Virtual Access Points for Multi-Tenant BLE Traffic Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-tenant wireless local area network (WLAN) environments, Bluetooth Low Energy (BLE) devices are currently associated with their deployment location rather than the tenant using them, requiring each tenant to deploy their own devices, leading to inefficiencies and increased costs due to radio frequency interference and the need for multiple access points.
Innovation Solution
A system where multiple Universally Unique Identifiers (UUIDs) are mapped to virtual access points on a single access point, allowing BLE devices to transmit tenant-specific data to the appropriate network controller through secure tunnels, enabling efficient management and separation of networks without the need for multiple physical access points.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple physical access points are deployed to serve multiple tenants, then network security and tenant isolation are improved, but device complexity and cost increase
Solution Approach 1:
The patent merges multiple virtual access points serving different tenants into a single physical access point. The system creates virtual interfaces (vAPs) that logically separate tenant traffic while sharing the same physical hardware, thereby maintaining security isolation without requiring multiple physical devices.
Solution Approach 2:
The single physical access point is designed to perform multiple functions by simultaneously serving multiple tenants through different virtual access points. Each vAP handles traffic for a specific tenant, allowing one device to replace what would traditionally require multiple specialized devices.
2Adaptability or versatility
If each tenant deploys their own BLE devices, then tenant-specific network management is improved, but loss of substance and cost increase
Solution Approach 1:
BLE devices are configured with multiple UUIDs that correspond to different tenants, enabling a single BLE device to serve multiple tenants. The access point identifies which tenant the BLE device should serve by matching the UUID in beacon messages with configured tenant identifiers, eliminating the need for separate BLE devices per tenant.
Solution Approach 2:
The access point acts as an intermediary that receives beacon messages from BLE devices, extracts UUID information, and routes traffic to the appropriate tenant's network controller. This mediation allows shared BLE devices to be properly associated with multiple tenants without requiring dedicated devices for each tenant.
3Productivity
If multiple access points are used to avoid radio frequency interference, then network performance is improved, but device complexity and cost increase
Solution Approach 1:
The patent combines multiple access point functions into a single device by implementing virtual access points that handle different tenant traffic streams separately. This virtualization allows the single physical access point to manage multiple tenants without RF interference, maintaining network performance without requiring multiple physical devices.
Data Source
AI summary
Example method includes: reporting, by a network device, a detection of a Bluetooth Low Energy (BLE) beacon message from a first BLE device deployed in a wireless local area network (WLAN) serving a plurality of tenants; receiving, by the network device, information about a first tenant assigned to the first BLE device from a server; determining, by the network device, a first universally unique identifier (UUID) uniquely corresponding to the first tenant; and configuring, by the network device, the first BLE device to broadcast a first plurality of BLE beacon messages using the first UUID, wherein a second and different BLE device deployed in the WLAN is configured to broadcast a second plurality of BLE beacon messages using a second UUID that is different from the first UUID, the second UUID uniquely corresponding to a second tenant different from the first tenant in the plurality of tenants.