Autonomous device authentication for private network access
AssigneeHewlett Packard Enterprise Development LP
InventorsJerome Sicard, Marta Vieyros Lorenzo
Life of this patent
Estimating the term…
Abstract
Examples include solutions to onboard and seamlessly grant access to a network device to connect to an enterprise network. A request including enterprise credentials is received to access the enterprise network. The enterprise credentials are verified with an enterprise authentication server. A mapping between the device and the verified enterprise credentials are stored at an entitlement configuration server. The entitlement configuration server passes the enterprise credentials to a wireless controller upon receiving a request from the wireless controller for the device to access the enterprise network.
Claims20
A method comprising:
- onboarding a network device, the onboarding including:
- receiving an access request from a Mobile Device Manager (MDM) for the device to access an enterprise network, wherein the access request includes enterprise credentials;
- verifying the enterprise credentials with an Enterprise Authentication Server (EAS);
- and
- responsive to verifying the enterprise credentials, storing, at an Entitlement Configuration Server (ECS), a mapping between the device and the verified enterprise credentials;
- and
- granting access to the network device to connect to the enterprise network, including:
- receiving an access request, from a wireless controller for the device to access the enterprise network;
- and
- responsive to the access request, passing the enterprise credentials to the wireless controller.
A system for connecting a device to an enterprise network comprising:
- an entitlement configuration server (ECS), the ECS including:
- a processor;
- a record store including at least one mapping between the device and enterprise credentials of the device;
- and
- a memory including instructions that when executed by the processor cause the processor to:
- receive an access request including enterprise credentials to onboard the device for access to the enterprise network;
- responsive to the access request, store, at the record store of the ECS, a mapping between the device and the enterprise credentials, wherein the ECS, upon receiving a request from a wireless controller for the device to access the enterprise network, passes the enterprise credentials to the wireless controller.
A non-transitory computer readable medium including instructions thereon for connecting a device to an enterprise network, wherein the instructions, when executed by a processor, cause the processor to:
- receive a request to onboard a device for access to the enterprise network;
- verify, upon receiving the onboard request, enterprise credentials for onboarding the device for access to the enterprise network, the enterprise credentials including at least an enterprise identifier and a device identifier;
- responsive to verifying the enterprise credentials, store a mapping between the device and the verified enterprise credentials;
- receive a request, from a wireless controller to access the enterprise network;
- and
- responsive to the access request, pass the enterprise credentials to the wireless controller.
Dependencies are inferred from the claim text.