# US 10,320,847 B2 · User-based network onboarding > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,320,847 B2 - Document ID: US10320847B2 - Status: Granted - Kind: B2 - Application number: 15/977,310 - Filed: 2018-05-11 - Published: 2018-09-13 - Granted: 2019-06-11 - Earliest claimed: 2013-12-13 - Assignees: Aerohive Networks, Inc. - Applicants: Aerohive Networks, Inc. - Inventors: Mu Lin; Xu Zou; John Hanay - Web page: https://patentgrep.com/patent/US10320847B2 ## CPC - G06F 21/44: Program or device authentication - G06F 21/45: Structures or tools for the administration of authentication - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/102: {Entity profiles} - H04L 63/105: {Multiple levels of security} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 67/125: involving control of end-device applications over a network - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A request related to an access to a network by a first user device may be received. The user device may be included in a plurality of user devices associated with a first first-level security profile assigned to the user. An application extension to an application executing on the first user device may be accessed in response to the request related to the access. A network connectivity file may be provided to the application extension. The network connectivity file may include network configuration information for the first user device. The network configuration information may be associated with a first second-level security profile assigned to the first user device. Instructions to configure the first user device to access the network based at least in part on the network configuration information in the network connectivity file may be provided. ## Claims ### Claim 1 A method comprising: receiving user information of a user requesting access to a network with a first user device of the user; assigning a first-level security profile to the user based on the user information of the user; assigning a second-level security profile including first network configuration information to the first user device of the user; providing a browser extension to the first user device and causing the first user device to install the provided browser extension in a web browser of the first user device; after assigning the second-level security profile to the first user device, providing a network connectivity file containing the first network configuration information to the first user device and causing the first user device to load the network connectivity file into the browser extension installed in the web browser of the first user device; enabling the first user device to access the network through the web browser using the first network configuration information included in the network connectivity file loaded into the browser extension. ### Claim 2 (depends on 1) The method of claim 1, further comprising receiving, from the first user device, a notification that the network connectivity file has been loaded into the browser extension installed in the web browser of the first user device, wherein the first user device is enabled to access the network through the web browser upon receiving the notification. ### Claim 3 (depends on 1) The method of claim 1, wherein the browser extension installed in the web browser of the first user device comprises a dedicated tab of the web browser. ### Claim 4 (depends on 1) The method of claim 1, wherein the first-level security profile includes a list of devices associated with the user and the first user device is included in the list of devices. ### Claim 5 (depends on 1) The method of claim 1, further comprising: causing a web portal to be presented to the web browser of the first user device, the web portal including one or more selectable objects to select an ownership status of the first user device; configuring a degree of network access to the network by the first user device based on the ownership status selected through the web portal. ### Claim 6 (depends on 1) The method of claim 1, further comprising: causing a web portal to be presented to the web browser of the first user device; granting the user access to the network through the first user device if the user agrees to terms and services of accessing the network through the web portal. ### Claim 7 (depends on 1) The method of claim 1, wherein the second-level security profile specifies that the first user device has to be in compliance with a mobile device management policy of the network before the first user device is allowed to access the network. ### Claim 8 (depends on 1) The method of claim 1, further comprising: redirecting the first user device to a web portal before receiving the user information as part of the user requesting access to the network with the first user device; receiving, through the web portal, the user information, at least in part, manually input into the web portal by the user. ### Claim 9 (depends on 1) The method of claim 1, further comprising: determining whether a mobile device management policy of the network has changed to an updated mobile device management policy; if it is determined the mobile device management policy of the network has changed to the updated mobile device management policy: determining whether the first user device is in compliance with the updated mobile device management policy; re-configuring the first user device to access the network through the web browser using the first network configuration information included in the network connectivity file loaded into the browser extension in compliance with the updated mobile device management policy. ### Claim 10 (depends on 1) The method of claim 1, further comprising: requesting a listing of user devices associated with the first-level security profile, the listing including a second user device of the user associated with the first-level security profile assigned to the user as part of user-based device onboarding; causing the listing of the user devices associated with the first-level security profile to be presented to the user; selecting the second user device from the listing of the user devices based on input received from the user in response to presenting the listing of the user devices to the user; assigning a second second-level security profile including second network configuration information to the second user device; enabling the second user device to access the network using the second network configuration information included in the second second-level security profile assigned to the second user device. ### Claim 11 A system comprising: one or more processors; memory storing instructions, when executed by the one or more processors, configured to cause the one or more processors to perform a computer-implemented method, the computer-implemented method comprising: receiving user information of a user requesting access to a network with a first user device of the user; assigning a first-level security profile to the user based on the user information of the user; assigning a second-level security profile including first network configuration information to the first user device of the user; providing a browser extension to the first user device and causing the first user device to install the provided browser extension in a web browser of the first user device; after assigning the second-level security profile to the first user device, providing a network connectivity file containing the first network configuration information to the first user device and causing the first user device to load the network connectivity file into the browser extension installed in the web browser of the first user device; enabling the first user device to access the network through the web browser using the first network configuration information included in the network connectivity file loaded into the browser extension. ### Claim 12 (depends on 11) The system of claim 11, wherein the computer-implemented method further comprises receiving, from the first user device, a notification that the network connectivity file has been loaded into the browser extension installed in the web browser of the first user device, wherein the first user device is enabled to access the network browser upon receiving the notification. ### Claim 13 (depends on 11) The system of claim 11, wherein the browser extension installed in the web browser of the first user device comprises a dedicated tab of the web browser. ### Claim 14 (depends on 11) The system of claim 11, wherein the first-level security profile includes a list of devices associated with the user and the first user device is included in the list of devices. ### Claim 15 (depends on 11) The system of claim 11, wherein the computer-implemented method further comprises: causing a web portal to be presented to the web browser of the first user device, the web portal including one or more selectable objects to select an ownership status of the first user device; configuring a degree of network access to the network by the first user device based on the ownership status selected through the web portal. ### Claim 16 (depends on 11) The system of claim 11, wherein the computer-implemented method further comprises: causing a web portal to be presented to the web browser of the first user device; granting the user access to the network through the first user device if the user agrees to terms and services of accessing the network through the web portal. ### Claim 17 (depends on 11) The system of claim 11, wherein the second-level security profile specifies that the first user device has to be in compliance with a mobile device management policy of the network before the first user device is allowed to access the network. ### Claim 18 (depends on 11) The system of claim 11, wherein the computer-implemented method further comprises: redirecting the first user device to a web portal before receiving the user information as part of the user requesting access to the network with the first user device; receiving, through the web portal, the user information, at least in part, manually input into the web portal by the user. ### Claim 19 (depends on 11) The system of claim 11, wherein the computer-implemented method further comprises: determining whether a mobile device management policy of the network has changed to an updated mobile device management policy; if it is determined the mobile device management policy of the network has changed to the updated mobile device management policy: determining whether the first user device is in compliance with the updated mobile device management policy; re-configuring the first user device to access the network through the web browser using the first network configuration information included in the network connectivity file loaded into the browser extension in compliance with the updated mobile device management policy. ### Claim 20 (depends on 11) The system of claim 11, wherein the computer-implemented method further comprises: requesting a listing of user devices associated with the first-level security profile, the listing including a second user device of the user associated with the first-level security profile assigned to the user as part of user-based device onboarding; causing the listing of the user devices associated with the first-level security profile to be presented to the user; selecting the second user device from the listing of the user devices based on input received from the user in response to presenting the listing of the user devices to the user; assigning a second second-level security profile including second network configuration information to the second user device; enabling the second user device to access the network using the second network configuration information included in the second second-level security profile assigned to the second user device.