# US 12,120,153 B2 · Network compliance and admission control

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,120,153 B2
- Document ID: US12120153B2
- Status: Granted
- Kind: B2
- Application number: 18/361,779
- Filed: 2023-07-28
- Published: 2023-11-30
- Granted: 2024-10-15
- Earliest claimed: 2021-03-26
- Assignees: Cisco Technology, Inc.
- Applicants: Cisco Technology, Inc.
- Inventors: Malcolm M. Smith; Jerome Henry; Pooya Monajemi; Brian D. Hart; David S. Kloper
- Web page: https://patentgrep.com/patent/US12120153B2

## CPC

- H04L 63/104: {Grouping of entities}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04W 12/08: Access security
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A device includes a memory and a hardware processor communicatively coupled to the memory. The hardware processor determines that a computing device communicatively coupled to an access point performed an action with respect to the access point and in response to determining that the action causes a deviation from a multi-user uplink policy of the access point, transmits a disciplinary message to the computing device.

## Claims

### Claim 1

A device comprising:
a memory; and
a processor communicatively coupled to the memory, the processor configured to:
schedule, for a computing device communicatively coupled to an access point and according to a multi-user uplink policy implemented by the access point, a transmission of a message;
determine that the computing device transmitted the message out-of-turn using a single user mode rather than transmitting the message according to the multi-user uplink policy; and
in response to determining that the computing device transmitted the message out-of-turn using the single user mode, transmit a disciplinary message to the computing device, wherein the disciplinary message comprises one of (i) a first recommendation that the computing device communicates over a different band of the access point, (ii) a second recommendation that the computing device connects to a different access point, or (iii) a warning that communications from the computing device will be rate limited.

### Claim 2 (depends on 1)

The device of claim 1, wherein the processor is further configured to determine that an action performed by the computing device causes a behavior metric to exceed a threshold set by the multi-user uplink policy.

### Claim 3 (depends on 2)

The device of claim 2, wherein the processor is further configured to:
determine that the computing device performed a second action; and
in response to determining that the second action causes the behavior metric to exceed a second threshold, disassociate the computing device from the access point.

### Claim 4 (depends on 2)

The device of claim 2, wherein the processor is further configured to:
determine that the computing device belongs to a class of devices; and
in response to determining that the action causes a class behavior metric to exceed the threshold, communicate a recommendation that a first device of the class of devices connects to a different access point.

### Claim 5 (depends on 4)

The device of claim 4, wherein the recommendation is communicated when the first device of the class of devices attempts to connect to the access point.

### Claim 6 (depends on 1)

The device of claim 1, wherein the processor is further configured to determine that the computing device opted out and in or in and out of the multi-user uplink policy.

### Claim 7 (depends on 1)

The device of claim 1, wherein the disciplinary message is communicated to a manufacturer of the computing device.

### Claim 8

A method comprising:
scheduling, for a computing device communicatively coupled to an access point and according to a multi-user uplink policy implemented by the access point, a transmission of a message;
determining that the computing device transmitted the message out-of-turn using a single user mode rather than transmitting the message according to the multi-user uplink policy; and
in response to determining that the computing device transmitted the message out-of-turn using the single user mode, transmitting a disciplinary message to the computing device, wherein the disciplinary message comprises one of (i) a first recommendation that the computing device communicates over a different band of the access point, (ii) a second recommendation that the computing device connects to a different access point, or (iii) a warning that communications from the computing device will be rate limited.

### Claim 9 (depends on 8)

The method of claim 8, further comprising determining that (Original) an action performed by the computing device causes a behavior metric to exceed a threshold set by the multi-user uplink policy.

### Claim 10 (depends on 9)

The method of claim 9, further comprising:
determining that the computing device performed a second action; and
in response to determining that the second action causes the behavior metric to exceed a second threshold, disassociating the computing device from the access point.

### Claim 11 (depends on 9)

The method of claim 9, further comprising:
determining that the computing device belongs to a class of devices; and
in response to determining that the action causes a class behavior metric to exceed the threshold, communicating a recommendation that a first device of the class of devices connects to a different access point.

### Claim 12 (depends on 11)

The method of claim 11, wherein the recommendation is communicated when the first device of the class of devices attempts to connect to the access point.

### Claim 13 (depends on 8)

The method of claim 8, further comprising determining that the computing device opted out and in or in and out of the multi-user uplink policy.

### Claim 14 (depends on 8)

The method of claim 8, wherein the disciplinary message is communicated to a manufacturer of the computing device.

### Claim 15

An apparatus comprising:
a memory; and
a processor communicatively coupled to the memory, the processor configured to:
transmit, to an access point while connected to the access point, a message out-of-turn using a single user mode rather than transmitting the message according to a multi-user uplink policy implemented by the access point, wherein the message is scheduled according to the multi-user uplink policy;
receive, from the access point, a disciplinary message indicating that the message was transmitted out-of-turn using the single user mode, wherein the disciplinary message comprises one of (i) a first recommendation that the apparatus communicates over a different band of the access point, (ii) a second recommendation that the apparatus connects to a different access point, or (iii) a warning that communications from the apparatus will be rate limited;
communicate the disciplinary message to an entity; and
receive, from the entity, an instruction regarding the access point.

### Claim 16 (depends on 15)

The apparatus of claim 15, wherein the processor is further configured to perform an action that causes a behavior metric to exceed a threshold set by the multi-user uplink policy.

### Claim 17 (depends on 16)

The apparatus of claim 16, wherein the processor is further configured to perform a second action that causes the behavior metric to exceed a second threshold, wherein the access point disassociates the apparatus from the access point in response to the second action causing the behavior metric to exceed the second threshold.

### Claim 18 (depends on 16)

The apparatus of claim 16, wherein the processor belongs to a class of devices, wherein the action causes a class behavior metric to exceed the threshold, and wherein a first device of the class of devices is recommended to connect to a different access point in response to the class behavior metric exceeding the threshold.

### Claim 19 (depends on 18)

The apparatus of claim 18, wherein the first device of the class of devices is recommended to connect to the different access point when the first device of the class of devices attempts to connect to the access point.

### Claim 20 (depends on 15)

The apparatus of claim 15, wherein the processor is further configured to opt out and in or in and out of the multi-user uplink policy.
