Aerohive Networks, Inc.

Trapeze Networks, Inc.

Extreme Networks, Inc.

Matthew Stuart Gast

Liang Wang

Long Fu

Kenshin Sakura

Changming Liu

Chris Scheers

Jingsong Fu

Haofeng Kou

Arun K Goel

Yong Kang

David Bradburn Aragon

Adam Michael Conway

Richard Thomas Bennett

Joseph Fraher

Gary Eugene Morain

Stan Chesnutt

Jamsheed Bugwadia

Dan Simone

Yun Freund

Shiwei Zhao

Roy Gignac

Michael Paul Sale

A multicast frame directed to a plurality of devices coupled to a network can be received, where the plurality of devices comprising at least one intended recipient device and at least one unintended recipient device. A destination unicast address corresponding to an intended recipient device can be identified. The multicast frame can be converted into a unicast frame directed to the intended recipient device, the unicast frame configured with the destination unicast address. The unicast frame can be blocked from accessing the unintended recipient device. The unicast frame can be provided to the intended recipient device.

Gateway using multicast to unicast conversion

A hybrid low power network device comprising: a wave 1 radio configured to provide client devices wireless access to a network using SU-MIMO, a wave 2 radio configured to provide the client devices wireless access to the network using MU-MIMO, a radio management system configured to assign client devices to either the wave 1 radio or the wave 2 radio for communicating over wireless communication channels in accessing the network, first and second Ethernet ports, wherein at least one of the first and second Ethernet ports are configured to provide power to the hybrid low power network device and allow at least one of the wave 1 radio and the wave 2 radio to communicate with the network, in operation the hybrid low power network device is configured to operate at a power consumption level between 15 and 17 W in providing the client devices wireless access to the network.

Hybrid low power network device

A technique for deploying proximity beacons involves coupling proximity beacon transmitters and/or hubs to an enterprise network device. The coupling can be by way of physically connecting communication interfaces of the network device and the proximity beacon transmitter or hub. In some implementations, the communication interface can be implemented as a USB interface. In some implementations, the communication interface can be embedded within the network device, such that the communication interface can provide the physical connection in the form of an embedded or internal connection.

Deployment of proximity beacon drives

Methods and apparatus are described for implementing service discovery protocols on subnetted zero configuration networks. A process for managing service advertisement across a plurality of subnets may comprise: collecting service advertisements on a local network level by designated network devices; sending listings of services from each of the designated devices to a master network device; sending a table of services for the plurality of subnets from the master device to all of the designated devices on the plurality of subnets; creating by each of the designated network devices for the corresponding subnet a service discovery proxy table listing the service advertisements on the subnets of the plurality of subnets beyond the subnet corresponding to the designated device; and periodically transmitting by each of the designated devices on the corresponding subnets service advertisements for the services of the corresponding service discovery proxy table.

Zero configuration networking on a subnetted network

Systems and methods for performing network-side Simultaneous Authentication of Equals (SAE) to allow an end user device to access a network. A passphrase is assigned to an end user device for use in authenticating the end user device for a network using SAE. An identification of the end user device is determined during an authentication process. The passphrase assigned to the end user device is determined at a network side using the identification of the end user device. A shared secret is generated using the passphrase. Whether the end user device has generated the shared secret is determined by comparing network side and user side confirmation values. The end user device is authenticated for the network, if it is determined that the end user device has generated the shared secret.

Private simultaneous authentication of equals

A technique for network authentication interoperability involves initiating an authentication procedure on a first network, authenticating on a second network, and allowing access at the first network. The technique can include filtering access to a network, thereby restricting access to users with acceptable credentials. Offering a service that incorporates these techniques can enable incorporation of the techniques into an existing system with minimal impact to network configuration.

Internetwork authentication

Management of a proximity beacon transmitter using a network device. Operational characteristics are generated for a proximity beacon transmitter coupled to a network device. The proximity beacon is configured through the network device. It is determined if the proximity beacon transmitter is operating according to the operational characteristics generated for the proximity beacon transmitter. The proximity beacon transmitter is reconfigured to operate according to the operational characteristics if it is determined that the proximity beacon transmitter is operating in nonconformity with the operational characteristics.

Proximity beacon management using a network device

In various systems and methods, there can be received a request for a network service. A query for the network service can be formulated based on the request. A remote access device can be instructed to interrogate remote devices coupled to the remote network access device for the network service. Access parameters related to the network service can be received in response to the interrogation. The user device can be configured to access the network service based on the access parameters.

Providing stateless network services

A passphrase is assigned to an end user device for use in authenticating the end user device for a network using SAE. An identification of the end user device is determined during an authentication process. The passphrase assigned to the end user device is determined at a network side using the identification of the end user device. A shared secret is generated using the passphrase. Whether the end user device has generated the shared secret is determined. The end user device is authenticated for the network, if it is determined that the end user device has generated the shared secret.

Growing community of inventors

San Francisco, CA, United States of America

Matthew Stuart Gast