Compact and integrated key controller apparatus for monitoring networks

• US 9,680,704 B2
• Filed: 09/26/2016
• Issued: 06/13/2017
• Est. Priority Date: 09/25/2015
• Status: Active Grant

• Current Assignee: Ubiquiti Inc.
• Original Assignee: Ubiquiti Networks, Inc. (Ubiquiti Inc.)
• Inventors: Pera, Robert J., Jagannath, Ramanujam, Dayanandan, Sriram, Kojima, Takaaki, Gavriloaie, Eugen-Andrei
• Primary Examiner(s): LAZARO, DAVID R
• Application Number:
  US15/276,527
• Publication Number:
  US 20170093625A1
• Time in Patent Office: 260 Days
• Field of Search: 709220, 709221, 709224, 709219
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0246 Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
• CPC Class Codes: H04L 41/04 Network management architectures or arrangements
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/34 Signalling channels for network management communication
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 24/04 Arrangements for maintaining operational condition
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/12 Access point controller devices

Abstract

Compact and integrated local key controller apparatuses for remotely managing a network of wireless devices that are connected to a computer network switch. These apparatuses (including devices and systems) and methods of using them may provide secure and fully integrated, stand-alone wireless network controllers that may be accessed remotely without compromising the integrity of the network'"'"'s firewall.

Claims

1. A compact and integrated local key controller apparatus for remotely managing a network of wireless devices connected to a computer network switch, the apparatus comprising:

a housing;

an Ethernet connection configured to connect to the computer network switch connected to a plurality of network devices including a plurality of wireless access points behind a firewall;

a processor within the housing, the processor configured to;

identify the local key controller apparatus to a remote server;

authenticate a request from a remote computer outside of the firewall to communicate with the local key controller apparatus;

communicate a controller information directly with the remote computer without passing the controller information through the remote server, wherein the controller information comprises monitoring information about the network devices and computer network switch information;

receive a modification information from the remote computer without passing the modification information through the remote server; and

modify the computer network switch, the network devices, or both the computer network switch and network devices based on the modification information.

2. The apparatus of claim 1, wherein the housing encloses a volume that is less than 0.2 cm³ and wherein the apparatus weighs less than 150 g.

3. The apparatus of claim 1, further comprising a single button on the housing configured as a reset button.

4. The apparatus of claim 1, further comprising a memory card slot configured to hold a removable memory.

5. The apparatus of claim 1, further comprising an indicator light visible on the housing.

6. The apparatus of claim 1, wherein the Ethernet connection comprises a power of Ethernet (PoE) connection.

7. The apparatus of claim 1, wherein the processor is configured to identify the local key controller apparatus to the remote server upon connecting the apparatus to the computer network switch.

8. The apparatus of claim 1, wherein the processor is configured to communicate controller information wherein the controller information comprises one or more of:

monitoring information about the network devices including one or more of;

network device name, IP address, connectivity status (number of connections, etc.), activity, down/up time;

latency of the network;

network throughput;

radio frequency (RF) channel information;

computer network switch information including one or more of;

port name, status, transmitting/receiving (Tx/Rx), PoE capability;

RF performance analysis; and

RF monitoring and device mapping.

9. The apparatus of claim 1, wherein the processor is configured to modify the computer network switch, the network devices, or both the computer network switch and network devices based on the modification information and the modification information comprises one or more of:

network device configuration information, LAN and WLAN group assignments for the network devices, provisioning of the network devices, radio frequency (RF) band steering, WAN/LAN/VLAN configuration of the computer network switch, and operation mode configuration for one or more ports on the switch.

10. A compact and integrated local key controller apparatus for remotely managing a network of wireless devices connected to a computer network switch, the apparatus comprising:

a housing;

a power over Ethernet connection configured to connect to the computer network switch connected to a plurality of network devices including a plurality of wireless access points behind a firewall;

a processor within the housing, the processor configured to;

identify the local key controller apparatus to a remote server when the apparatus is connected to the computer network switch;

authenticate a request from a remote computer outside of the firewall to communicate with the local key controller apparatus;

communicate controller information directly between with the remote computer without passing the controller information through the remote server, wherein the controller information comprises one or more of;

monitoring information about the network devices including one or more of;

network device name, IP address, connectivity status (number of connections, etc.), activity, down/up time;

latency of the network;

network throughput;

radio frequency (RF) channel information;

computer network switch information including one or more of;

port name, status, transmitting/receiving (Tx/Rx), PoE capability;

RF performance analysis; and

RF monitoring and device mapping;

receive a modification information from the remote computer without passing the modification information through the remote server; and

modify the computer network switch, the network devices, or both the computer network switch and network devices based on the modification information, wherein the modification information comprises one or more of;

network device configuration information,

LAN and WLAN group assignments for the network devices,

provisioning of the network devices,

RF band steering,

WAN/LAN/VLAN configuration of the computer network switch, and

operation mode configuration for one or more ports on the switch.

