# US 12,192,756 B2 · Layer-2 grouping of electronic devices across heterogeneous networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,756 B2 - Document ID: US12192756B2 - Status: Granted - Kind: B2 - Application number: 17/690,112 - Filed: 2022-03-09 - Published: 2022-06-23 - Granted: 2025-01-07 - Earliest claimed: 2018-02-23 - Assignees: Ruckus IP Holdings LLC - Applicants: Ruckus IP Holdings LLC - Inventors: James Brook Longdon - Web page: https://patentgrep.com/patent/US12192756B2 ## CPC - H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 41/12: Discovery or management of network topologies - H04L 41/5054: Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components - H04L 61/2539: Hiding addresses; Keeping addresses anonymous - H04L 61/4541: Directories for service discovery - H04L 61/5014: using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP] - H04L 63/0272: {Virtual private networks} - H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer} - H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols} - H04L 63/104: {Grouping of entities} - H04W 12/06: Authentication - H04W 12/08: Access security - H04L 41/5077: {wherein the managed service relates to simple transport services, i.e. providing only network infrastructure} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 2101/622: Layer-2 addresses, e.g. medium access control [MAC] addresses - H04L 2101/654: International mobile subscriber identity [IMSI] numbers - H04W 12/72: Subscriber identity - H04W 84/12: WLAN [Wireless Local Area Networks] - H04W 92/02: Inter-networking arrangements - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A computer that segments traffic associated with different entities across heterogeneous networks is described. During operation, the computer may provide, addressed to a second computer, information that specifies a mapping of an identifier of an electronic device in a wireless network and a second identifier of a virtual container for traffic associated with the electronic device in the wireless network to a third identifier of the electronic device in a cellular-telephone network, where the electronic device and the virtual container are associated with an entity. Then, the computer may communicate the traffic between the wireless network and the cellular-telephone network within the virtual container based at least in part on the mapping, where the virtual container isolates the traffic from other traffic in the wireless network. Note that the identifier may include a MAC address and the third identifier may include an IMSI. ## Claims ### Claim 1 A computer, comprising: an interface circuit configured to communicate with a second computer, wherein the computer is configured to perform operations comprising: providing, addressed to the second computer, information that specifies a mapping of an identifier of an electronic device in a wireless network and a second identifier of a virtual container for traffic associated with the electronic device in the wireless network to a third identifier of the electronic device in a cellular-telephone network, wherein the electronic device and the virtual container are associated with an entity. ### Claim 2 (depends on 1) The computer of claim 1, wherein the operations comprise communicating the traffic between the wireless network and the cellular-telephone network within the virtual container based at least in part on the mapping; and wherein the virtual container isolates the traffic from other traffic in the wireless network. ### Claim 3 (depends on 2) The computer of claim 2, wherein the operations comprise providing a packet addressed the second computer; and wherein the packet comprises the identifier and the second identifier. ### Claim 4 (depends on 2) The computer of claim 2, wherein the operations comprise receiving a packet associated with the second computer; and wherein the packet comprises the identifier and the second identifier. ### Claim 5 (depends on 1) The computer of claim 1, wherein the computer comprises a gateway for the wireless network and the second computer comprises a packet gateway for the cellular-telephone network. ### Claim 6 (depends on 1) The computer of claim 1, wherein the computer comprises a controller of computer network devices in the wireless network. ### Claim 7 (depends on 1) The computer of claim 1, wherein the wireless network comprises a wireless local area network (WLAN) that is compatible with an Institute of Electrical and Electronics Engineers (IEEE) 802.11 communication protocol, and the cellular-telephone network is compatible with a cellular data communication protocol. ### Claim 8 (depends on 1) The computer of claim 1, wherein the wireless network and the cellular-telephone network are associated with a private entity. ### Claim 9 (depends on 1) The computer of claim 1, wherein the identifier comprises a media access control (MAC) address and the third identifier comprises an international mobile subscriber identity (IMSI). ### Claim 10 (depends on 1) The computer of claim 1, wherein the second computer is associated with an evolved packet core (EPC) of the cellular-telephone network. ### Claim 11 (depends on 1) The computer of claim 1, wherein the virtual container comprises a virtual local area network (VLAN). ### Claim 12 (depends on 1) The computer of claim 1, wherein the mapping comprises layer 2 information. ### Claim 13 (depends on 1) The computer of claim 1, wherein the information specifies the mapping of instances of the identifier and instances of the second identifier for a set of electronic devices to the third identifier; and wherein the virtual container permits intercommunication among the set of electronic devices in the wireless network, the cellular-telephone network or both. ### Claim 14 (depends on 1) The computer of claim 1, wherein the operations comprise providing information specifying instances of the mapping for the multiple entities; and wherein a given entity is associated with a given virtual container. ### Claim 15 A non-transitory computer-readable storage medium for use in conjunction with a computer, the computer-readable storage medium storing program instructions that, when executed by the computer, cause the computer to perform operations comprising: providing, addressed to a second computer, information that specifies a mapping of an identifier of an electronic device in a wireless network and a second identifier of a virtual container for traffic associated with the electronic device in the wireless network to a third identifier of the electronic device in a cellular-telephone network, wherein the electronic device and the virtual container are associated with an entity; and communicating the traffic between the wireless network and the cellular-telephone network within the virtual container based at least in part on the mapping, wherein the virtual container isolates the traffic from other traffic in the wireless network. ### Claim 16 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the identifier comprises a media access control (MAC) address and the third identifier comprises an international mobile subscriber identity (IMSI). ### Claim 17 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the mapping comprises layer 2 information. ### Claim 18 A method for segmenting traffic associated with different entities across heterogeneous networks, comprising: by a computer: providing, addressed to a second computer, information that specifies a mapping of an identifier of an electronic device in a wireless network and a second identifier of a virtual container for traffic associated with the electronic device in the wireless network to a third identifier of the electronic device in a cellular-telephone network, wherein the electronic device and the virtual container are associated with an entity; and communicating the traffic between the wireless network and the cellular-telephone network within the virtual container based at least in part on the mapping, wherein the virtual container isolates the traffic from other traffic in the wireless network. ### Claim 19 (depends on 18) The method of claim 18, wherein the identifier comprises a media access control (MAC) address and the third identifier comprises an international mobile subscriber identity (IMSI). ### Claim 20 (depends on 18) The method of claim 18, wherein the mapping comprises layer 2 information.