Terminal device and method for identifying malicious AP by using same
AssigneeSamsung Electronics Co., Ltd.
InventorsJungil Cho, Soonhong Kwon, Hyunwoo Kim, Minkyu Song, Jongsung Lee, Joonghwan Lee, Yongsu Chung, Daesung Choi
Life of this patent
Estimating the term…
Abstract
A method of identifying a malicious access point (AP) by a terminal apparatus includes obtaining first performance information related to hardware of a first AP based on a first beacon signal received from the first AP, comparing the first performance information with previously stored second performance information of a second AP, and determining whether the first AP is a malicious AP, based on a result of the comparing.
Claims13
A method of identifying a malicious access point (AP) by a terminal apparatus, the method comprising:
- obtaining first information of a first AP based on a first beacon signal received from the first AP;
- comparing the first information with previously stored second information of a second AP predefined as a normal AP;
- and
- determining whether the first AP is a malicious AP, based on a result of the comparing,
- wherein the first information includes first timestamp information included in the first beacon signal and first receiving time information of the first beacon signal,
- wherein the second information includes second timestamp information included in a second beacon signal received from the second AP and second receiving time information of the second beacon signal, and
- wherein the determining of whether the first AP is a malicious AP comprises determining the first AP to be a malicious AP based on a difference value between the first timestamp information and the second timestamp information being different from a difference value between the first receiving time information and the second receiving time information.
A method of identifying a malicious access point (AP) by a terminal apparatus, the method comprising:
- predicting pieces of first time information on or after an (n+1)th beacon signal, based on pieces of first time information related to first beacon signals received from a first AP on or before an n-th beacon signal, where n is a natural number greater than 1;
- receiving first beacon signals from the first AP on or after the (n+1)th beacon signal;
- comparing the predicted pieces of first time information with pieces of first time information of the first beacon signals received on or after the (n+1)th beacon signal;
- and
- determining whether the first AP is a malicious AP, based on a result of the comparing,
- wherein the determining of whether the first AP is a malicious AP comprises determining whether the first AP is a malicious AP based on a tendency of difference values between the predicted pieces of first time information and the pieces of first time information of the first beacon signals received on or after the (n+1)th beacon signal according to time.
A terminal apparatus comprising:
- a memory storing one or more instructions;
- and
- a processor configured to execute the one or more instructions stored in the memory,
- wherein the processor is configured to:
- obtain first information of a first access point (AP) based on a first beacon signal received from the first AP;
- compare the first information with previously stored second information of a second AP;
- and
- determine whether the first AP is a malicious AP, based on a result of the comparing,
- wherein the first information includes first timestamp information included in the first beacon signal and first receiving time information of the first beacon signal,
- wherein the second information includes second timestamp information included in a second beacon signal received from the second AP and second receiving time information of the second beacon signal, and
- wherein the processor is further configured to determine whether the first AP is a malicious AP based on a difference value between the first timestamp information and the second timestamp information being different from a difference value between the first receiving time information and the second receiving time information.
Dependencies are inferred from the claim text.