Aruba Networks Patent Grants

Topology independent network-based automation infrastructure

Granted: January 28, 2014
Patent Number: 8639978
An automation process verifies that a test bed includes a set of devices specified by at least one script which are to be executed by the automation process on the test bed. The test bed is locked and the set of devices is allocated to the automation process. Performance data collection and logging for the set of devices is started and the at least one script is executed on the set of devices. After executing the at least one script, the set of devices is de-allocated and the test bed is…

Authorizing remote access points

Granted: January 7, 2014
Patent Number: 8627423
Authorizing remote access points for use in a network: After the remote access point is provisioned to communicate securely to a controller using its TCP/IP address provided by a user, the remote access point is put into an un-authorized state by the controller pending further authorization. The user is presented with a secure captive portal page authenticating the end-user. User's authentication credentials are verified by the controller. After the remote access point has been…

Displaying a wideband spectrum using a narrowband receiver

Granted: January 7, 2014
Patent Number: 8625436
Methods of aggregating spectrum data captured from a narrowband radio to form a spectrum covering a much wider frequency band. Frequency data, such as FFT spectrum data captured from a narrowband receiver such as an IEEE 802.11 Wi-Fi receiver are combined to display representative real-time FFT, average FFT, and FFT duty cycle data of a wideband spectrum. Data is captured from narrow band radios such as access points, station monitors, or client devices on a wireless network. A wideband…

Wireless roaming with QoS and dynamic call capacity management

Granted: January 7, 2014
Patent Number: 8625417
According to one embodiment of the invention, a method for assistance in roaming and call capacity comprises the transmission of a first message to obtain information regarding access point capacity prior to transmitting a data flow. The first message identifies the priority level of the data flow and a requested medium time for the data flow. Thereafter, an access point transmits a second message that identifies whether the requested medium time is available for the data flow. This may…

Method and system for a radio frequency management in a mesh network with a path distance factor

Granted: December 17, 2013
Patent Number: 8611256
A method and system for radio frequency management (RFM) in a mesh network using a path distance factor (PDF) is disclosed. According to one embodiment, a computer-implemented method, comprises calculating a path distance factor (PDF) between a first mesh router and a portal. A frame is transmitted to a second mesh router, wherein the frame includes the path distance factor.

In-band security protocol decryptor and scanner

Granted: December 3, 2013
Patent Number: 8601152
An in-band decryptor and scanner (IBDS) for monitoring data packets or frames of an encrypted communication session. The IBDS may reroute or process the data packets or frames prior to reaching their destination. The IBDS may be used to decrease the load on a server by decrypting, preprocessing or rerouting the incoming data without altering the endpoints of the encrypted communication session from the server and a client.

Methods, apparatuses and systems facilitating management of airspace in wireless computer network environments

Granted: November 5, 2013
Patent Number: 8576812
Methods, apparatuses and systems facilitating the management of wireless computer network environments and the detection of rogue and other devices that may affect the performance and/or security of the wireless computer network. The present invention enables accurate and cost effective WLAN airspace mapping. In one embodiment, the present invention allows any conforming access point the ability to routinely scan its airspace, collect data on all operating frequencies and report this…

System and method for QOS provisioning in broadband wireless mesh networks

Granted: October 29, 2013
Patent Number: 8570954
A method and system for QoS provisioning in broadband wireless mesh networks are disclosed. According to one embodiment, a computer-implemented method, comprises providing a dual mode mesh router having a plurality of radios, wherein the mesh router is used in a cell of a plurality of cells that covers a geographic region. The mesh router includes one or more WiMAX backhaul radios, one or more WiFi backhaul radios, one or more WiMAX access radios, one or more WiFi access radios, and…

Automatic secure client access

Granted: October 15, 2013
Patent Number: 8560833
Providing secure network access in a networked client device. A client device is provided with a secure connection adapter. In operation, the secure connection adapter detects the network environment of the client device and determines of the network environment is trusted or untrusted. If the client device is operating in an untrusted network environment, the secure connection adapter establishes a secure connection to an enterprise host using a secure tunnel such as IPSec, SSL, or…

Analysis of encrypted streaming media traffic

Granted: September 17, 2013
Patent Number: 8539064
A method of analyzing streaming media traffic comprises intercepting a data stream that is at least in part encrypted, observing a characteristic associated with the data stream, deriving, based at least in part on the characteristic associated with the data stream, a characteristic associated with an IP telephony session.

