# US 10,484,872 B2 · Device quarantine in a wireless network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,872 B2 - Document ID: US10484872B2 - Status: Granted - Kind: B2 - Application number: 15/604,367 - Filed: 2017-05-24 - Published: 2017-09-07 - Granted: 2019-11-19 - Earliest claimed: 2014-06-23 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: Todd Haugen; Amer A. Hassan; Pascal F. Menezes - Web page: https://patentgrep.com/patent/US10484872B2 ## CPC - H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play - H04L 41/0869: Validating the configuration within one network element - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 12/086: using security domains - H04W 12/128: Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware - H04W 48/02: Access restriction performed under specific conditions - H04L 41/0895: Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Techniques for device quarantine in a wireless network are described. According to various implementations, a device (e.g., a mobile client device) that requests a connection to a wireless network is placed in a quarantine state in the wireless network. Attributes of the device are determined and connection parameters are specified based on the attributes. In at least some embodiments, the device can be released from the quarantine state subject to the connection parameters. ## Claims ### Claim 1 A system comprising: at least one processor; and one or more computer-readable storage media including instructions stored thereon that, responsive to execution by the at least one processor, cause the system perform operations including: placing a device in a quarantine state for a wireless network in response to a request from the device to connect to the wireless network; querying the device for an attribute of the device while the device is in the quarantine state; receiving a response from the device identifying the attribute; comparing the attribute of the device to a list of attributes pertaining to uncharacterized attributes for which performance attributes have not been determined; determining that the attribute of the device matches an uncharacterized attribute: applying a policy for uncharacterized attributes to determine a wireless connection parameter based upon the attribute of the device; and releasing the device from the quarantine state subject to the wireless connection parameter. ### Claim 2 (depends on 1) The system described in claim 1, wherein the attribute of the device comprises: a driver type, a driver version, a Quality of Service (QoS) marking capability, a wireless power control capability, a wireless data rate capability, or a wireless technology. ### Claim 3 (depends on 1) The system described in claim 1, wherein the system is implemented by at least one of a network controller for the wireless network or a remote configuration service. ### Claim 4 (depends on 1) The system described in claim 1, wherein said placing the device in the quarantine state further comprises placing the device in the quarantine state in response to determining that the device is not registered with a network domain of the wireless network. ### Claim 5 (depends on 1) The system described in claim 1; wherein the attribute comprises a hardware attribute, a software attribute, a driver attribute, or a configuration setting attribute of the device. ### Claim 6 (depends on 1) The system described in claim 1, wherein the operations further comprise: responsive to determining that the attribute of the device matches the uncharacterized attribute, sending a notification to the device that the attribute is uncharacterized. ### Claim 7 A computer-implemented method, comprising: placing a device in a quarantine state for a wireless network in response to a request from the device to connect to the wireless network; querying the device for an attribute of the device while the device is in the quarantine state; receiving a response from the device identifying the attribute; comparing the attribute of the device to a list of attributes pertaining to uncharacterized attributes for which performance attributes have not been determined: determining that the attribute of the device matches an uncharacterized attribute; applying a policy for uncharacterized attributes to determine a wireless connection parameter based upon the attribute of the device; and releasing the device from the quarantine state subject to the wireless connection parameter. ### Claim 8 (depends on 7) The method described in claim 7, wherein the attribute comprises: a driver type a driver version, a Quality of Service (QoS) marking capability, a wireless power control capability, a wireless data rate capability, or a wireless technology. ### Claim 9 (depends on 7) The method described in claim 7, wherein the method is implemented by at least one of a network controller for the wireless network or a remote configuration service. ### Claim 10 (depends on 7) The method described in claim 7, responsive to determining that the attribute of the device matches the uncharacterized attribute, determining that an update for a component corresponding to the attribute is available and notifying the user of the update and where it is available. ### Claim 11 (depends on 7) The method described in claim 7, wherein the attribute comprises a hardware attribute, a software attribute, a driver attribute, or a configuration setting attribute of the device. ### Claim 12 A computer-implemented method, comprising: placing a device in a quarantine state for a wireless network in response to a request from the device to connect to the wireless network; querying the device for an attribute of the device while the device is in the quarantine state; receiving a response from the device identifying the attribute; comparing the attribute of the device to a list of attributes pertaining to uncharacterized attributes for which performance attributes have not been determined; determining that the attribute of the device matches an uncharacterized attribute; applying a policy for uncharacterized attributes to determine a wireless connection parameter based upon the attribute of the device; responsive to determining that the attribute of the device matches an uncharacterized attribute determining that an update for a component corresponding to the attribute is available and causing the device to be updated; and releasing the device from the quarantine state subject to the wireless connection parameter. ### Claim 13 (depends on 12) The method described in claim 12, further comprising notifying the device of the update. ### Claim 14 (depends on 12) The method described in claim 12, further comprising identifying a configuration setting of the device that is modifiable to prevent the attribute of the device from matching the uncharacterized attribute, and wherein said notifying further comprises notifying the device of the configuration setting modification. ### Claim 15 (depends on 12) The method described in claim 12, wherein the method is implemented by at least one of a network controller for the wireless network or a remote configuration service. ### Claim 16 (depends on 12) The method described in claim 12, wherein the attribute comprises a hardware attribute, a software attribute, a driver attribute, or a configuration setting attribute of the device.