# US 8,542,836 B2 · System, apparatus and methods for highly scalable continuous roaming within a wireless network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,542,836 B2 - Document ID: US8542836B2 - Status: Granted - Kind: B2 - Application number: 12/957,997 - Filed: 2010-12-01 - Published: 2012-06-07 - Granted: 2013-09-24 - Earliest claimed: 2010-12-01 - Assignees: Juniper Networks, Inc. - Applicants: Jeffrey L. Pochop, Jr. - Inventors: Jeffrey L. Pochop, Jr. - Web page: https://patentgrep.com/patent/US8542836B2 ## CPC - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/64: using geofenced areas - H04W 36/0038: {of security context information} - H04W 8/12: between location registers or mobility servers - H04W 84/12: WLAN [Wireless Local Area Networks] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract In one embodiment, an apparatus includes a first access point within a wireless network. The first access point is configured to identify a communication device within a radio frequency (RF) range of the first access point. The first access point is also configured to request a session key associated with the communication device from a first network controller associated with the first access point in response to the communication device being identified. The first access point is further configured to receive the session key associated with the communication device from a second network controller associated with a second access point having an RF range partially overlapping the RF range of the first access point. ## Claims ### Claim 1 An apparatus, comprising: a first access point within a wireless network, the first access point configured to identify a communication device within a radio communications area of the first access point, the first access point configured to request a session key associated with the communication device from a first network controller associated with the first access point in response to the communication device being identified, the first access point configured to receive the session key associated with the communication device from a second network controller associated with a second access point having a radio communications area partially overlapping the radio communications area of the first access point. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the first access point is configured to receive the session key associated with the device from the second network controller via the first network controller. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein the first access point is configured to receive the session key associated with the communication device from the second network controller via the first network controller over a wired network connection. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the first access point is an access point within a wireless local area network. ### Claim 5 (depends on 1) The apparatus of claim 1, wherein the first access point is configured to identify the communication device by receiving a unique identifier from the device sent to the first access point in response to the first access point broadcasting an identifier packet. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the first access point is configured to request the session key associated with the communication device within a time period within which the second access point connects the communication device to a network. ### Claim 7 (depends on 1) The apparatus of claim 1, wherein the first access point is configured to request the session key associated with the device when the device is at a first location and connected by the second access point to a network, the first access point is configured to connect the communication device to the network when the device is at a second location. ### Claim 8 A non-transitory processor-readable medium storing code representing instructions to cause a processor to: broadcast an identification packet within a radio communications area of a first access point of a network; receive, in response to the broadcast of the identification packet, a signal having a unique identifier of a device; request, in response to the signal, a session key associated with the device from a first network controller associated with the first access point; and receive the session key from a second network controller via the first network controller, the second network controller associated with a second access point that connects the device to the network when the device is within a radio communications area of the second access point. ### Claim 9 (depends on 8) The non-transitory processor-readable medium of claim 8, wherein the second access point connects the device to the network when the device is at a first location, the first access point connecting the device to the network when the device is at a second location different from the first location. ### Claim 10 (depends on 8) The non-transitory processor-readable medium of claim 8, wherein the first access point is configured to use the session key to maintain a network session between the device and the network. ### Claim 11 (depends on 8) The non-transitory processor-readable medium of claim 8, wherein the network is a wireless local area network. ### Claim 12 (depends on 8) The non-transitory processor-readable medium of claim 8, wherein the first network controller manages the first access point. ### Claim 13 (depends on 8) The non-transitory processor-readable medium of claim 8, wherein the code representing instructions to cause the processor to broadcast the identification packet includes code to periodically broadcast the identification packet such that each device within the radio communications area of the first access point responds to the identification packet. ### Claim 14 (depends on 8) The non-transitory processor-readable medium of claim 8, wherein the device is a first device, the signal is a first signal, the session key is a first session key, the non-transitory processor-readable medium further comprising code representing instructions to cause the processor to: receive, in response to broadcast of the identification packet, a second signal having a unique identifier of a second device; and retain a session key associated with the second device based on the second signal. ### Claim 15 A system, comprising: a first network controller configured to manage a first access point within a network, the first network controller configured to maintain a session key for a device such that the first access point provides the device with connectivity to the network when the device is at a first location and a second location, the first location being within a radio communications area of the first access point but not a second access point; and a second network controller configured to manage the second access point within the network, the second network controller configured to request, from the first network controller, the session key for the device in response to the device moving from the first location to the second location within the radio communications area of the first access point, the second location being within a radio communications area of the second access point. ### Claim 16 (depends on 15) The system of claim 15, wherein the second access point is configured to send a broadcast signal to the device such that the device responds to the broadcast signal when the device is at the second location. ### Claim 17 (depends on 15) The system of claim 15, wherein the second access point is configured to provide the device with connectivity to the network when the device is at a third location such that the third location is within the radio communications area of the second access point but not within the radio communications area of the first access point such that connectivity to the network is maintained as the device moves from the first location to the third location. ### Claim 18 (depends on 15) The system of claim 15, wherein the second network controller is configured to receive the session key from the first network controller, the second network controller configured to cache the session key when the device is at the second location, the second network controller configured to activate the session key when the device is at a third location. ### Claim 19 (depends on 15) The system of claim 15, wherein the network is a wireless local area network. ### Claim 20 (depends on 15) The system of claim 15, wherein the second network controller is configured to request the session key from the first network controller in response to the second access point identifying the device within the radio communications area of the second access point.