Ruckus Wireless, Inc.

Palo Alto Research Center Inc.

Accton Technology Corporation

Arris Enterprises LLC

Ted Tsei Kuo

Tyan-Shu Jou

Tian-Yuan Lin

Bo-chieh Yang

Ming-Jye Sheu

Ming Sheu

Jeffrey Abramowitz

Li-Jen Wang

Andrea Peiro

Diana Kathryn Smetters

Simon E M Barber

Bo-Chieh Yang

Initiating a virtual presence at a physical access point in response to a request for a service from a wireless access device is provided. A particular wireless service may be provided to a subscriber on an on-demand basis according to location and/or type of service requested. The service may be terminated when demand for the service comes to an end whereby a common wireless service infrastructure may be shared amongst service providers thus eliminating the need for radio channel coordination and otherwise enhancing service quality for those service providers.

On-demand services by wireless base station virtualization

Systems and methods for authentication using paired dynamic secrets in secured wireless networks are provided. Each authenticated user is assigned a random secret generated so as to be unique to the user. The secret is associated with a wireless interface belonging to the user, so that no other wireless interface may use the same secret to access the network. The secret may be updated either periodically or at the request of a network administrator, and reauthentication of the wireless network may be required.

Dynamic authentication in secured wireless networks

Systems and methods for provisioned configuration of wireless devices to allow access to restricted wireless networks are provided. Using an open wireless or wired network, a user of a wireless device may be authenticated. A configuration application, which includes the parameters and policies of the provisioned configuration, is generated, transferred to, and executed on the wireless device. Following configuration by the application, the wireless device is allowed to access the restricted wireless network within the parameters and policies of the provisioned configuration.

Provisioned configuration for automatic wireless connection

Apparatus and methods are provided for protecting network resources, particularly in association with automatic provisioning of new client devices. A global PKI (Public Key Infrastructure) scheme is rooted at a globally available server. Roots of PKIs for individual organizations also reside at this server or another globally available resource. To enable access to an organization's network, one or more authenticators are deployed, which may be co-located with access points or other network components. After a client device enabler (CDE) and an authenticator perform mutual authentication with certificates issued within the global PKI, the CDE is used to provision a new client device for the organization. After the client is provisioned, it and an authenticator use certificates issued within the per-organization PKI to allow the client access to the network.

Apparatus and methods for protecting network resources

Apparatus and methods are provided for managing network resources. A central unified services and device management framework is operated to simultaneously manage various types of resources on behalf of multiple organizations. Within the framework, a common management layer provides services (e.g., account management, event logging) common to multiple different services and devices. Within a specific management layer, separate subsystems are implemented for different devices or types of devices. The device-specific subsystems invoke device-independent functional modules through primitives exposed by the common management layer. A given organization may establish tiered logical constructs to group resources deployed at different physical locations (e.g., cities, offices) or within different subdivisions of the organizations (e.g., subsidiaries, departments).

Apparatus and methods for managing network resources

The routing method for wireless transport service comprises a step of receiving a unicast frame from an associated client; determining whether a destination of the unicast frame is locally associated. A wireless node delivers the unicast frame to a final destination if positive, otherwise, determining whether an associated transport device of a destination can be determined. The WITnet header is added and the associated transport device of the destination is put in an auxiliary address field if positive, otherwise, the next step is performed to add the WITnet header and put an address of a default edge device in the auxiliary address field. The next step is setting a tunnel frame flag, and then delivering the unicast frame to a next-hop toward the auxiliary address.

Forwarding and routing method for wireless transport service

The present invention discloses a wireless communication network comprising: at least one edge device coupled to a wired network; one or more wireless transport device coupled to the edge device via a wireless network; and at least one mobile device coupled to the wireless transport device via the wireless network. Wherein the wireless transport device carries an identify information of a neighboring device in a broadcast frames; and the identify information allowing the wireless transport device to determine to receive a broadcast frames from the neighboring device. The wireless transport device maintains and calculates a table that contains a list of couples of frame originator and the neighboring device the broadcast should come from. When the table includes the information of the neighboring device, the wireless transport device accepts the broadcast frames from the neighboring device while the table depicts the frame originated by the originator should come from the neighboring device. Otherwise, the wireless transport device drops the broadcast frames from the neighboring device.

Growing community of inventors

Palo Alto, CA, United States of America

Ted Tsei Kuo