Network device with credential-related message content selection features

Abstract

A method includes receiving, by a first device included in a first network and a second network, a request from a second device to join the first network. The method also includes making, by the first device, a determination of whether to send a first credential corresponding to the first network to the second device, and whether to send a second credential corresponding to the second network to the second device. The method also includes selecting, as content of the message, the first credential, the second credential, or an indication that the second device is not allowed on the first network and not allowed on the second network, based on these determinations. The method also includes sending a message including the content to a second device.

Description

[0001] Usage and terminology

[0002] In the present disclosure, unless specified otherwise and / or unless the specific context clearly dictates otherwise, an element having an undefined number means that there is at least one of the element. Technical Field

[0003] The present disclosure generally relates to network devices having credential-related message content selection features. Background Art

[0004] Adding smart devices (e.g., Wi-Fi-enabled light bulbs or Wi-Fi-enabled power outlets) to a wireless network can be cumbersome. For example, a user may have to establish a connection between the user's smartphone and the smart device. The user may then be asked to provide the password for the wireless network using the touch screen keyboard, allowing the smartphone to Connecting provides a password to the smart device. This requires the user to have access to the smartphone and requires the user to know or have access to the password for the wireless network. If the password is complex, it may take the user multiple attempts to enter the password correctly, even if the user has access to the password. Less cumbersome methods of adding smart devices may leave the network vulnerable to attacks by unauthorized users. Therefore, a convenient and secure method for adding smart devices to a wireless network is needed. Summary of the invention

[0005] A first example of the present disclosure is a method, the method comprising: receiving, by a first device included in a first network and a second network, a request to join the first network from a second device; determining, by the first device, whether to send a first credential corresponding to the first network to the second device, and whether to send a second credential corresponding to the second network to the second device; using these determinations as a basis to select, as content of a message, an indication that the first credential, the second credential, or the second device is not allowed on the first network and is not allowed on the second network; and sending the message including the content to the second device.

[0006] A second example of the present disclosure is a non-transitory computer-readable medium storing instructions, which, when executed by one or more processors of a first device, cause the first device to perform the method described in the first example.

[0007] A third example of the present disclosure is a device including: one or more processors; and a computer-readable medium storing instructions, which, when executed by the one or more processors, cause devices included in a first network and a second network to perform the method described in the first example.

[0008] A fourth example of the present disclosure is a method, comprising: receiving, by a server, a request from a first device for a second device to join a first network, wherein the first device is included in the first network and the second network; determining, by the server, whether to send a first credential corresponding to the first network to the second device, and whether to send a second credential corresponding to the second network to the second device; using these determinations as a basis for selecting, as content of a message, an indication that the first credential, the second credential, or the second device is not allowed on the first network and is not allowed on the second network; and sending an instruction to the first device to send a message including the content.

[0009] A fifth example of the present disclosure is a non-transitory computer-readable medium storing instructions, which, when executed by one or more processors of a server, cause the server to execute the method described in the fourth example.

[0010] A sixth example of the present disclosure is a server, comprising: one or more processors; and a computer-readable medium storing instructions, which, when executed by the one or more processors, causes the server to execute the method described in the fourth example.

[0011] The features, functions, and advantages that have been discussed can be achieved independently in various examples or may be combined in yet other examples, further details of which can be seen with reference to the following description and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 is a block diagram of a server and devices according to an example.

[0013] Figure 2 is a block diagram of a system including a server and several devices according to an example.

[0014] Figure 3A is a schematic diagram of a network of devices according to an example.

[0015] Figure 3B is a schematic diagram of a network of devices according to an example.

[0016] Figure 3C is a schematic diagram of a network of devices according to an example.

[0017] Figure 4 is a flow chart of a method performed by a device according to an example.

[0018] Figure 5 is a flow chart of a method performed by a server according to an example.

[0019] Figure 6 is a block diagram of a method according to an example.

[0020] Figure 7is a block diagram of a method according to an example. DETAILED DESCRIPTION

[0021] The present disclosure includes methods and systems that facilitate adding smart devices to one or more wireless networks. Compared to traditional methods and systems, the methods and systems of the present disclosure can be less cumbersome and less vulnerable to attacks by unauthorized users.

