally relate methods, systems, and computer readable media for providing threat index based wireless local area networks (WLAN) security and quality of service. In one implementation, a method includes receiving a request from a client device connected to a network via a network link. The method further includes determining a threat index value for the client device. The method further includes determining one or more security policies associated with one or more respective network resources, where each security policy applies one or more rules for allocating one of the network resources. The method further includes determining allocation of one or more of the network resources to the client device based on the one or more security policies and the threat index value.

Abstract: Methods and systems for mitigating the impact of beamforming on the accuracy of Wi-Fi based location tracking of client devices. An embodiment takes the form of a process that includes (a) obtaining a plurality of received signal strength indicator (RSSI) values respectively associated with frames in a plurality of frames that were (i) received by various access points in a plurality of access points and (ii) transmitted by a client device that is connected to a first access point in the plurality of access points; (b) segmenting the access points in the plurality of access points into (i) a beamforming-path set of one or more access points and (ii) a non-beamforming-path set of one or more access points; (c) identifying a location-determination subset of the obtained RSSI values; and (d) determining a location of the client device using the identified location-determination subset of the obtained RSSI values.

Abstract: Methods and systems for mitigating the impact of beamforming on the accuracy of Wi-Fi based location tracking of client devices. An embodiment takes the form of a process that includes (a) obtaining a plurality of received signal strength indicator (RSSI) values respectively associated with frames in a plurality of frames that were (i) received by various access points in a plurality of access points and (ii) transmitted by a client device that is connected to a first access point in the plurality of access points; (b) segmenting the access points in the plurality of access points into (i) a beamforming-path set of one or more access points and (ii) a non-beamforming-path set of one or more access points; (c) identifying a location-determination subset of the obtained RSSI values; and (d) determining a location of the client device using the identified location-determination subset of the obtained RSSI values.

Abstract: Access point cloud controller auto-discovery is provided. An access point, in communication with other access points, receives data indicative of whether each of other access points are managed using a cloud controller or a local controller. When the data is indicative that at least one of the other access points is managed using the cloud controller, the access point is configured to be cloud-controller-managed. When the data is indicative that none of the other access points is managed using the cloud controller, and when the data is further indicative that at least one of the other access points is managed using the local controller, the access point is configured to be local-controller-managed.

Abstract: Systems, devices and methods for providing communications between a beamforming access point and a non-beamforming device are provided. The access point determines a beamforming steering matrix from a feedback matrix received from a beamforming device located at a given position, and controls the communication interface to beam form using the beamforming steering matrix to communicate with a non-beamforming device located at the given position. A beamforming device may receive an identifier and characteristics of a non-beamforming device in wireless communication therewith, determine, from the characteristics, a feedback matrix of the non-beamforming device, and transmit the feedback matrix to an access point.

Abstract: Implementations generally relate methods, systems, and computer readable media for providing threat index based wireless local area networks (WLAN) security and quality of service. In one implementation, a method includes receiving a request from a client device connected to a network via a network link. The method further includes determining a threat index value for the client device. The method further includes determining one or more security policies associated with one or more respective network resources, where each security policy applies one or more rules for allocating one of the network resources. The method further includes determining allocation of one or more of the network resources to the client device based on the one or more security policies and the threat index value.

Abstract: A technique for self-testing of services in an access point of a communication network includes providing a table that has a mapping between a service test, packets to be sent for testing, and packets that should be received in response to the testing, emulating and marking the test packets to be sent, placing the marked test packets in an Rx queue, processing the test packets normally by the access point to provide response packets and marking these response packets, delivering the marked response packets to a Rx queue, retrieving the marked response packets from the Rx queue, and comparing the service test response packets to the list of packets that should have been received in the response to the testing in order to validate that service on the access point.

Abstract: Access point cloud controller auto-discovery is provided. An access point, in communication with other access points, receives data indicative of whether each of other access points are managed using a cloud controller or a local controller. When the data is indicative that at least one of the other access points is managed using the cloud controller, the access point is configured to be cloud-controller-managed. When the data is indicative that none of the other access points is managed using the cloud controller, and when the data is further indicative that at least one of the other access points is managed using the local controller, the access point is configured to be local-controller-managed.

