# US 10,771,967 B2 · Electronic device credential management

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,771,967 B2
- Document ID: US10771967B2
- Status: Granted
- Kind: B2
- Application number: 16/286,581
- Filed: 2019-02-26
- Published: 2019-06-27
- Granted: 2020-09-08
- Earliest claimed: 2016-03-17
- Assignees: Extreme Networks, Inc.
- Applicants: Extreme Networks, Inc.
- Inventors: John William Hanay; Daniel Estevan O'Rorke; Ravi Mishra; Young Yoon
- Web page: https://patentgrep.com/patent/US10771967B2

## CPC

- H04W 12/041: Key generation or derivation
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W 12/06: Authentication
- H04W 12/069: using certificates or pre-shared keys
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A unique pre-shared key plug-in is installed on a Chromebook device. Identification data associated with the Chromebook device is received, from the unique pre-shared key plug-in through a Chromebook client management system API. A unique pre-shared key is assigned to the Chromebook device using the identification data. The unique pre-shared key is sent to the Chromebook device. The Chromebook device is configured to seamlessly authenticate for a wireless network using the unique pre-shared key.

## Claims

### Claim 1

A method, comprising:
installing a pre-shared key plug-in on an electronic device;
receiving, from the pre-shared key plug-in through a client management system, identification data associated with the electronic device;
assigning a pre-shared key to the electronic device using the identification data;
sending the pre-shared key to the electronic device;
configuring the electronic device to authenticate for a wireless network using the pre-shared key; and
allowing the electronic device to access the wireless network based on a status of an association between the pre-shared key and the electronic device.

### Claim 2 (depends on 1)

The method of claim 1, further comprising embedding a configuration file on the electronic device to provision the electronic device with the pre-shared key for generating authentication data.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
detecting utilization of the electronic device as logging in to the electronic device; and
in response to the utilization of the electronic device, generating an authentication data using the pre-shared key.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
detecting utilization of the electronic device as attempting, with the electronic device, to establish a connection with the wireless network; and
in response to the utilization of the electronic device, generating authentication data using the pre-shared key.

### Claim 5 (depends on 1)

The method of claim 1, further comprising in response to determining that the status of the association between the pre-shared key and the electronic device is disassociated, rejecting the electronic device to access the wireless network.

### Claim 6 (depends on 1)

The method of claim 1, wherein the status of the association between the pre-shared key and the electronic device is associated.

### Claim 7 (depends on 1)

The method of claim 1, wherein the identification data comprises user information of the electronic device.

### Claim 8

A system, comprising:
a plurality of memories configured to store operations;
a plurality of processors configured to perform the operations comprising:
installing a pre-shared key plug-in on an electronic device;
receiving, from the pre-shared key plug-in through a client management system, identification data associated with the electronic device;
assigning a pre-shared key to the electronic device using the identification data;
sending the pre-shared key to the electronic device;
configuring the electronic device to authenticate for a wireless network using the pre-shared key; and
allowing the electronic device to access the wireless network based on a status of an association between the pre-shared key and the electronic device.

### Claim 9 (depends on 8)

The system of claim 8, wherein the operations further comprise embedding a configuration file on the electronic device to provision the electronic device with the pre-shared key for generating authentication data.

### Claim 10 (depends on 8)

The system of claim 8, wherein the operations further comprise:
detecting utilization of the electronic device as logging in to the electronic device; and
in response to the utilization of the electronic device, generating authentication data using the pre-shared key.

### Claim 11 (depends on 8)

The system of claim 8, wherein the operations further comprise:
detecting utilization of the electronic device as attempting, with the electronic device, to establish a connection with the wireless network; and
in response to the utilization of the electronic device, generating authentication data using the pre-shared key.

### Claim 12 (depends on 8)

The system of claim 8, wherein the operations further comprise in response to determining that the status of the association between the pre-shared key and the electronic device is disassociated, rejecting the electronic device to access the wireless network.

### Claim 13 (depends on 8)

The system of claim 8, wherein the status of the association of the pre-shared key and the electronic device is associated.

### Claim 14 (depends on 8)

The system of claim 8, wherein the identification data comprises user information of the electronic device.

### Claim 15

A non-transitory, tangible computer-readable device having instructions stored thereon that, when executed by at least one computing device, causes the at least one computing device to perform operations comprising:
installing a pre-shared key plug-in on a user equipment (UE) device;
receiving, from the pre-shared key plug-in, identification data associated with the UE device;
assigning a pre-shared key to send to the UE device;
based on the identification data, associating the pre-shared key to the UE device;
configuring the UE device to authenticate for a wireless network using the pre-shared key; and
allowing the UE device to access the wireless network based on a status of an association between the pre-shared key and the UE device, wherein the identification data comprises user information of the UE device.

### Claim 16 (depends on 15)

The non-transitory, tangible computer-readable device of claim 15, wherein the operations further comprise embedding a configuration file on the UE device to provision the UE device with the pre-shared key for generating authentication data.

### Claim 17 (depends on 15)

The non-transitory, tangible computer-readable device of claim 15, wherein the operations further comprise:
detecting utilization of the UE device as logging in to the UE device; and
in response to the utilization of the UE device, generating authentication data using the pre-shared key.

### Claim 18 (depends on 15)

The non-transitory, tangible computer-readable device of claim 15, wherein the operations further comprise:
detecting utilization of the UE device as attempting, with the UE device, to establish a connection with the wireless network; and
in response to the utilization of the UE device, generating authentication data using the pre-shared key.

### Claim 19 (depends on 15)

The non-transitory, tangible computer-readable device of claim 15, wherein the operations further comprise in response to determining that the status of the association between the pre-shared and the UE device is disassociated, rejecting the UE device to access the wireless network.

### Claim 20 (depends on 15)

The non-transitory, tangible computer-readable device of claim 15, wherein the status of the association between the pre-shared key and the UE device is associated.