[0022] For example, a first device is included in a first network and a second network. The first device can be a smart light bulb, the first network can be a Wi-Fi network, and the second network can be a proprietary mesh network established by the manufacturer of the first device. Therefore, the second network can include multiple devices produced by the same manufacturer. The devices of the second network can communicate directly with each other via the second network without a gateway. The first network typically includes all the devices of the second network and some additional devices that are not produced by the manufacturer associated with the second network, such as printers, computers, etc. The two networks typically communicate with the Internet using a gateway such as a router.

[0023] In operation, a first device receives a request from a second device (e.g., an unknown device) to join a first network. Typically, the request will include a unique identifier of the second device, such as a media access control (MAC) address. The first device determines whether to send a first credential corresponding to the first network and / or a second credential corresponding to the second network to the second device. For example, the first device sends an identifier of the second device to a server via the Internet, and receives instructions from the server about which credentials (if any) to provide to the second device. In other examples, the first device determines which credentials to send to the second device based on the strength of the request signal detected by the first device or based on whether the user input received by the first device verifies the proof of possession of the first device. The first device then selects the content of the message based on the results of the above determination and sends the message to the second device. In various examples, the message includes one or both of the first credential or the second credential, or indicates that the second device is not allowed on the first network and is not allowed on the second network.

[0024] In some examples, a server receives a request from a first device for a second device to join a first network. Typically, the request includes an identifier of the second device. The server can determine in a variety of ways whether the second device should receive one, both, or neither of the first credential or the second credential. For example, the server can determine that the second device was purchased using an account associated with the first device, the first network, and / or the second network, and responsively instruct the first device to provide the first credential and / or the first credential. In contrast, if the server determines that the second device is a cloned device, or the number of requests sent by the second device to join different networks exceeds a threshold number, the server can specify that the first device send an indication that the second device is not allowed on the first network and is not allowed on the second network.

[0025] The disclosed examples will now be described more fully below with reference to the accompanying drawings, in which some, but not all, examples of the disclosure are shown. In fact, several different examples may be described, and should not be construed as limited to the examples described herein. Instead, these examples are described to make the disclosure thorough and complete and to fully convey the scope of the disclosure to those skilled in the art.

[0026] Figure 1 is a block diagram of a server 102 and a device 104 capable of implementing various aspects of the present invention.

[0027] The server 102 is configured to perform various functions such as described in this disclosure (including the drawings). For example, the server 102 is configured to communicate with the device 104 via the communication network 106.

[0028] The server 102 may take various forms and may include various components including, for example, a communication interface 108 , a processor 110 , and data storage 112 , all of which may be communicatively linked to one another via a system bus, network, or other connection mechanism 114 .

[0029] The communication interface 108 may take a variety of forms and be configured to allow the server 102 to communicate with one or more devices according to any number of protocols. For example, the communication interface 108 is configured to allow the server 102 to communicate with the device 104 via the communication network 106. In one example, the communication interface 108 may take the form of a wired interface such as an Ethernet interface. As another example, the communication interface 108 may take the form of a wireless interface such as a cellular or Wi-Fi interface.

[0030] Processor 110 may include a general-purpose processor (eg, a microprocessor) and / or a special-purpose processor (eg, a digital signal processor (DSP)).

[0031] The data storage 112 may include one or more volatile, non-volatile, removable and / or non-removable storage components (e.g., magnetic storage, optical storage, or flash memory), and may be fully or partially integrated with the processor 110. In addition, the data storage 112 may take the form of a non-transitory computer-readable storage medium having stored thereon program instructions (e.g., compiled or uncompiled program logic code and / or machine code) that, when executed by the processor 110, cause the server 102 to perform one or more functions, such as those described in the present disclosure.

[0032] As such, device 104 is configured to perform various functions, such as those described in this disclosure.

[0033] The device 104 may take a variety of forms, including, for example, a smart light bulb, a smart power socket, an Internet-enabled camera, an Internet-enabled doorbell, etc. The device 104 may include various components, including, for example, a user interface 116, a communication interface 108, a processor 110, and a data storage 112, all of which may be communicatively linked to each other via a system bus, network, or other connection mechanism 114.

