Systems and methods for detecting access point impersonators
AssigneeCisco Technology, Inc.
InventorsVishal Satyendra Desai, Jerome Henry
Life of this patent
Estimating the term…
Loading patent…
AssigneeCisco Technology, Inc.
InventorsVishal Satyendra Desai, Jerome Henry
Estimating the term…
The present disclosure is related to systems and methods for detecting and disabling operations of access point impersonators in a network. In one aspect, a method includes receiving, at a network controller of a network, beacon reports from a plurality of access points; determining, by the network controller, one or more target areas with at least one potential access point impersonator operating therein; sending, by the network controller, on-demand beacon requests to one or more of the plurality of access points with corresponding coverage areas overlapping with the one or more target areas; receiving, at the network controller, responses to the on-demand beacon requests from the one or more of the plurality of access points; and determining, by the network controller, at least one access point impersonator based on the responses.
A method comprising:
A network controller of a network, comprising:
One or more non-transitory computer-readable media comprising computer-readable instructions, which when executed by one or more processors of a network controller of a network, cause the one or more processors to:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Detection or prevention of fraud: wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
Integrity: source integrity
Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]: counter-measures against attacks; Protection against…
Wireless communication networks
About 12 years 10 months of term left · ends 19 Aug 2039 (estimated)
The subject matter of this disclosure relates in general to the field of computer networking, and more particularly, to systems and methods for improving the operation of an enterprise network by detecting access point impersonators.
A campus network can provide connectivity to computing devices (e.g., servers, workstations, desktop computers, laptop computers, tablets, mobile phones, etc.) and things (e.g., desk phones, security cameras, lighting, heating, ventilating, and air-conditioning (HVAC), windows, doors, locks, medical devices, industrial and manufacturing equipment, etc.) within environments such as offices, hospitals, colleges and universities, oil and gas facilities, factories, and similar locations.
Presence of access point impersonators/rogue access points (e.g., Wi-Fi impersonators) within coverage area of access points of an enterprise network, present security issues where such impersonators can steal personal and confidential data (e.g., usernames, passwords, MAC addresses, etc.) of client devices connected to access points, in coverage area of which the impersonators operate.
To provide a more complete understanding of the present disclosure and features and advantages thereof, reference is made to the following description, taken in conjunction with the accompanying drawings, in which:
FIG. 1 illustrates an example of a physical topology of an enterprise network, according to an aspect of the present disclosure;
FIG. 2 illustrates an example structure of a setting in which an enterprise network of FIG. 1 are deployed and access point impersonators are present, according to an aspect of the present disclosure;
Various example embodiments of the disclosure are discussed in detail below. While specific implementations are discussed, it should be understood that this is done for illustration purposes only. A person skilled in the relevant art will recognize that other components and configurations may be used without parting from the spirit and scope of the disclosure. Thus, the following description and drawings are illustrative and are not to be construed as limiting. Numerous specific details are described to provide a thorough understanding of the disclosure. However, in certain instances, well-known or conventional details are not described in order to avoid obscuring the description. References to one or an embodiment in the present disclosure can be references to the same embodiment or any embodiment; and, such references mean at least one of the embodiments.
Reference to “one embodiment” or “an embodiment” means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the disclosure. The appearances of the phrase “in one embodiment” in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. Moreover, various features are described which may be exhibited by some embodiments and not by others.
Without intent to limit the scope of the disclosure, examples of instruments, apparatus, methods and their related results according to example embodiments of the present disclosure are given below. Note that titles or subtitles may be used in the examples for convenience of a reader, which in no way should limit the scope of the disclosure. Unless otherwise defined, technical and scientific terms used herein have the meaning as commonly understood by one of ordinary skill in the art to which this disclosure pertains. In the case of conflict, the present document, including definitions will control.