US 12,538,129 B2Granted

Wireless intrusion prevention system using OUI and MAC

AssigneeSecui Corporation

InventorsMin Ki Son, Seok Ju Kang

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present disclosure relates to an electronic device, and a wireless intrusion prevention system according to the present disclosure may include a sensing device and a controller. The sensing device may be configured to monitor a wireless frame transmitted/received between an access point (AP) and a plurality of stations over a wireless network and generate frame analysis information based on the wireless frame. The controller may be configured to compare manufacturer identification information including Organizationally Unique Identifiers (OUIs) with Media Access Control (MAC) addresses of respective stations included in the frame analysis information, determine a target station having a random MAC address among the plurality of stations based on a result of the comparison, and control access to the access point by the target station based on a blocking policy.

Claims15

Dependent claims

A wireless intrusion prevention system, comprising:

a sensing device configured to monitor a wireless frame transmitted/received between an access point (AP) and a plurality of stations over a wireless network and generate frame analysis information based on the wireless frame, wherein the frame analysis information generated by the sensing device includes at least Media Access Control (MAC) addresses for respective stations in the wireless network;
and
a controller configured to
compare manufacturer identification information including Organizationally Unique Identifiers (OUIs) with the MAC addresses of the respective stations included in the frame analysis information, determine a target station having a random MAC address and an access-authorized station having a unique MAC address registered by an administrator by which a user is specified among the plurality of stations based on a result of the comparison,
block access to the access point by the target station having for the random MAC address a non-registered MAC address by which the user is not specified, and
allow access to the access point by the access-authorized station having the unique MAC address which the administrator has approved and registered and by which the user is specified.

3 more elements

A method of operating a Wireless Intrusion Prevention System (WIPS), the method comprising:

receiving a request to access an access point from a target station among a plurality of stations that transmit/receive a wireless frame to/from an access point over a wireless network;
determining whether a Media Access Control (MAC) address of the target station included in frame analysis information, provided to a controller of the WIPS from a sensing device monitoring wireless frames transmitted/received to/from the access point, is a random MAC address comprising a non-registered MAC address by which the user is not specified or a unique MAC address which is registered by an administrator by which a user is specified, based on a result of a comparison between manufacturer identification information including Organizationally Unique Identifiers (OUIs) and the MAC address of the target station;
and
blocking access to the access point by the target station when the MAC address of the target station is the random MAC address by which the user is not specified, and allowing access to the access point by the target station when the MAC address of the target station is the unique MAC address which the administrator has approved and registered and by which the user is specified.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 18/563,875Filed 5 Apr 2022
Priority: KR 10-2021-00718092 Jun 2021
Published: US 2024/0373228 A17 Nov 2024
Granted: 27 Jan 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04W 12/122
Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]: counter-measures against attacks; Protection against…
H04L 9/40
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: network security protocols
H04W 12/08
Security arrangements; Authentication; Protecting privacy or anonymity: access security
H04W 12/121
Detection or prevention of fraud: wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]