[0034] The user interface 116 is configured to facilitate interaction between the device 104 and the user of the device 104, for example, by receiving input from the user and providing output to the user. Therefore, the user interface 116 may include input components such as a keyboard or buttons. In addition, the user interface 116 may include output components such as a sound speaker or other audio output mechanism.

[0035] The data storage 112 may include one or more volatile, non-volatile, removable and / or non-removable storage components (e.g., magnetic storage, optical storage, or flash memory), and may be fully or partially integrated with the processor 110. In addition, the data storage 112 may take the form of a non-transitory computer-readable storage medium having program instructions stored thereon that, when executed by the processor 110, cause the device 104 to perform one or more functions, such as those described in the present disclosure.

[0036] Typically, the communication network 106 is configured to allow the server 102 and the device 104 to communicate with each other using any number of protocols. Furthermore, the communication network 106 can take a variety of forms including, for example, a packet-switched network (eg, the Internet).

[0037] Figure 2 is a block diagram of system 100, which includes server 102, number of devices 104, gateway 105, communication network 106, network 103A, and network 103B.

[0038] Server 102 communicates with network 103A and network 103B via communication network 106 and gateway 105. Gateway 105 can include, for example, a modem and / or a router.

[0039] Network 103B is a proprietary mesh network established by the manufacturer of devices 104A to 104N. Network 103B includes gateway 105 and devices 104A to 104N. In addition to gateway 105 and devices 104A to 104N (e.g., devices of network 103B), network 103A also includes devices 104X to 104M. Network 103A is a Wi-Fi network.

[0040] Device 104U is an unknown device similar to devices 104A to 104N, but it is not included in network 103A or network 103B. Devices 104A to 104N are typically smart devices (e.g., Internet-enabled light bulbs or speakers produced by the same manufacturer) and communicate with each other via network 103B. Devices 104X to 104M are typically not manufactured by the manufacturer and can include printers, computers, smart phones, etc.

[0041] In operation, device 104A receives a request 202 from device 104U for device 104U to join network 103A and / or network 103B. Typically, request 202 includes a unique identifier of device 104U, such as a media access control (MAC) address or a private key.

[0042] Next, device 104A determines whether to send credentials corresponding to network 103A and / or credentials corresponding to network 103B to device 104U. In some examples, device 104A determines which credentials, if any, to send to device 104U by communicating with server 102.

[0043] For example, device 104A sends an identifier of device 104U as part of request 206 to server 102 via gateway 105 and communications network 106. Next, device 104A receives instructions 208 from server 102 via gateway 105 and communications network 106 regarding which credentials, if any, to send to device 104U.

[0044] In some examples, device 104A receives instructions 208 from server 102 to send credentials corresponding to network 103A and credentials corresponding to network 103B. As such, device 104A uses instructions 208 to determine to send credentials corresponding to network 103A and credentials corresponding to network 103B to device 104U. Therefore, device 104A will select credentials corresponding to network 103A and credentials corresponding to network 103B to include in message 204. Device 104A then sends a message to device 104U that includes credentials corresponding to network 103A and credentials corresponding to network 103B. As a result, device 104U is able to access network 103A and network 103B.

[0045] In some examples, device 104A receives instructions 208 from server 102 to send credentials corresponding to network 103B but not to send credentials corresponding to network 103A. Thus, device 104A uses instructions 208 to determine to send credentials corresponding to network 103B to device 104U but not to send credentials corresponding to network 103A. Therefore, device 104A will select credentials corresponding to network 103B but not to select credentials corresponding to network 103A to include in message 204. Device 104A then sends a message to device 104U that includes credentials corresponding to network 103B but not credentials corresponding to network 103A. As a result, device 104U is able to access network 103B but not network 103A.

[0046] Device 104A may make an additional determination that a threshold duration (e.g., 1 hour) has passed since sending message 204 without receiving a second instruction 208 from server 102 to send credentials corresponding to network 103A to device 104U. Thus, in response to making the additional determination, device 104A changes the credentials corresponding to network 103B, for example, by instructing gateway 105 and / or devices 104B through 104N to change the credentials corresponding to network 103B. This functionality allows device 104U to temporarily access network 103B while server 102 obtains additional information regarding whether device 104U should also have access to network 103A and / or should continue to have access to network 103B.