Device abstraction in autonomous wireless local area networks

Granted: September 17, 2013
Patent Number: 8539055
According to embodiments of the present disclosure, a managed network device assigns to itself an IP address, in absence of a DHCP service, in a link local address space within a wireless network. The system further responds to a network frame received from another device based on the assigned IP address in the link local address space. The network frame can be a network traffic frame, a control path frame, and/or a management frame. The control path frame comprises a source IP address…

Single voicemail for dual-mode phones

Granted: September 17, 2013
Patent Number: 8538387
Single voicemail for dual-mode phones. Functionality is added to a dual-mode phone such that the dual-mode phone when operating in cellular mode sends a predetermined signal when it answers an incoming call. An enterprise mobility controller, on forwarding a call to the cellular side of a dual-mode phone after failing to complete a Wi-Fi connection, starts a timer. If the mobility controller does not receive the predetermined signal before the timer expires, it assumes that the cellular…

Method and system for network failover and network selection with multi-mode modem in remote access points

Granted: September 17, 2013
Patent Number: 8537715
The present disclosure discloses a method and network device for network failover and/or network selection with a multi-mode modem in remote access points. A RAP initially is set to allow the modem's firmware to select an ISP-preferred available network. Then, the RAP collects network selection attributes, including RSSI, for the selected network, derives a NSC value based on the attributes, and determines whether the derived NSC value is within an expected range. If so, the device…

Wireless client position estimating system and method

Granted: August 27, 2013
Patent Number: 8520647
The present invention comprises a system and method for determining an estimated position of a wireless mobile client device operating in a communications environment covered by a wireless local area network. The received signal strength of the wireless mobile client device is measured by one or more access points serving devices in the communications environment. In a preferred embodiment, the error between the received signal strength measured by the access points and the expected…

Synchronization of mobile client multicast membership

Granted: August 27, 2013
Patent Number: 8520580
Synchronization of mobile multicast membership in a wireless network. A controller supports one or more wireless access points, each of which supports wireless clients. A Mobility Manager (MM) in the controller monitors wireless client activity. The controller establishes an IGMP proxy which intercepts IGMP messages from wireless clients and handles the IGMP messages on clients' behalf. When a wireless client wishes to join a multicast, the client's IGMP join message is intercepted by…

Distance estimation

Granted: August 27, 2013
Patent Number: 8519884
Improved distance estimation of a selected transmitter. An improved distance estimate from a target transmitter to a receiver is produced by assessing the target transmitter to determine transmit power, and combining this information with a propagation model, received signal strength, and reference signal strength indications. Target transmit power may be assessed through knowledge of the target device or device class, and/or transmit power reporting features of target wireless networks.…

Home virtual local area network identification for roaming mobile clients

Granted: August 20, 2013
Patent Number: 8514828
The present disclosure discloses a method and network device for home VLAN identification for roaming mobile clients. Specifically, the disclosed method and system detects that the mobile client has roamed away from a first network to a second network, maintains a mapping between a virtual local area network (VLAN) corresponding to the mobile client and a tunnel corresponding to a foreign agent in the second network, and forwards packets to or from the mobile client on the VLAN based on…

Locating devices in a wireless network

Granted: August 20, 2013
Patent Number: 8514057
Determining the location of a wireless device to be located (DTL) by three or more locating devices (LDs). LDs operating at known locations estimate the distance to the DTL by sending wireless frames to the DTL and varying frame parameters such as transmit power and data rate, searching for the boundary at which the frame is or is not received and ACKd by the DTL. For a given set of frame parameters, the SNR required to be successfully received at the DTL is known. Given that the…

System and method for advertising the same service set identifier for different basic service sets

Granted: July 9, 2013
Patent Number: 8483169
According to one embodiment of the invention, a method comprises advertising services. The services are provided by different basic service sets, each basic service set having the same service set identifier (SSID). Thereafter, one of the basic service sets is selected.

Power savings in access points

Granted: May 28, 2013
Patent Number: 8451760
Embodiments of the invention are directed to power savings in Access Points (APs). Legacy 802.11 modes such as 802.11a/b/g use one transmitter/receive chain per radio. High Throughput (HT) 802.11n modes use multiple (2, 3, or more) transmit/receive chains per radio. Power consumed by the AP may be reduced by powering off unused transmit and/or receive chains. Multiple transmit chains are only powered up when HT 802.11n transmissions requiring them are made. Using protected mode…