Guest Credential Provisioning for Enterprise Roaming Across Wi‑Fi and Cellular
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing enterprise access technologies, including cable, Wi-Fi, and cellular networks, struggle to manage guest access efficiently due to limited knowledge of enterprise policies and varying access technologies, leading to cumbersome guest access processes and increased computational load.
Innovation Solution
A system that generates and manages enterprise policy-compliant guest credentials, allowing seamless access across different networks by provisioning initial credentials (e.g., Wi-Fi certificates) and additional credentials (e.g., eSIM) based on a unified movement and roaming policy, reducing the need for repetitive guest access processes and optimizing network slicing and segmentation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If existing enterprise access technologies (cable, Wi-Fi, cellular) are used to manage guest access, then access control can be implemented, but the process becomes cumbersome and computational load increases due to limited knowledge of enterprise policies and varying access technologies
Solution Approach 1:
The patent implements a universal credential system where a single credential can provide access to multiple different access technologies (cable, Wi-Fi, cellular networks). The credential includes multiple access identifiers that can be used across different network types, eliminating the need for separate guest access processes for each network and reducing system complexity by unifying access management
Solution Approach 2:
The patent merges multiple access control functions into a single unified credential system. Instead of managing separate access control mechanisms for cable, Wi-Fi, and cellular networks, the system combines them into one credential that can be used across all network types, thereby simplifying the guest access process and reducing computational overhead
2Adaptability or versatility
If cellular technologies enabling easy roaming between administrative domains are deployed, then mobility is improved, but control of roaming capability lies with cellular subscription management systems that have limited knowledge of other access technologies within the enterprise
Solution Approach 1:
The patent introduces an intermediary credential system that bridges the gap between cellular subscription management systems and enterprise access policies. The credential acts as a mediator that contains both cellular roaming information and enterprise-specific access identifiers, allowing the cellular system to understand and enforce enterprise policies without requiring direct integration with complex enterprise networks
Solution Approach 2:
The patent adds a new dimension to the credential structure by incorporating multiple access identifiers and policy information directly into the cellular credential. This dimensional expansion allows the credential to carry both cellular network information and enterprise policy data, enabling roaming control systems to access and process enterprise policy knowledge that was previously unavailable to them
Data Source
AI summary
The method disclosed herein manages and generates enterprise-policy compliant guest credentials for connectivity to one or more enterprise networks. The method may include receiving a request from a guest user device to connect to a first network provided by an enterprise. The method may further comprise determining that the guest user device is authorized to access the first network when the access by the guest user is subject to a movement and roaming policy. A first credential may be provisioned for the guest user to access the first network that is consistent with the movement and roaming policy. Prior to receiving a second request to connect to a second network of the enterprise from the guest user device, provisioning a second credential, consistent with the movement and roaming policy, to the guest user.