[0047] In some examples, device 104A receives instructions 208 from server 102 not to send credentials corresponding to network 103A or 103B. As such, device 104A uses instructions 208 to make a determination to send neither credentials corresponding to network 103A nor credentials corresponding to network 103B to device 104U. As a result, device 104A selects an indication that device 104U is not allowed on network 103A and is not allowed on network 103B to include in message 204. Device 104A sends message 204 in the form of an indication that device 104U is not allowed on network 103A and is not allowed on network 103B. As a result, device 104U continues to be unable to access network 103A or network 103B.

[0048] In other examples, device 104A determines which credentials (if any) to send to device 104U based on the signal strength of request 202 detected by device 104A. For example, if device 104A determines that the signal strength of request 202 detected by device 104A exceeds a threshold signal strength (e.g., -50 dBm), device 104A selects credentials corresponding to network 103A and / or credentials corresponding to network 103B to include in message 204. As a result, device 104A sends message 204 to device 104U including credentials corresponding to network 103A and / or credentials corresponding to network 103B.

[0049] On the other hand, if device 104A determines that the signal strength of request 202 detected by device 104A does not exceed the threshold signal strength, device 104A sends a message 204 to device 104U in the form of an indication that device 104U is not allowed on network 103A and is not allowed on network 103B. In these examples, the strong signal strength (e.g., close to device 104A) acts as a proxy for physical possession of device 104A, which indicates that request 202 is legitimate.

[0050] In other examples, device 104A receives input via user interface 116 of device 104A and, based on the received input, responsively selects credentials corresponding to network 103A and / or credentials corresponding to network 103B to include in message 204. Thus, device 104A sends message 204 including credentials corresponding to network 103A and / or credentials corresponding to network 103B to device 104U. The input received by device 104A acts as a proxy for proof of physical possession of device 104A, which indicates that request 202 is legitimate.

[0051] The server 102 performs functions that supplement the functions of the device 104A described above. In some examples, the server 102 receives a request 206 from the device 104A for the device 104U to join the network 103A and / or the network 103B. The request 206 typically includes an identifier of the device 104U. The server 102 then determines whether the device 104A should send one, both, or neither of the credentials corresponding to the network 103A or the credentials corresponding to the network 103B to the device 104U. The server 102 also uses these determinations as a basis to select the credentials corresponding to the network 103A, the credentials corresponding to the network 103B, or an indication that the device 104U is not allowed on the network 103A and is not allowed on the network 103B as the content of the message 204. Finally, the server 102 sends an instruction 208 to the device 104A to send the message 204 including the selected content.

[0052] For example, server 102 determines that device 104U was purchased using an account associated with server 102, device 104A, network 103A, and / or network 103B. Server 102 can make this determination based on purchase records, identifiers, and messages associated with network 103A and / or network 103B stored by server 102. Based on these determinations, server 102 responsively selects credentials corresponding to network 103A and / or credentials corresponding to network 103B to include in message 204. Finally, server 102 sends instruction 208 to device 104A to send message 204 including credentials corresponding to network 103A and / or credentials corresponding to network 103B.

[0053] In other examples, server 102 determines that device 104U is a cloned device, and server 102 responsively chooses to include in message 204 an indication that device 104U is not allowed on network 103A and is not allowed on network 103B. Accordingly, server 102 then sends instructions 208 to device 104A to send an indication that device 104U is not allowed on network 103A and is not allowed on network 103B. For example, server 102 determines that device 104U is a cloned device based on simultaneously receiving requests to join different or geographically separated networks from devices claiming to be device 104U, or by detecting other network activity indicating that device 104U is a cloned device.

[0054] In other examples, server 102 determines that the number of requests sent by device 104U to join different networks exceeds a threshold number (e.g., 5 requests to join 5 different networks in one day), and server 102 responsively selects an indication that device 104U is not allowed on network 103A and is not allowed on network 103B to include in message 204. Accordingly, server 102 then sends instruction 208 to device 104A to send an indication that device 104U is not allowed on network 103A and is not allowed on network 103B.