Abstract: Systems, devices and methods for providing communications between a beamforming access point and a non-beamforming device are provided. The access point determines a beamforming steering matrix from a feedback matrix received from a beamforming device located at a given position, and controls the communication interface to beam form using the beamforming steering matrix to communicate with a non-beamforming device located at the given position. A beamforming device may receive an identifier and characteristics of a non-beamforming device in wireless communication therewith, determine, from the characteristics, a feedback matrix of the non-beamforming device, and transmit the feedback matrix to an access point.

Abstract: Methods and systems for mitigating the impact of beamforming on the accuracy of Wi-Fi based location tracking of client devices. An embodiment takes the form of a process that includes (a) obtaining a plurality of received signal strength indicator (RSSI) values respectively associated with frames in a plurality of frames that were (i) received by various access points in a plurality of access points and (ii) transmitted by a client device that is connected to a first access point in the plurality of access points; (b) segmenting the access points in the plurality of access points into (i) a beamforming-path set of one or more access points and (ii) a non-beamforming-path set of one or more access points; (c) identifying a location-determination subset of the obtained RSSI values; and (d) determining a location of the client device using the identified location-determination subset of the obtained RSSI values.

Abstract: The present invention provides IEEE 802.11u failover for a mesh network that contains a root node coupled to a network operations center through a backhaul connection and coupled to a plurality of non-root nodes at least one non-root node of which being capable of IEEE 802.11u communication with an infrastructure device of an external network. A first step includes determining that a first connection to the root-node in the mesh network has been disrupted, disrupting communications on the backhaul connection. A next step includes configuring the one non-root node to act as a root node and configuring a radio of the one non-root node to act as an IEEE 802.11u client. A next step includes associating the radio to the infrastructure device of the external network using an IEEE 802.11u protocol. A next step includes establishing a secure tunnel second connection from the one non-root node to the network operations center through the infrastructure device of the external network using the IEEE 802.11u protocol.

Abstract: The present invention provides IEEE 802.11u failover for a mesh network that contains a root node coupled to a network operations center through a backhaul connection and coupled to a plurality of non-root nodes at least one non-root node of which being capable of IEEE 802.11u communication with an infrastructure device of an external network. A first step includes determining that a first connection to the root-node in the mesh network has been disrupted, disrupting communications on the backhaul connection. A next step includes configuring the one non-root node to act as a root node and configuring a radio of the one non-root node to act as an IEEE 802.11u client. A next step includes associating the radio to the infrastructure device of the external network using an IEEE 802.11u protocol. A next step includes establishing a secure tunnel second connection from the one non-root node to the network operations center through the infrastructure device of the external network using the IEEE 802.11u protocol.

Abstract: An on-demand access tunnel to a service provider is provided for a mobile device that first receives information about supported service providers from a wireless communication network entity. The mobile device can select a supported service provider and start an association process to communicate with the selected service provider. The network entity determines the selected service provider and sets up a tunnel connection from an access point of the wireless communication network to the selected service provider. The tunnel connection is torn down when the mobile device dissociates from the access point and no other device is connected to the service provider network using the tunnel connection.

Abstract: An adaptive standby access point in a local area communication network includes an interface operable to communicate with other access points, at least one radio operable to communicate with user devices utilizing at least one antenna, and a processor operable to receive a message over the interface from one of the other access points that is experiencing traffic overload. The message indicating to the standby access point that the one other access point requires traffic demand assistance, whereupon the processor will activate and direct the radio to send out beacons to solicit user devices within the coverage area of the overloaded access point to instead association with the standby access point.

Abstract: An apparatus and method for access point groupings bridging tunneled traffic for a communication network, includes a first step of associating each access point with a location parameter. A next step includes grouping access points in accordance with the location parameter. A next step includes receiving a packet. A next step includes bridging the packet between Layer-2 tunnels of all access points that are part of a grouping.

Abstract: An apparatus and method for access point groupings bridging tunneled traffic for a communication network, includes a first step of associating each access point with a location parameter. A next step includes grouping access points in accordance with the location parameter. A next step includes receiving a packet. A next step includes bridging the packet between Layer-2 tunnels of all access points that are part of a grouping.

Abstract: An on-demand access tunnel to a service provider is provided for a mobile device that first receives information about supported service providers from a wireless communication network entity. The mobile device can select a supported service provider and start an association process to communicate with the selected service provider. The network entity determines the selected service provider and sets up a tunnel connection from an access point of the wireless communication network to the selected service provider. The tunnel connection is torn down when the mobile device dissociates from the access point and no other device is connected to the service provider network using the tunnel connection.