11. The apparatus of claim 10, wherein the housing encloses a volume that is less than 0.2 cm³ and wherein the apparatus weighs less than 150 g.

12. The apparatus of claim 10, further comprising a single button on the housing configured as a reset button.

13. The apparatus of claim 10, further comprising a memory card slot configured to hold a removable memory.

14. The apparatus of claim 10, further comprising an indicator light visible on the housing.

15. A method of remotely controlling a network using a compact and integrated local key controller apparatus, the method comprising:

connecting the local key controller apparatus to a port of a computer network switch behind a firewall, wherein the computer network switch is connected or configured to connect to a plurality of network devices including a plurality of wireless access points;

identifying the local key controller apparatus to a remote server;

receiving a request from a remote computer outside of the firewall to communicate with the local key controller apparatus;

authenticating the request;

communicating controller information directly between the local key controller apparatus and the remote computer without passing the controller information through the remote server, wherein the controller information comprises monitoring information about the network devices and computer network switch information;

communicating modification information from the remote computer to the local key controller apparatus without passing the modification information through the remote server; and

modifying the computer network switch, the network devices, or both the computer network switch and network devices based on the modification information.

16. The method of claim 15, wherein communicating controller information comprises displaying a graphical user interface displaying the controller information on the remote computer.

17. The method of claim 15, wherein the local key controller apparatus identifies itself to the remote server upon connection to the computer network switch.

18. The method of claim 15, wherein receiving the request from the remote computer comprises receiving the request in the remote server.

19. The method of claim 15, wherein authenticating the request comprises providing a secure and private single sign-on.

20. The method of claim 15, wherein communicating controller information comprises communicating monitoring information about the network devices including one or more of:

network device name, IP address, connectivity status (number of connections, etc.), activity, down/up time.

21. The method of claim 15, wherein communicating controller information comprises communicating one or more of:

latency of the network;

network throughput;

radio frequency (RF) channel information;

computer network switch information including one or more of;

port name, status, transmitting/receiving (Tx/Rx), PoE capability;

RF performance analysis; and

RF monitoring and device mapping.

22. The method of claim 15, wherein modifying the computer network switch, the network devices, or both the computer network switch and network devices comprises modifying based on the modification information comprising one or more of:

network device configuration information;

LAN and WLAN group assignments for the network devices;

provisioning of the network devices;

radio frequency (RF) band steering, WAN/LAN/VLAN configuration of the computer network switch, and operation mode configuration for one or more ports on the computer network switch.

23. A method of remotely controlling a network using a compact and integrated local key controller apparatus, the method comprising:

connecting the local key controller apparatus to a port of a computer network switch behind a firewall, wherein the computer network switch is connected or configured to connect to a plurality of network devices including a plurality of wireless access points;

identifying the local key controller apparatus to a remote server, wherein the local key controller apparatus identifies itself to the remote server upon connection to the computer network switch;

receiving a request from a remote computer outside of the firewall to communicate with the local key controller apparatus in the remote server;

authenticating the request;

communicating controller information directly between the local key controller apparatus and the remote computer without passing the controller information through the remote server, wherein the controller information comprises one or more of;

monitoring information about the network devices including one or more of;

network device name, IP address, connectivity status (number of connections, etc.), activity, down/up time;

latency of the network;

network throughput;

radio frequency (RF) channel information;

computer network switch information including one or more of;

port name, status, transmitting/receiving (Tx/Rx), PoE capability;

RF performance analysis; and

RF monitoring and device mapping;

communicating modification information from the remote computer to the local key controller apparatus without passing the modification information through the remote server; and

modifying the computer network switch, the network devices, or both the computer network switch and network devices based on the modification information, wherein the modification information comprises one or more of;

network device configuration information,

LAN and WLAN group assignments for the network devices,

provisioning of the network devices,

RF band steering,

WAN/LAN/VLAN configuration of the computer network switch, and

operation mode configuration for one or more ports on the switch.

24. The method of claim 23, wherein communicating controller information comprises displaying a graphical user interface displaying the controller information on the remote computer.

25. The method of claim 23, wherein authenticating the request comprises providing a secure and private single sign-on.