[0055] Figure 3A , Figure 3B and Figure 3C 1 is a schematic diagram depicting example locations of devices 104A, 104B, 104C, 104D, 104E, and 104U. In some examples, devices 104 to 104E and 104U are in the same plane, but in other examples, devices 104 to 104E and 104U are not in the same plane. Boundary 502A is a straight line between device 104A and device 104B, boundary 502B is a straight line between device 104B and device 104C, boundary 502C is a straight line between device 104C and device 104D, boundary 502D is a straight line between device 104D and device 104E, and boundary 502E is a straight line between device 104E and device 104A. In various examples, boundary 502A, boundary 502B, boundary 502C, boundary 502D, and boundary 502E define a polyhedron or polygon. As described below, device 104A can use channel state information (CSI) collected by devices 104A through 104E regarding device 104U to determine whether device 104U should be provided with credentials for network 103A and / or credentials for network 103B.

[0056] exist Figure 3A In FIG, device 104U is surrounded by devices 104A through 104E. That is, device 104U is within the polygon or polyhedron defined by boundaries 502A through 502E. Figure 3B In FIG, device 104U is not surrounded by devices 104A to 104E. That is, device 104U is outside the polygon or polyhedron defined by boundary 502A to boundary 502E by a distance d1. Figure 3C In the embodiment, device 104U is not surrounded by devices 104A to 104E. That is, device 104U is outside the polygon or polyhedron defined by boundaries 502A to 502E, and distance d2 is greater than d1.

[0057] In some examples, one or more of devices 104A-104E receive a request 202 from device 104U requesting device 104U to join network 103A and / or network 103B. In many cases, some of devices 104A-104E receive the same request 202 multiple times. That is, request 202 is reflected from or sent through objects such as furniture, interior walls, exterior walls, people, appliances, ground, floors, etc. This may cause request 202 to arrive at the same device (e.g., the same antenna) via multiple paths, which typically causes request 202 to arrive at the device multiple times non-simultaneously. This is one aspect of the multipath phenomenon.

[0058] Thus, devices 104A-104E detect multiple instances of request 202 at multiple different times. Devices 104B-104E each send a timestamp corresponding to each instance of that particular device receiving request 202. Device 104A uses the known locations of devices 104A-104E, the timestamp corresponding to each instance of that device 104A-104E receiving request 202, and the CSI algorithm to determine the location of device 104U. Device 104A then selects which credentials, if any, to send to device 104U based on the location of device 104U determined via the CSI algorithm.

[0059] exist Figure 3A , device 104A determines that device 104U is surrounded by devices 104A-104E and / or within a polygon or polyhedron defined by boundaries 502A-502E. As a result, device 104A selects both the credentials corresponding to network 103A and the credentials corresponding to network 103B to include in message 204, and accordingly sends message 204 to device 104U.

[0060] exist Figure 3B , device 104A determines that device 104U is not surrounded by devices 104A through 104E and / or outside the polygon or polyhedron defined by boundary 502A through boundary 502E, by distance d1. Device 104A also determines that distance d1 is less than a threshold distance (e.g., 10 meters). As a result, device 104A selects both the credentials corresponding to network 103A and the credentials corresponding to network 103B to include in message 204, and accordingly sends message 204 to device 104U.

[0061] In by Figure 3B In other examples shown, as a result of determining that distance d1 is less than the threshold distance, device 104A selects credentials corresponding to network 103B rather than credentials corresponding to network 103A to include in message 204 and accordingly sends message 204 to device 104U.

[0062] exist Figure 3C , device 104A determines that device 104U is not surrounded by devices 104A through 104E and / or outside the polygon or polyhedron defined by boundary 502A through boundary 502E by a distance d2. Device 104A also determines that distance d2 is greater than or equal to a threshold distance (e.g., 10 meters). As a result, device 104A selects neither the credentials corresponding to network 103A nor the credentials corresponding to network 103B to include in message 204, and accordingly sends message 204 to device 104U. That is, message 204 includes an indication that device 104U is not allowed on network 103A and is not allowed on network 103B.

[0063] Figure 4 is a flow chart of a method performed by device 104A. In block A, device 104A receives a request 202 from device 104U for device 104U to join network 103A and / or network 103B.

[0064] In block B, device 104A sends a request 206 to server 102 to join device 102U to network 103A and / or network 103B. Request 206 can include an identifier of device 140U.

