Aerohive Networks, Inc.

Extreme Networks, Inc.

Kenshin Sakura

Matthew Stuart Gast

Long Fu

Xu Zou

Mingliang Li

Douglas Robert Case

Disclosed is a system comprising: an authentication datastore; a device presence engine; a traffic monitor engine; an authentication presence monitor engine; an authentication server selection engine; and a traffic routing engine. In operation: the device presence engine is configured to detect presence of a user device on a trusted network; the traffic monitor engine is configured to monitor, in response to the detection, traffic on the trusted network from the device; the authentication presence monitor engine is configured to evaluate onboarding characteristics of the user device in response to the monitoring; the authentication server selection engine is configured to select one of a plurality of authentication servers to authenticate the user device to the trusted network, the selecting based on the onboarding characteristics; and the traffic routing engine is configured to route traffic from the user device to the selected authentication server.

Split authentication network systems and methods

Systems and methods for configuring a device to operate based on a current configuration state of the device in a manner agnostic to an assumed configuration state of a device. Systems can include a local state aware device manager and a state aware device configuration agnostic mediator. Methods can include locally determining an actual current configuration state of a device in operation, generating desired configuration instructions based on the actual current configuration state of the device, and locally configuring the device to operate according to the desired configuration instructions.

Current configuration state specific device configuration

A technique for network authentication interoperability involves initiating an authentication procedure on a first network, authenticating on a second network, and allowing access at the first network. The technique can include filtering access to a network, thereby restricting access to users with acceptable credentials. Offering a service that incorporates these techniques can enable incorporation of the techniques into an existing system with minimal impact to network configuration.

Growing community of inventors

San Francisco, CA, United States of America

Kenshin Sakura