Patent ID: 11956635
Assignee: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 9:
10. An access point comprising:
a wireless interface to connect wirelessly to a client device;
a processor; and
a non-transitory storage medium comprising instructions executable on the processor to:
detect the client device seeking to connect to a network, wherein the access point is an intermediary between the client device and an authentication server;
send an identity-request from the access point to the client device, wherein the identity-request comprises a request-device-data field to request device-type information of a device type of the client device;
receive, at the access point, an identity-response from the client device, wherein the identity-response comprises a response-device-data field included in the identity-response by the client device based on the request-device-data field in the identity-request, the response-device-data field comprising the device-type information;
obtain, at the access point, the device-type information from the response-device-data field;
send an access-request from the access point to the authentication server, wherein the access-request includes the device-type information obtained from the response-device-data field;
receive an access-response at the access point from the authentication server, wherein the access-response is determined based on the device-type information included in the access-request;
based on the access-response from the authentication server, negotiate, by the access point, with the client device for authentication of the client device, and enable access of the client device to the network based on the authentication of the client device;
send, from the access point to the authentication server, a further access-request including device-type information identifying a device type of a further client device detected by the access point; and
receive, at the access point from the authentication server, an access rejection to prevent access to the network by the further client device, wherein the access rejection is responsive to a determination by the authentication server based on the device-type information in the further access-request that the further client device belongs to a restricted device category.