# US 11,115,873 B1 · Dynamic policy exchange

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,115,873 B1
- Document ID: US11115873B1
- Status: Granted
- Kind: B1
- Application number: 16/809,408
- Filed: 2020-03-04
- Published: 2021-09-09
- Granted: 2021-09-07
- Earliest claimed: 2020-03-04
- Assignees: Cisco Technology, Inc.
- Applicants: Cisco Technology, Inc.
- Inventors: Malcolm M. Smith; Jerome Henry; Sudhir K. Jain; Srinath Gundavelli; Shree N. Murthy
- Web page: https://patentgrep.com/patent/US11115873B1

## CPC

- H04L 47/24: Traffic characterised by specific attributes, e.g. priority or QoS
- H04W 28/24: Negotiating SLA [Service Level Agreement]; Negotiating QoS [Quality of Service]
- H04W 12/08: Access security
- H04W 16/18: Network planning tools
- H04W 28/0268: {using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] (negotiating SLA or negotiating QoS H04W28/24)}
- H04W 48/20: Selecting an access point
- H04W 88/08: Access point devices
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Dynamic policy mapping is provided via mapping, by an Access Point (AP), a plurality of applications to a set of privilege groups for Quality of Service (QoS) levels in a network; transmitting the mapping of the privilege groups to a client device; receiving packets from the client device including QoS markers; and in response to determining that the QoS markers received from the client device do not match the privilege groups for the packets, performing a corrective action on the client device, wherein the corrective action includes one or more of: disassociating the client device from the network; and retransmitting the set of privilege groups to the client device. In some embodiments, the privilege groups are transmitted before the client device is associated with the AP, enabling the client device to select what AP to associate with based on the privilege groups.

## Claims

### Claim 1

A method, comprising:
receiving, at a client device, a first privilege group mapping from a first Access Point (AP) that identifies first privilege levels for one or more applications executing on the client device;
receiving, at the client device, a second privilege group mapping from a second AP that identifies second privilege levels for the one or more applications;
selecting between the first AP and the second AP based on which of the first privilege group mapping and the second privilege group mapping better satisfies requirements of the one or more applications;
establishing a connection with the selected AP;
applying Quality of Service (QoS) markers to traffic transmitted from the client device to the selected AP based on the privilege group mapping corresponding to the selected AP; and
reconfiguring, by the client device in response to receiving the first privilege group mapping, traffic sent from the client device to the first AP according to the privilege group mapping to select a higher QoS category to apply to the traffic.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
in response to identifying that a given privilege level mapped for a given application is below a desired QoS level, identifying a new AP that offers the desired QoS level;
disassociated from the first AP; and
establishing a new connection with the new AP.

### Claim 3 (depends on 1)

The method of claim 1, wherein the first privilege group mapping is received before the client device associates with the first AP and the second privilege group mapping is received while the client device is not associated with the second AP.

### Claim 4 (depends on 1)

The method of claim 1, wherein the second privilege group mapping is received while the client device is associated with the second AP and replaces an earlier-provided privilege group mapping from the second AP.

### Claim 5 (depends on 1)

The method of claim 1, wherein the first privilege group mapping identifies a guaranteed bit rate for a given application.

### Claim 6 (depends on 1)

The method of claim 1, wherein an Operating System of the client device replaces original QoS markers applied by the application to the traffic with the QoS markers based on the privilege group mapping.

### Claim 7 (depends on 1)

The method of claim 1, wherein the client device applies a first QoS marker to a first packet type and second QoS marker to a second packet type from a single application.

### Claim 8

A method, comprising:
mapping, by an Access Point (AP), a plurality of applications to a set of privilege groups for Quality of Service (QoS) levels in a network;
transmitting the mapping of the privilege groups to a client device, wherein the mapping of the privilege groups enables the client device to reconfigure traffic sent to the AP to apply a higher QoS level to the traffic;
receiving packets from the client device including QoS markers; and
in response to determining that the QoS markers received from the client device do not match the privilege groups for the packets, performing a corrective action on the client device.

### Claim 9 (depends on 8)

The method of claim 8, wherein the corrective action includes one or more of:
disassociating the client device from the network; and
retransmitting the set of privilege groups to the client device.

### Claim 10 (depends on 8)

The method of claim 8, wherein the packets include a first flow of data assigned a first QoS marker and a second flow of data assigned a second QoS marker, wherein the QoS markers are determined to not match the privilege groups for the packets when one or more of the first QoS marker and the second QoS marker do not match the privilege groups for the first flow or the second flow respectively.

### Claim 11 (depends on 8)

The method of claim 8, further comprising:
sending downlink traffic to the client device indicated with the QoS markers according to an assigned privilege group for a receiving application running on the client device.

### Claim 12 (depends on 8)

The method of claim 8, wherein the set of privilege groups is transmitted before the client device is associated with the AP.

### Claim 13 (depends on 8)

The method of claim 8, wherein the set of privilege groups is transmitted to the client device after the client device is associated with the AP and replaces an earlier version of the set of privilege groups.

### Claim 14 (depends on 8)

The method of claim 8, further comprising:
in response to a change in network conditions, re-mapping the plurality of applications to the set of privilege groups based on the change to the network conditions.

### Claim 15 (depends on 8)

The method of claim 8, further comprising:
in response to identifying a new application requesting resources over the network, negotiating a privilege group to assign to the new application based on network settings and connectivity requirements of the new application.

### Claim 16

A non-transitory computer readable storage device including instructions that when executed by a processor perform an operation comprising:
mapping, by an Access Point (AP), a plurality of applications to a set of privilege groups for Quality of Service (QoS) levels in a network;
transmitting the mapping of the privilege groups to a client device, wherein the mapping of the privilege groups enables the client device to reconfigure traffic sent to the AP to apply a higher QoS level to the traffic;
receiving packets from the client device including QoS markers; and
in response to determining that the QoS markers received from the client device do not match the privilege groups for the packets, disassociating the client device from the network.

### Claim 17 (depends on 16)

The non-transitory computer readable storage device of claim 16, wherein the packets include a first flow of data assigned a first QoS marker and a second flow of data assigned a second QoS marker, wherein the QoS markers are determined to not match the privilege groups for the packets when one or more of the first QoS marker and the second QoS marker do not match the privilege groups for the first flow or the second flow respectively.

### Claim 18 (depends on 16)

The non-transitory computer readable storage device of claim 16, wherein the privilege groups are transmitted before the client device is associated with the AP.

### Claim 19 (depends on 16)

The non-transitory computer readable storage device of claim 16, wherein the privilege groups are transmitted to the client device after the client device is associated with the AP and replace an earlier version of the privilege groups.