Controlled guest access to Wi-Fi networks

A method implemented by a guest user device for accessing a Wi-Fi network, the method comprising:

• obtaining a key of a plurality of keys for the Wi-Fi network designated by a Service Set Identifier (SSID), wherein each of the plurality of keys comprises a password or certificate for the Wi-Fi network, wherein the Wi-Fi network is configured to provide, via any of the one or more access point devices, user level access control to network resources and other devices connected to the one or more access point devices based on which key of a plurality of keys is used to access the SSID by defining a plurality of access zones associated with the SSID;
• associating to the Wi-Fi network using the SSID and the key;
• and
• responsive to defining the plurality of access zones associated with the SSID, the SSID being a single SSID for the plurality of access zones, each access zone being an access level that defines and manages the user level access control including access privileges that one or more devices are given while connected to the Wi-Fi network via any of the one or more access point devices, the access privileges defining access to the internet and access to the other devices connected to the one or more access point devices on the Wi-Fi network, communicating over the Wi-Fi network according to an access zone of the plurality of access zones based on the key, wherein the key is associated with the access zone and the communicating comprises access based on the access privileges of the access zone,
• wherein each of the plurality of keys is associated with the SSID, is associated only with one of the plurality of access zones, and pairs with the SSID to provide access to the one of the access zones associated therewith, such that user devices accessing the Wi-Fi network using the SSID and a particular key associated with a particular access zone is assigned the access privileges associated with the particular access zone, and
• wherein each access zone is accessible via any of one or more access point devices of the Wi-Fi network using the SSID.

A Wi-Fi access point, comprising:

• one or more radios;
• and
• a processor communicatively coupled to the one or more radios, wherein the processor is configured to
• configure a Wi-Fi network over the one or more radios designated by a Service Set Identifier (SSID), wherein the Wi-Fi network is configured to provide user level access control to network resources and other devices connected to the Wi-Fi network based on which key of a plurality of keys is used to access the SSID by defining a plurality of access zones associated with the SSID;
• associate with a Wi-Fi client device which accesses the Wi-Fi network using the SSID and a key of the plurality of keys, each being a password or certificate for the Wi-Fi network;
• and
• provide access to the Wi-Fi network for the Wi-Fi client device based on an access zone of the plurality of access zones associated with the SSID, the SSID being a single SSID for the plurality of access zones, each access zone being an access level that defines and manages the user level access control including access privileges that devices are given while connected to the Wi-Fi network, the access privileges defining access to the internet and access to the other devices connected the Wi-Fi network, wherein each of the plurality of keys is associated with the SSID, is associated only with one of the plurality of access zones, and pairs with the SSID to provide access to the one of the access zones of the Wi-Fi network associated therewith, such that the one or more user devices accessing the Wi-Fi network using the SSID and a key associated with a particular access zone is assigned the access privileges associated with the particular access zone,
• wherein each of the plurality of access zones is accessible via the Wi-Fi access point using the SSID, the access being granted based on which of the plurality of keys is provided to the Wi-Fi access point by the one or more devices.