Fast access to local area network (LAN) graphical user interface (GUI) by client device

A network device for providing a LAN GUI to a client device. The network device receives a request for access by the client device to the LAN GUI. The network device analyzes a LAN GUI access whitelist and determines whether the client device is in the LAN GUI access whitelist. The client device is granted access to the LAN GUI without receiving a password from the client device when the client device is determined to be in the LAN GUI access whitelist. An address entry page may be presented to add the MAC address of the client device to the LAN GUI access whitelist and a password page may be presented to display the LAN GUI password. When the client device is not in the LAN GUI access list, a login page is presented for entering the password to obtain access to the LAN GUI.

BACKGROUND

The subject matter of the present disclosure relates to accessing a local area network (LAN) graphical user interface (GUI) without providing a password.

SUMMARY

Aspects of the present disclosure are drawn to a network device for providing a LAN GUI to a client device without receiving a password from the client device. The network device receives a request for access by the client device to the LAN GUI. The network device analyzes a LAN GUI access whitelist and determines whether the client device is in the LAN GUI access whitelist. The client device is granted access to the LAN GUI without receiving a password from the client device when the client device is determined to be in the LAN GUI access whitelist.

An address entry page may be presented to add the MAC address of the client device to the LAN GUI access whitelist and a password page may be presented to display the LAN GUI password. When the client device is not in the LAN GUI access list, a login page is presented for entering the password to obtain access to the LAN GUI.

DETAILED DESCRIPTION

A LAN GUI is used to configure access to a network, to configure network parameters, and to manage operation of the network device. For example, if the network becomes congested, the user may want to login to the LAN GUI to analyze whether someone else is using the network that causes the network to become congested. The LAN GUI password is entered to determine if the client device will be granted access to the LAN GUI. However, passwords are often forgotten, and if the customer forgets the password, a factory reset to the network device, such as a router, modem, or gateway, is necessary to reset the password to the default GUI password.

The subject matter of the present disclosure provides a method to grant access by a client device to the LAN GUI without the client device providing a LAN GUI password. If the password for accessing the LAN GUI is forgotten, access may be granted based on identification of a client device in a LAN GUI access list.

FIG.1is a schematic diagram of a system100.

As shown inFIG.1, the system includes a network device102connected to the Internet106via an Internet Service Provider (ISP)101and also connected to different wireless devices such as wireless extenders103and client devices104,105. The system shown inFIG.1includes wireless devices (e.g., wireless extenders103and client devices104,105) that may be connected in one or more wireless networks (e.g., private, guest, iControl, backhaul network, or Internet of things (IoT) network) within the system. Additionally, there could be some overlap between wireless devices (e.g., wireless extenders103and client devices104,105) in the different networks. That is, one or more network devices could be located in more than one network. For example, the wireless extenders103could be located both in a private network for providing content and information to a client device104and also included in a backhaul network or an iControl network.

Starting from the top ofFIG.1, the ISP101can be, for example, a streaming video provider or any computer for connecting the network device102to the Internet106. The connection114between the Internet106and the ISP101and the connection113between the ISP101and the network device102can be implemented using a wide area network (WAN), a virtual private network (VPN), metropolitan area networks (MANs), system area networks (SANs), a DOCSIS network, a fiber optics network (e.g., FTTH (fiber to the home) or FTTX (fiber to the x), or hybrid fiber-coaxial (HFC)), a digital subscriber line (DSL), a public switched data network (PSDN), a global Telex network, or a 2G, 3G, 4G or 5G network, for example.

The connection113can further include as some portion thereof a broadband mobile phone network connection, an optical network connection, or other similar connections. For example, the connection113can also be implemented using a fixed wireless connection that operates in accordance with, but is not limited to, 3rd Generation Partnership Project (3GPP) Long Term Evolution (LTE) or 5G protocols. It is also contemplated by the present disclosure that connection113is capable of providing connections between the network device102and a WAN, a LAN, a VPN, MANs, PANs, WLANs, SANs, a DOCSIS network, a fiber optics network (e.g., FTTH, FTTX, or HFC), a PSDN, a global Telex network, or a 2G, 3G, 4G or 5G network, for example.

The network device102can be, for example, a hardware electronic device that may be a combination modem and gateway device that combines the functions of a modem, an access point, and/or a router for providing content received from the content provider (e.g., ISP101) to network devices (e.g., wireless extenders103and client devices104,105) in the system. It is also contemplated by the present disclosure that the network device102can include the function of, but is not limited to, an Internet Protocol/Quadrature Amplitude Modulator (IP/QAM) set-top box (STB) or smart media device (SMD) that is capable of decoding audio/video content, and playing over-the-top (OTT) or multiple system operator (MSO) provided content.

