# US 11,451,552 B2 · Basic service set (BSS) color-based containment and mitigation > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,552 B2 - Document ID: US11451552B2 - Status: Granted - Kind: B2 - Application number: 16/892,939 - Filed: 2020-06-04 - Published: 2021-12-09 - Granted: 2022-09-20 - Earliest claimed: 2020-06-04 - Assignees: Hewlett Packard Enterprise Development LP - Applicants: Hewlett Packard Enterprise Development LP - Inventors: Andre Beaudin; Shubham Saloni; Eloy Jr Galdones; Sachin Ganu; Qiang Zhou; Denis Houle - Web page: https://patentgrep.com/patent/US11451552B2 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - H04W 24/02: Arrangements for optimising operational condition - H04W 12/08: Access security - H04W 12/61: Time-dependent - H04W 12/73: Access point logical identity - H04W 16/02: Resource partitioning among network components, e.g. reuse partitioning - H04W 24/08: Testing, {supervising or monitoring} using real traffic - H04W 24/04: Arrangements for maintaining operational condition - H04W 24/10: Scheduling measurement reports {; Arrangements for measurement reports} - H04W 84/12: WLAN [Wireless Local Area Networks] - H04W 88/08: Access point devices - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Operation of a wireless network access point (AP) to communicate with a first set of one or more wireless client devices using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable basic service set (BSS) identifier of the wireless AP. The BSS identifier is utilized to identify overlapping BSSs (OBSSs). A first set of one or more wireless client devices communicate using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable BSS identifier of the wireless AP. The BSS identifier is utilized to identify OBSSs. Unauthorized network activity is detected based on the BSS identifier and a received BSS identifier associated with the received transmissions. A dynamic adjustment is made to one of the BSS identifiers of the AP or the received BSS identifier in response to detected unauthorized network activity. ## Claims ### Claim 1 A wireless network access point (AP) to communicate with a first set of one or more wireless client devices, the wireless AP comprising: a memory device; a wireless network interface; a hardware processor coupled with the memory device and the wireless network interface, the hardware processor to receive transmissions via the wireless network interface using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable basic service set (BSS) identifier of the wireless AP, wherein the BSS identifier is utilized to identify overlapping BSSs (OBSSs), the hardware processor further to detect unauthorized network activity based on one or more BSS identifiers associated with the received transmissions and historical characteristics associated with the received one or more BSS identifiers, and, in response to detected unauthorized network activity, to either cause a dynamic adjustment to the BSS identifier of the wireless AP or trigger a change in a remote AP associated with a BSS identifier of the remote AP, wherein triggering a change in the remote AP associated with the BSS identifier of the remote AP comprises: causing the wireless network AP to convert from an AP mode to a STA mode; causing the wireless network AP connect to the remote AP in the STA mode to send a STA collision report to cause the remote AP to move to change BSS identifiers. ### Claim 2 (depends on 1) The wireless network AP of claim 1 wherein the unauthorized network activity is determined based on a number of traffic BSS identifier collisions detected within a pre-selected period of time. ### Claim 3 (depends on 1) The wireless network AP of claim 1 wherein the unauthorized network activity is determined based on a number of collision reports from a wireless client device within a pre-selected period of time. ### Claim 4 (depends on 3) The wireless network AP of claim 3 wherein the hardware processor blocks the wireless client device in response to the number of collision reports from the wireless client device exceeding a pre-selected threshold within the pre-selected period of time. ### Claim 5 (depends on 1) The wireless network AP of claim 1 wherein the hardware processor stores the historical characteristics associated with the received one or more BSS identifiers in the memory device to be utilized in a multi-level analysis to detect the unauthorized network activity. ### Claim 6 (depends on 1) The wireless network AP of claim 1 wherein the hardware processor further functions to extend a collision detection period in response to a BSS identifier indicating OBSSs. ### Claim 7 A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processors in wireless network access point (AP) to: communicate with a first set of one or more wireless client devices using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable basic service set (BSS) identifier of the wireless AP, wherein the BSS identifier is utilized to identify overlapping BSSs (OBSSs); detect unauthorized network activity based on one or more BSS identifiers associated with the received transmissions and historical characteristics associated with the received one or more BSS identifiers; and in response to detected unauthorized network activity, cause either a dynamic adjustment to the BSS identifier of the wireless AP or trigger a change in a remote AP associated with a BSS identifier of the remote AP, wherein triggering the change in the remote AP associated with the BSS identifier of the remote AP comprises: causing the wireless network AP to convert from an AP mode to a STA mode; causing the wireless network AP connect to the remote AP in the STA mode to send a STA collision report to cause the remote AP to move to change BSS identifiers. ### Claim 8 (depends on 7) The non-transitory computer-readable medium of claim 7 wherein the unauthorized network activity is determined based on a number of traffic BSS identifier collisions detected within a pre-selected period of time. ### Claim 9 (depends on 7) The non-transitory computer-readable medium of claim 7 wherein the unauthorized network activity is determined based on a number of collision reports from a wireless client device within a pre-selected period of time. ### Claim 10 (depends on 9) The non-transitory computer-readable medium of claim 9 further comprising blocking the wireless client device in response to the number of collision reports from the wireless client device exceeding a pre-selected threshold within the pre-selected period of time. ### Claim 11 (depends on 7) The non-transitory computer-readable medium of claim 7 further comprising instructions that, when executed by the one or more processors, cause the one or more processors to store the historical characteristics associated with the received one or more BSS identifiers in the memory device to be utilized in a multi-level analysis to detect the unauthorized network activity. ### Claim 12 (depends on 11) The non-transitory computer-readable medium of claim 11 further comprising instructions that, when executed by the one or more processors, cause the one or more processors to extend a collision detection period in response to a BSS identifier indicating OBSSs. ### Claim 13 A method for operating a wireless network access point (AP), the method comprising: communicating with a first set of one or more wireless client devices using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable basic service set (BSS) identifier of the wireless AP, wherein the BSS identifier is utilized to identify overlapping BSSs (OBSSs); detecting unauthorized network activity based on one or more BSS identifiers associated with the received transmissions and historical characteristics associated with the received one or more BSS identifiers; and causing either a dynamic adjustment to the BSS identifier of the wireless AP or trigger a change in a remote AP associated with a BSS identifier of the remote AP in response to detected unauthorized network activity, wherein triggering the change in the remote AP associated with the BSS identifier of the remote AP further comprises: causing the wireless network AP to convert from an AP mode to a STA mode; causing the wireless network AP connect to the remote AP in the STA mode to send a STA collision report to cause the remote AP to move to change BSS identifiers. ### Claim 14 (depends on 13) The method of claim 13 wherein the unauthorized network activity is determined based on a number of traffic BSS identifier collisions detected within a pre-selected period of time. ### Claim 15 (depends on 13) The method of claim 13 wherein the unauthorized network activity is determined based on a number of collision reports from a wireless client device within a pre-selected period of time. ### Claim 16 (depends on 15) The method of claim 15 further comprising blocking the wireless client device in response to the number of collision reports from the wireless client device exceeding a pre-selected threshold within the pre-selected period of time. ### Claim 17 (depends on 13) The method of claim 13 further comprising causing the one or more processors to extend a collision detection period in response to a BSS identifier indicating OBSSs.