# US 10,873,858 B2 · Zone migration in network access

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,873,858 B2
- Document ID: US10873858B2
- Status: Granted
- Kind: B2
- Application number: 16/401,894
- Filed: 2019-05-02
- Published: 2020-01-30
- Granted: 2020-12-22
- Earliest claimed: 2009-07-07
- Assignees: Nomadix, Inc.
- Applicants: Nomadix, Inc.
- Inventors: Vadim Olshansky; Raffaele Noro
- Web page: https://patentgrep.com/patent/US10873858B2

## CPC

- H04W 12/08: Access security
- G06F 21/30: Authentication, i.e. establishing the identity or authorisation of security principals
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/102: {Entity profiles}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04W 84/12: WLAN [Wireless Local Area Networks]
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The present disclosure is directed to providing a network user the ability to travel between different zones or locations within a network environment, such as, for example, a hospitality location, without requiring a user to re-login to the new location, while requiring a user to re-login to other locations within the network environment.

## Claims

### Claim 1

A network management system configured to manage requests for network access from user devices and determine whether re-authentication is required, the network management system comprising one or more hardware processors configured to:
process a first request for network access received at a first network access point from a user device, said first network access point located a first geographical location;
allow network access to the user device based on the first request including authentication data;
store migrating permission for migrating between said first network access point and a second network access point based on the allowed network access, wherein the second network access point is in a second geographical location different than the first geographical location;
process a second request for network access received at a second port from the user device;
determine whether re-authentication of the user device is required prior to allowing access in response to the second request; and
allow network access to the user device based on the determination of whether re-authentication is required and the stored migrating permission.

### Claim 2 (depends on 1)

The network management system of claim 1, wherein said determination of re-authentication is based on a determination that registration is required.

### Claim 3 (depends on 1)

The network management system of claim 1, wherein said determination of re-authentication is based on a determination that a payment is required.

### Claim 4 (depends on 1)

The network management system of claim 1, wherein said determination of re-authentication is based on a determination that an affirmative action from a user on the user device is required.

### Claim 5 (depends on 1)

The network management system of claim 1, wherein said determination of re-authentication is based on a determination that the second network access point is in a different group than the first network access point.

### Claim 6

A network management method for managing requests for network access from user devices and determining whether re-authentication is required, the network management method comprising:
processing a first request for network access received at a first network access point from a user device, said first network access point located a first geographical location;
allowing network access to the user device based on the first request including authentication data;
storing migrating permission for migrating between said first network access point and a second network access point based on the allowed network access, wherein the second network access point is in a second geographical location different than the first geographical location;
processing a second request for network access received at a second port from the user device;
determining whether re-authentication of the user device is required prior to allowing access in response to the second request; and
allowing network access to the user device based on the determination of whether re-authentication is required and the stored migrating permission.

### Claim 7 (depends on 6)

The network management method of claim 6, wherein said determination of re-authentication is based on a determination that registration is required.

### Claim 8 (depends on 6)

The network management method of claim 6, wherein said determination of re-authentication is based on a determination that a payment is required.

### Claim 9 (depends on 6)

The network management method of claim 6, wherein said determination of re-authentication is based on a determination that an affirmative action from a user on the user device is required.

### Claim 10 (depends on 6)

The network management method of claim 6, wherein said determination of re-authentication is based on a determination that the second network access point is in a different group than the first network access point.