The connections109between the network device102, the wireless extenders103, and client devices104,105can be implemented using a wireless connection in accordance with any IEEE 802.11 Wi-Fi protocols, Bluetooth protocols, Bluetooth Low Energy (BLE), or other short range protocols that operate in accordance with a wireless technology standard for exchanging data over short distances using any licensed or unlicensed band such as the citizens broadband radio service (CBRS) band, 2.4 GHz bands, 5 GHz bands, or 6 GHz bands. Additionally, the connections109can be implemented using a wireless connection that operates in accordance with, but is not limited to, RF4CE protocol, ZigBee protocol, Z-Wave protocol, or IEEE 802.15.4 protocol. It is also contemplated by the present disclosure that the connections109can include connections to a media over coax (MoCA) network. One or more of the connections109can also be a wired Ethernet connection.

The wireless extenders103can be, for example, hardware electronic devices such as access points used to extend the wireless network by receiving the signals transmitted by the network device102and rebroadcasting the signals to, for example, client devices104,105, which may out of range of the network device102. The wireless extenders103can also receive signals from the client devices104,105and rebroadcast the signals to the network device102, or other client devices104,105.

The connections111between the wireless extenders103and the client devices104,105are implemented through a wireless connection that operates in accordance with any IEEE 802.11 Wi-Fi protocols, Bluetooth protocols, Bluetooth Low Energy (BLE), or other short range protocols that operate in accordance with a wireless technology standard for exchanging data over short distances using any licensed or unlicensed band such as the CBRS band, 2.4 GHz bands, 5 GHz bands, or 6 GHz bands. Additionally, the connection111can be implemented using a wireless connection that operates in accordance with, but is not limited to, RF4CE protocol, ZigBee protocol, Z-Wave protocol, or IEEE 802.15.4 protocol. Also, one or more of the connections111can be a wired Ethernet connection.

The client devices104,105can be, for example, hand-held computing devices, personal computers, electronic tablets, smart phones, smart speakers, IoT devices, iControl devices, portable music players with smart capabilities capable of connecting to the Internet, cellular networks, and interconnecting with other devices via Wi-Fi and Bluetooth, or other wireless hand-held consumer electronic devices capable of executing and displaying content received through the network device102. Additionally, the client devices104,105can be a TV, an IP/QAM STB or an SMD that is capable of decoding audio/video content and playing over OTT or MSO provided content received through the network device102.

The connection109between the network device102and the client device104is implemented through a wireless connection that operates in accordance with, but is not limited to, any IEEE 802.11 protocols. Additionally, the connection109between the network device102and the client device104can also be implemented through a WAN, a LAN, a VPN, MANs, PANs, WLANs, SANs, a DOCSIS network, a fiber optics network (e.g., FTTH, FTTX, or HFC), a PSDN, a global Telex network, or a 2G, 3G, 4G or 5G network, for example.

The connection109can also be implemented using a wireless connection in accordance with Bluetooth protocols, Bluetooth Low Energy (BLE), or other short range protocols that operate in accordance with a wireless technology standard for exchanging data over short distances using any licensed or unlicensed band such as the CBRS band, 2.4 GHz bands, 5 GHz bands, or 6 GHz bands. One or more of the connections10can also be a wired Ethernet connection.

A detailed description of the exemplary internal components of the network device102, the wireless extenders103, and the client devices104,105shown inFIG.1will be provided in the discussion ofFIG.2. However, in general, it is contemplated by the present disclosure that the network device102, the wireless extenders103, and the client devices104,105include electronic components or electronic computing devices operable to receive, transmit, process, store, and/or manage data and information associated with the system, which encompasses any suitable processing device adapted to perform computing tasks consistent with the execution of computer-readable instructions stored in a memory or a computer-readable recording medium.

Further, any, all, or some of the computing components in the network device102, the wireless extenders103, and the client devices104,105may be adapted to execute any operating system, including Linux, UNIX, Windows, MacOS, DOS, and ChromOS as well as virtual machines adapted to virtualize execution of a particular operating system, including customized and proprietary operating systems. The network device102, the wireless extenders103, and the client devices104,105are further equipped with components to facilitate communication with other computing devices over the one or more network connections to local and wide area networks, wireless and wired networks, public and private networks, and any other communication network enabling communication in the system.

Client device105is shown as being new and needs to join the network through network device102. The network device102receives a request for access by the client device to a local area network (LAN) graphical user interface (GUI). If the network becomes congested, client device105may already be connected to the network and may want to login to the LAN GUI to determine the source of the network congestion. Network device102analyzes a LAN GUI access whitelist115and determines whether a media access control (MAC) address of the client device105is in the LAN GUI access whitelist115. The network device102controls access by the client device105to the LAN GUI based on determining whether the media access control (MAC) address of the client device105is in the LAN GUI access whitelist115.

