# US 2019/0319951 A1 · Network Service Control for Access to Wireless Radio Networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0319951 A1 - Document ID: US20190319951A1 - Status: Published application - Kind: A1 - Application number: 15/952,454 - Filed: 2018-04-13 - Published: 2019-10-17 - Earliest claimed: 2018-04-13 - Assignees: AT&T Intellectual Property I, L.P. - Applicants: AT&T Intellectual Property I, L.P. - Inventors: Earle H. West, III; Mark Fu - Web page: https://patentgrep.com/patent/US20190319951A1 ## CPC - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 63/126: {the source of the received data} - H04W 12/06: Authentication - H04W 12/08: Access security - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Concepts and technologies of network service control for remote access to wireless radio networks are provided herein. In an embodiment, a client network can be provided by a network access point that can include a processor that is configured to detect a guest user equipment and determine whether the guest user equipment is a recognized device. In response to determining that the guest user equipment is not a recognized device, the processor can create an identity verification request message that seeks approval from a host device to allow the guest user equipment to access the client network. The processor can provide the identity verification request message to the host device and receive a trigger response message. The processor can create a network access package that provides the guest user equipment with access credentials to access the client network and provide the network access package to the guest user equipment. ## Claims ### Claim 1 A network access point comprising: a processor; and a memory that stores computer-executable instructions that, in response to execution by the processor, cause the processor to perform operations comprising: detecting a guest user equipment, in response to determining that the guest user equipment is not a recognized device, creating an identity verification request message that seeks approval from a host device to allow the guest user equipment access to a client network, providing the identity verification request message to the host device, receiving a trigger response message from the host device, wherein the trigger response message includes a network access request on behalf of the guest user equipment, creating a network access package that provides the guest user equipment with access credentials to access the client network, and providing the network access package to the guest user equipment. ### Claim 2 (depends on 1) The network access point of claim 1, wherein detecting the guest user equipment includes detecting a unique identifier that is being broadcast from the guest user equipment, and wherein determining that the guest user equipment is not a recognized device is based on the unique identifier. ### Claim 3 (depends on 1) The network access point of claim 1, wherein the operations further comprise determining that the guest user equipment exceeds a proximity time threshold for being in range of engaging in communication with the client network. ### Claim 4 (depends on 3) The network access point of claim 3, wherein creating the identity verification request message is in response to determining that the guest user equipment exceeds the proximity time threshold. ### Claim 5 (depends on 1) The network access point of claim 1, wherein creating the network access package includes: creating a service set identifier for the client network, creating a whitelist corresponding to the service set identifier for the client network, instantiating a unique identifier within the whitelist, generating access credentials for the guest user equipment, and creating the network access package that includes the access credentials, a notification that the guest user equipment is authorized to use the client network, and a connection acceptance trigger that instructs the guest user equipment to send a reply message using the access credentials. ### Claim 6 (depends on 1) The network access point of claim 1, wherein the operations further include determining that the guest user equipment satisfies corroborating conditions, and wherein the corroborating conditions include authentication of voice signature detected by the host device and verification that the guest user equipment is not on a blacklist in a remote datastore. ### Claim 7 (depends on 1) The network access point of claim 1, wherein the operations further comprise providing the guest user equipment with access to the client network. ### Claim 8 A method comprising: detecting, by a network access point that is communicatively coupled to a host device, a guest user equipment; in response to determining that the guest user equipment is not a recognized device, creating, by the network access point, an identity verification request message that seeks approval from the host device to allow the guest user equipment access to a client network; providing, by the network access point, the identity verification request message to the host device; receiving, by the network access point, a trigger response message from the host device, wherein the trigger response message includes a network access request on behalf of the guest user equipment; creating, by the network access point, a network access package that provides the guest user equipment with access credentials to access the client network; and providing the network access package to the guest user equipment. ### Claim 9 (depends on 8) The method of claim 8, wherein detecting the guest user equipment includes detecting a unique identifier that is being broadcast from the guest user equipment, and wherein determining that the guest user equipment is not a recognized device is based on the unique identifier. ### Claim 10 (depends on 8) The method of claim 8, further comprising determining that the guest user equipment exceeds a proximity time threshold for being in range of engaging in communication with the client network. ### Claim 11 (depends on 10) The method of claim 10, wherein creating the identity verification request message is in response to determining that the guest user equipment exceeds the proximity time threshold. ### Claim 12 (depends on 8) The method of claim 8, wherein creating the network access package comprises: creating a service set identifier for the client network; creating a whitelist corresponding to the service set identifier; instantiating a unique identifier within the whitelist; generating access credentials for the guest user equipment; and creating the network access package that includes the access credentials, a notification that the guest user equipment is authorized to use the client network, and a connection acceptance trigger that instructs the guest user equipment to send a reply message to the network access point using the access credentials. ### Claim 13 (depends on 8) The method of claim 8, further comprising determining, by the network access point, that the guest user equipment satisfies corroborating conditions, and wherein the corroborating conditions include authentication of voice signature detected by the host device and verification that the guest user equipment is not on a blacklist in a remote datastore. ### Claim 14 (depends on 8) The method of claim 8, further comprising providing, by the network access point, the guest user equipment access to the client network. ### Claim 15 A computer storage medium having computer-executable instructions stored thereon that, in response to execution by a processor of a network access point, cause the processor to perform operations comprising: detecting a guest user equipment; in response to determining that the guest user equipment is not a recognized device, creating an identity verification request message that seeks approval from a host device to allow the guest user equipment access to a client network; providing the identity verification request message to the host device; receiving a trigger response message from the host device, wherein the trigger response message includes a network access request on behalf of the guest user equipment; creating a network access package that provides the guest user equipment with access credentials to access the client network; and providing the network access package to the guest user equipment. ### Claim 16 (depends on 15) The computer storage medium of claim 15, wherein detecting the guest user equipment includes detecting a unique identifier that is being broadcast from the guest user equipment, and wherein determining that the guest user equipment is not a recognized device is based on the unique identifier. ### Claim 17 (depends on 15) The computer storage medium of claim 15, wherein the operations further comprise determining that the guest user equipment exceeds a proximity time threshold for being in range of engaging in communication with the client network. ### Claim 18 (depends on 17) The computer storage medium of claim 17, wherein creating the identity verification request message is in response to determining that the guest user equipment exceeds the proximity time threshold. ### Claim 19 (depends on 15) The computer storage medium of claim 15, wherein creating the network access package includes: creating a service set identifier for the client network, creating a whitelist corresponding to the service set identifier, instantiating a unique identifier within the whitelist, generating access credentials for the guest user equipment, and creating the network access package that includes the access credentials, a notification that the guest user equipment is authorized to use the client network, and a connection acceptance message that instructs the guest user equipment to send a reply message using the access credentials. ### Claim 20 (depends on 15) The computer storage medium of claim 15, wherein the operations further comprise determining that the guest user equipment satisfies corroborating conditions, and wherein the corroborating conditions include authentication of voice signature detected by the host device and verification that the guest user equipment is not on a blacklist in a remote datastore.