[0065] In block C, device 104A receives instructions 208 from server 102 to send credentials corresponding to network 103A, credentials corresponding to network 103B, or an indication that device 104U is not allowed on network 103A and is not allowed on network 103B.

[0066] In various examples, block D follows block A or block C. In block D, device 104A makes a determination whether to send credentials corresponding to network 103A to device 104U and whether to send credentials corresponding to network 103B to device 104U. These determinations are performed based on instructions 208, based on the signal strength of request 202, based on a determined location of device 104U relative to devices 104A through 104E, or based on input received via user interface 116.

[0067] When device 104A determines to send both the credentials corresponding to network 103A and the credentials corresponding to network 103B to device 104U, block E follows block D. In block E, device 104A selects both the credentials corresponding to network 103A and the credentials corresponding to network 103B to include in message 204 and sends message 204 to device 104U accordingly.

[0068] When device 104A determines to send credentials corresponding to network 103B rather than credentials corresponding to network 103A to device 104U, block F follows block D. In block F, device 104A selects credentials corresponding to network 103B rather than credentials corresponding to network 103A to include in message 204 and sends message 204 to device 104U accordingly.

[0069] When device 104A determines not to send credentials corresponding to network 103A or credentials corresponding to network 103B to device 104U, block G follows block D. In block G, device 104A selects an indication that device 104U is not allowed on network 103A and is not allowed on network 103B to include in message 204, and accordingly sends message 204 to device 104U.

[0070] Block H follows block F. In block H, device 104A makes an additional determination that a threshold duration has elapsed since sending message 204 without receiving a second instruction from server 102 to send credentials corresponding to network 103A to device 104U.

[0071] Block I follows block H. In block I, device 104A, in response to the additional determination in block H, alters the credentials corresponding to network 103B.

[0072] Figure 5 is a flow diagram of a method performed by server 102. In block A, server 102 receives a request 206 from device 104A for device 104U to join network 103A and / or network 103B. Request 206 can include an identifier of device 104U.

[0073] In block B, server 102 makes a determination whether to send credentials corresponding to network 103A to device 104U and whether to send credentials corresponding to network 103B to device 104U. Server 102 also uses these determinations as a basis to select credentials corresponding to network 103A, credentials corresponding to network 103B, or an indication that device 104U is not allowed on network 103A and is not allowed on network 103B as the content of message 204. Server 102 makes these determinations based on determining whether device 104U was purchased using an account associated with device 104A, network 103A, and / or network 103B, based on determining that device 104U is a cloned device, the determination being based on analyzing network activity, and / or based on determining that device 104U sent a number of requests to join different networks that exceeds a threshold number.

[0074] Block C follows block B when server 102 selects both the credentials corresponding to network 103A and the credentials corresponding to network 103B for inclusion in message 204. In block C, server 102 sends instruction 208 to device 104A to send message 204 including content in the form of both the credentials corresponding to network 103A and the credentials corresponding to network 103B.

[0075] Block D follows block B when server 102 includes in message 204 the selection of credentials corresponding to network 103B rather than credentials corresponding to network 103A. In block D, server 102 sends instruction 208 to device 104A to send message 204 including content in the form of credentials corresponding to network 103B but not credentials corresponding to network 103A.

[0076] Block E follows block B when server 102 selects an indication that device 104U is not allowed on network 103A and is not allowed on network 103B for inclusion in message 204. In block E, server 102 sends instruction 208 to device 104A to send message 204 including content in the form of an indication that device 104U is not allowed on network 103A and is not allowed on network 103B.

[0077] Figure 6 is a block diagram of a method 300 of operating a device 104A, and Figure 7 4 is a block diagram of a method 400 for operating a server 102. Figure 6 and Figure 7 As shown, method 300 and method 400 include one or more operations, functions, or actions such as blocks 302, 304, 306, 308, 402, 404, 406, and 408. Although these blocks are shown in sequence, these blocks may also be performed in parallel and / or in a different order than that described herein. In addition, various blocks may be combined into fewer blocks, divided into additional blocks, and / or removed based on the desired implementation.

[0078] In block 302, the method 300 includes receiving, by the device 104A included in the network 103A and the network 103B, a request 202 from the device 104U to join the network 103A and / or the network 103B. Figure 2 , FIG. 3A to FIG. 3C and Figure 4 Functionality associated with block 302 is discussed.