If the MAC address of the client device105is in the LAN GUI access whitelist115, the client device105is granted access to the LAN GUI without the client device105providing a password. If the MAC address of the client device105is not in the LAN GUI access whitelist115, the client device105is directed to a login page for entering a password to access the LAN GUI. A page is presented to add the MAC address of the client device105to the LAN GUI access whitelist115based on the client device having access to the LAN GUI. The network device102receives the password entered by the client device105on the login page.

FIG.2illustrates a system block diagram200that provides access to a local area network (LAN) graphical user interface (GUI) without requiring a password.

InFIG.2, client devices210,230,232are shown in a LAN240. Client device210includes a processor212and memory214. An authentication manager216is provided for authenticating client device210with network device270. Network device270is positioned between the LAN side240and wide area network side260. The network device270may be a gateway, router, modem, access point (AP), etc. The network device270provides access by client devices210,230,232to the Internet Service Provider (ISP)250. The ISP250provides the client devices210,230,232access to the Internet252.

Returning to client device210, a network interface218. Network interface218is the point of interconnection between client device210and network device270. Network interface218may be implemented using a network interface card (NIC). Alternatively, the network interface218can be implemented as a processor, and the software/instructions for implementing network interface218may be stored in memory214.

The client device has a media access control (MAC) address220. MAC address220is a unique identifier assigned to a network interface218for use as a network address in communications within a network segment. Each of client devices210,230,232include a unique basic service set identifier (BSSID), which is the MAC address220, at least until a user changes the MAC address. Within the Open Systems Interconnection (OSI) network model, MAC address220is used in the medium access control protocol sublayer of the data link layer. As typically represented, the MAC address220is a recognizable series of hexadecimal digits, separated by hyphens, colons, or without a separator. The MAC address220is primarily assigned by a device manufacturer. The MAC address220can be stored in hardware, such as a network interface218or in memory214. Network interfaces, however, may support changing the MAC address220.

Client device210may include a display device222that presents the LAN GUI224to the user for controlling the configuration of the network device270and to view data associated with the network device270. LAN GUI224presents network information226. For example, LAN GUI224may initially presents a factory default configuration that allows access the Internet252after installation. The LAN GUI allows the user to change network information226, which may include the default login password, the default wireless network name (Service Set Identifier (SSID), the Wireless LAN default security setting (e.g., the encryption method, the network key, and a Wi-Fi Protected Setup (WPS) PIN). Network information226may also include network configuration parameters, network statistics, etc.

Network device270includes processor272, network interface274, authentication and authorization controller276, and memory280. Authentication and authorization controller276uses a LAN GUI access whitelist278to determine if a client device210may access the LAN GUI instructions282without providing a password. Processor272of network device270uses authentication and authorization component276to analyze LAN GUI access whitelist278to determine whether the client device210is in the LAN GUI access whitelist278.

Memory280stores instructions for implementing the LAN GUI instructions282. Client devices210,230,232communicate with each other and with network device270using a LAN side communication network290. LAN side communication network290may be a wired network or a wireless network. Network device270communications with ISP250using a WAN side communication network292. WAN side communication network292may also be a wired network or a wireless network. ISP250access the Internet252using a high-speed communication network294, such as a fiber optic network.

FIG.3illustrates a whitelist control user interface300.

InFIG.3, whitelist control user interface300provides an entry area310where a user may enter a MAC address of client device and add to the LAN GUI whitelist. The whitelist control user interface300allows the MAC address of the client device to be changed from a MAC address assigned by a device manufacturer to a new MAC address.

FIG.4illustrates a login page400.

Login page400allows the user to enter a LAN GUI access password in an area410that the user selects to enter the password. When the user enters the correct password in area410, the user is allowed to access the LAN GUI. Referring toFIG.2, the user may then access the LAN GUI224to view network information226, which may include the default login password, the default wireless network name (Service Set Identifier (SSID), the Wireless LAN default security setting (e.g., the encryption method, the network key, and a Wi-Fi Protected Setup (WPS) PIN)). Network information226may also include network configuration parameters, network statistics, etc. The LAN GUI224may also allow the client device210to modify the password.

FIG.5illustrates a password interface500.

InFIG.5, password interface500presents the LAN GUI password510. The LAN GUI password510is entered to determine if the client device will be granted access to the LAN GUI. However, entry of the password510is not needed if the client device is in the LAN GUI access whitelist. The client device105is granted access to the LAN GUI without providing the password510. If the client device105is not in the LAN GUI access whitelist115, then the client device105is directed to a login page for entering the password510to access the LAN GUI.

