A method of granting access to a wireless network is provided allowing approval by a trusted authenticator. The method includes receiving a request to join a wireless network at a gateway from a client device, determining with the gateway whether the client device is within a predefined trusted zone, sending a notification of a potential new connection with the client device from the gateway to the trusted authenticator. The trusted authenticator then provides a response regarding the potential new connection, wherein the gateway denies network access to the client device when the gateway determines that the client device is outside the trusted zone or when the response from the trusted authenticator rejects the potential new connection, and wherein the gateway grants network access to the client device when the gateway determines that the client device is inside the trusted zone and when the response from the trusted authenticator approves the potential new connection.