Sensing device, wireless intrusion prevention system comprising sensing device, and method for operating same

An operating method of a sensing device for monitoring connection between an access point and a plurality of stations, the operating method comprising:

• storing a block template in a wireless intrusion prevention system (WIPS) for the access point, which is used to create a wireless communication message by the WIPS to block connection between a target station among the plurality of stations and the access point;
• receiving the block template to be revised by inserting information;
• obtaining a message transmitted by the target station to the access point, and determining based on the message whether the target station is a station included in a list of targets to be blocked provided from a server;
• and
• transmitting, to the target station, a block message (fake beacon) with an address of the access point and a channel switching request command to request switching of a channel on which the target station and the access point communicate inserted to the block template, without having to determine whether the message transmitted by the target station corresponds to a 802.11w connection, whether a frequency band of a reproduced wireless communication message of the access point is 2.4 GHZ, and without having to create a different channel switching request command for each frequency band.

A sensing device for monitoring connection between an access point and a plurality of stations, the sensing device comprising:

• a template memory of a wireless intrusion prevention system (WIPS) for the access point, configured to store a block template which is used to create a wireless communication message by the WIPS to block connection between the plurality of stations and the access point;
• and
• a sensing transceiver configured to obtain a message transmitted or received by the plurality of stations and the access point, configured to receive the block template from the template memory to be revised by inserting information, and as a result of analyzing the message, when the access point is an access point included in a list of targets to be blocked provided from a server, transmit, to the plurality of stations, block messages (fake beacons) with an address of the access point, an address of each of the plurality of stations and a channel switching request command to request switching a channel on which the plurality of stations and the access point communicate inserted to the block template, without having to determine whether the message transmitted or received by the plurality of stations and the access point corresponds to a 802.11w connection, whether a frequency band of a reproduced wireless communication message of the access point is 2.4 GHZ, and without having to create a different channel switching request command for each frequency band.