[0079] At block 304, method 300 includes making a determination by device 104A whether to send credentials corresponding to network 103A to device 104U and whether to send credentials corresponding to network 103B to device 104U. Figure 2, FIG. 3A to FIG. 3C and Figure 4 Functionality associated with block 304 is discussed.

[0080] In block 306, method 300 includes using these determinations as a basis to select, as content of message 204, credentials corresponding to network 103A, credentials corresponding to network 103B, or an indication that device 104U is not allowed on network 103A and is not allowed on network 103B. Figure 2 , FIG. 3A to FIG. 3C and Figure 4 Functionality associated with block 306 is discussed.

[0081] At block 308, the method 300 includes sending the message 204 including the content to the device 104U. Figure 2 , FIG. 3A to FIG. 3C and Figure 4 Functionality associated with block 308 is discussed.

[0082] In block 402, method 400 includes receiving, by server 102, from device 104A, a request 206 for device 104U to join network 103A and / or network 103B. In this context, device 104A is included in network 103A and network 103B. Figure 2 and Figure 5 Functionality associated with block 402 is described.

[0083] In block 404, method 400 includes determining, by server 102, whether to send credentials corresponding to network 103A to device 104U and whether to send credentials corresponding to network 103B to device 104U. Figure 2 and Figure 5 Functionality associated with block 404 is described.

[0084] In block 406, method 400 includes using these determinations as a basis to select, as content of message 204, credentials corresponding to network 103A, credentials corresponding to network 103B, or an indication that device 104U is not allowed on network 103A and is not allowed on network 103B. Figure 2 and Figure 5 Functionality associated with block 406 is described.

[0085] At block 408, the method 400 includes sending instructions 208 to the device 104a to send the message 204 including the content. Figure 2 and Figure 5 Functionality associated with block 408 is described.

[0086] For the purpose of illustration and description, different advantageous arrangements are described, but it is not intended to be exhaustive or limiting examples of the form of the present disclosure. Many modifications and variations will be apparent to those of ordinary skill in the art. In addition, different advantageous examples may describe different advantages compared to other advantageous examples. One or more selected examples are selected and described to explain the principles of the examples, practical applications, and to enable those of ordinary skill in the art to understand various examples of various modifications of the present disclosure to suit the intended specific use.

[0087] Although some actions and / or functions described in the present disclosure have been described as being performed by specific entities, these actions and / or functions can be performed by any entity (such as the entity described in the present disclosure). In addition, although actions and / or functions have been narrated in a specific order, actions and / or functions do not need to be performed in the order of narration. However, in some cases, it may be desirable to perform actions and / or functions in the described order. In addition, each of the actions and / or functions can be performed in response to one or more other actions and / or functions. In addition, not all actions and / or functions need to be performed to realize one or more of the benefits provided by the present disclosure, and therefore not all actions or functions are required.

[0088] Although certain variations have been discussed in connection with one or more examples of the present disclosure, these variations can also be applied to all other examples of the present disclosure.

[0089] Although selected examples of the present disclosure have been described, modifications and permutations of these examples will be apparent to those skilled in the art. Other changes, substitutions and / or modifications are also possible without departing from the broader aspects of the invention as described in the appended claims.

Claims

1. A method comprising: receiving, by a first device included in the first network and the second network, a request to join the first network from a second device; making a determination, by the first device, whether to send first credentials corresponding to the first network to the second device, and whether to send second credentials corresponding to the second network to the second device; using the determination as a basis for selecting, as content of a message, an indication that the first credential, the second credential, or the second device is not allowed on the first network and is not allowed on the second network; as well as A message including the content is sent to the second device.

2. The method according to claim 1, wherein: The second network further includes a gateway configured to communicate with the server, and the first network further includes the gateway and a third device not included in the second network.

3. The method according to claim 1, wherein: Receiving the request includes receiving an identifier of the second device.

4. The method according to claim 3, further comprising: sending an identifier of the second device to a server; as well as receiving an instruction to send the first credential and the second credential from the server, wherein making the determination comprises making the determination based on the instruction, and Wherein, sending the message includes sending the first credential and the second credential.