WhileFIGS.3-5show separate pages for whitelist control, login, and for password display, different aspects described herein may be combined in a single user interface.

FIG.6is a flow chart of a method600for controlling access to the LAN GUI without requiring the user to enter a password. The flow chart ofFIG.6is an algorithm representing instructions that are executed by the processor of the device.

InFIG.6, method600starts (S602), and client device MAC addresses for client devices having access to the LAN GUI are added to the LAN GUI access whitelist (S610). For example, returning toFIG.2, client device210includes MAC address220. Each of client devices210,230,232include a unique basic service set identifier (BSSID), which is the MAC address220, at least until a user changes the MAC address. The MAC address220is primarily assigned by a device manufacturer. The MAC address220can be stored in hardware, such as a network interface218or in memory214. Network interfaces, however, may support changing the MAC address220. Referring toFIG.3, a whitelist control user interface300provides an entry area310where a user may enter a MAC address of a client device that is added to the LAN GUI access whitelist. The whitelist control user interface300allows the MAC address of the client device to be changed from a MAC address assigned by a device manufacturer to a new MAC address.

Returning toFIG.6, a determination is made whether the MAC address of the client device requesting LAN GUI access is in the LAN GUI access whitelist (S612). Returning toFIG.2, for example, the authentication and authorization component278of the network device270analyzes the LAN GUI access whitelist278. Returning back toFIG.6, when the MAC address of the client device that is requesting LAN GUI access is not in the LAN GUI access whitelist (S614), the client device is redirected to a login page for entering the LAN GUI access password (S616). A login page for entering LAN GUI access password is displayed (S618). Referring toFIG.4, a login page400is shown having an area410for entering a password.

A determination is made whether the correct password was entered successfully (S620). When the correct password was not entered successfully (S622), access by the client device to the LAN GUI is denied (S624). When the correct password was entered successfully (S626), access to the LAN GUI by the client device is granted and the LAN GUI is display on client device (S628). Returning toFIG.2, for example, client device210includes a display device222for presenting the LAN GUI224. Network device270includes LAN GUI instructions282in memory280for providing the LAN GUI224for presentation by display device222. Returning toFIG.6, when the MAC address of the client device requesting LAN GUI access is in the LAN GUI access whitelist (S630), the client device is granted access to the LAN GUI without entering password (S632). The LAN GUI is then displayed (S634). For example, as described with reference toFIG.2, processor272of network device270uses authentication and authorization component276to analyze LAN GUI access whitelist278to determine whether the client device210is in the LAN GUI access whitelist278.

After the LAN GUI is displayed (S634), or after access to the LAN GUI by the client device is granted and the LAN GUI is display on client device (S628), a determination is made whether the client device selects to view LAN GUI access password (S636). When the client device selects to view the LAN GUI access password (S638), the client device is presented a page displaying LAN GUI access password (S640). Returning toFIG.5, a page500is shown that identifies the LAN GUI password510. When the client device does not select to view the LAN GUI access password (S642), the client device may access network information using the LAN GUI (S648). With reference toFIG.2, client device210presents the LAN GUI224on display device222. LAN GUI224may present network information226, which may include the default login password, the default wireless network name (Service Set Identifier (SSID), the Wireless LAN default security setting (e.g., the encryption method, the network key, and a Wi-Fi Protected Setup (WPS) PIN)). Network information226may also include network configuration parameters, network statistics, etc. Returning toFIG.6, the method600then ends (S650).

Embodiments may be provided as a computer program product including one or more non-transitory computer-readable storage media having stored thereon instructions (in compressed or uncompressed form) that may be used to program a computer (or other electronic device) to perform processes or methods described herein. The computer-readable storage media may include one or more of an electronic storage medium, a magnetic storage medium, an optical storage medium, a quantum storage medium, or the like. For example, the computer-readable storage media may include, but are not limited to, hard drives, floppy diskettes, optical disks, read-only memories (ROMs), random access memories (RAMs), erasable programmable ROMs (EPROMs), electrically erasable programmable ROMs (EEPROMs), flash memory, magnetic or optical cards, solid-state memory devices, or other types of physical media suitable for storing electronic instructions. Further, embodiments may also be provided as a computer program product including a transitory machine-readable signal (in compressed or uncompressed form). Examples of machine-readable signals, whether modulated using a carrier or unmodulated, include, but are not limited to, signals that a computer system or machine hosting or running a computer program may be configured to access, including signals transferred by one or more networks. For example, a transitory machine-readable signal may comprise transmission of software by the Internet.