5. The method according to claim 3, further comprising: sending an identifier of the second device to a server; as well as receiving an instruction from the server to send the second credential but not the first credential, wherein making the determination comprises making the determination based on the instruction, and Wherein, sending the message includes sending the second credential.

6. The method according to claim 5, further comprising: In the absence of receiving a second instruction from the server to send the first credential to the second device, making an additional determination that a threshold duration has elapsed since sending the message; and In response to making the additional determination, the second credential is altered.

7. The method according to claim 3, further comprising: sending an identifier of the second device to a server; as well as receiving an instruction from the server to send neither the first credential nor the second credential, wherein making the determination comprises making the determination based on the instruction, and Wherein, sending the message includes sending an indication that the second device is not allowed on the first network and is not allowed on the second network.

8. The method according to claim 1, in, making the determination includes determining that a signal strength of the request exceeds a threshold signal strength, Wherein sending the message comprises sending the first credential in response to making the determination.

9. The method according to claim 1, in, making the determination includes determining that a signal strength of the request exceeds a threshold signal strength, Wherein sending the message comprises sending the second credential in response to making the determination.

10. The method according to claim 1, in, making the determination includes determining that a signal strength of the request does not exceed a threshold signal strength, Wherein, sending the message includes sending an indication that the second device is not allowed on the first network and is not allowed on the second network.

11. The method according to claim 1, in, making the determination comprises making the determination based on the first device receiving input via a user interface of the first device, Wherein sending the message comprises sending the first credential and the second credential in response to receiving the input.

12. A non-transitory computer-readable medium storing instructions that, when executed by one or more processors of a first device, cause the first device to perform functions, the functions comprising: receiving, by a first device included in the first network and the second network, a request to join the first network from a second device; making a determination, by the first device, whether to send first credentials corresponding to the first network to the second device, and whether to send second credentials corresponding to the second network to the second device; using the determination as a basis for selecting, as content of a message, an indication that the first credential, the second credential, or the second device is not allowed on the first network and is not allowed on the second network; as well as A message including the content is sent to the second device.

13. The non-transitory computer readable medium of claim 12, wherein: Receiving the request includes receiving an identifier of the second device.

14. The non-transitory computer readable medium of claim 13, the functions further comprising: sending an identifier of the second device to a server; as well as receiving an instruction to send the first credential and the second credential from the server, wherein making the determination comprises making the determination based on the instruction, and Wherein, sending the message includes sending the first credential and the second credential.

15. The non-transitory computer readable medium of claim 13, the functions further comprising: sending an identifier of the second device to a server; as well as receiving an instruction from the server to send the second credential but not the first credential, wherein making the determination comprises making the determination based on the instruction, and Wherein, sending the message includes sending the second credential.

16. The non-transitory computer readable medium of claim 15, the functions further comprising: In the absence of receiving a second instruction from the server to send the first credential to the second device, making an additional determination that a threshold duration has elapsed since sending the message; and In response to making the additional determination, the second credential is altered.

17. The non-transitory computer readable medium of claim 13, the functions further comprising: sending an identifier of the second device to a server; as well as receiving an instruction from the server to send neither the first credential nor the second credential, wherein making the determination comprises making the determination based on the instruction, and Wherein, sending the message includes sending an indication that the second device is not allowed on the first network and is not allowed on the second network.

18. The non-transitory computer readable medium of claim 12, in, making the determination includes determining that a signal strength of the request exceeds a threshold signal strength, Wherein sending the message comprises sending the first credential or the second credential in response to making the determination.

19. The non-transitory computer readable medium of claim 12, in, making the determination includes determining that a signal strength of the request does not exceed a threshold signal strength, Wherein, sending the message includes sending an indication that the second device is not allowed on the first network and is not allowed on the second network.

20. An apparatus comprising: one or more processors; as well as A computer-readable medium storing instructions, which, when executed by the one or more processors, cause a device included in the first network and the second network to perform functions, the functions comprising: receiving a request from a second device to join the first network; making a determination whether to send first credentials corresponding to the first network to the second device and whether to send second credentials corresponding to the second network to the second device; using the determination as a basis for selecting, as content of a message, an indication that the first credential, the second credential, or the second device is not allowed on the first network and is not allowed on the second network; and A message including the content is sent to the second device.

Images