Network security system, computer, access point recognizing method, access point checking method, program, storage medium, and wireless lan device
AssigneeInternational Business Machines Corporation
InventorsKAZUO FUJII, MASAHARU ITOH, KOZO MATSUNAGA
Life of this patent
Estimating the term…
Abstract
Abstract of the Disclosure In a network security system, clients search for neighbor access points (APs) in order to establish wireless connections to a LAN. As a result of the search, each of the clients dispatches a list of access points obtained to a controller. The controller detects non-registered access points by comparing a list of previously registered access points with the lists dispatched by the clients.
Claims18
Apparatus comprising:
- 1. a client permitted to establish a wireless connection to a network through an access point;
- and
- a controller permitted to receive data dispatched by said client, through said network,
- wherein said client scans electromagnetic waves within bands permitted to be used for wireless communication, and dispatches to said controller identification information on access points detected as a result of the scan, and
- said controller stores said identification information on access points permitted to access said network, and on the basis of the identification information on the permitted access points and said identification information dispatched by said client, extracts non-registered access points that are not registered as permitted access points.
Apparatus according toClaim 1, wherein said client dispatches to said controller said identification information on said access points not used for said wireless connection.
Apparatus according to Claim 1, wherein said client dispatches to said controller the intensities of signals received from said access points and, on the basis of said intensities, said controller estimates areas in which said non-registered access points are installed.
A computer permitted to communicate wirelessly with an access point connected to a network, comprising:
- 4. a recognizing section that recognizes identification information on access points on the basis of electromagnetic waves generated by the access points;
- a storage section that stores said identification information recognized by said recognizing section;
- and
- a dispatching section that dispatches through said network said identification information stored in the storage section.
The computer according toclaim 4, wherein said dispatching section dispatches identification information every predetermined time or in response to a request transmitted via said network.
A computer permitted to transmit and receive data via a network to and from a client permitted to be wirelessly connected to the network via an access point, the computer being further comprising;
- 6. a storage section storing a permission list of permitted access points permitted to access said network;
- a collecting section that collects a recognition list of recognized access points recognized by said client scanning electromagnetic waves within bands permitted to be used for wireless communication;
- and
- an extracting section that extracts those non-registered access points of said recognized access points included in said recognition list which are not included in said permission list on the basis of the permission list and the recognition list.
The computer according toclaim 6, further comprising:
- 7. an installed position information storage section that stores installed position information on said permitted access points in said network;
- a signal collecting section that collects the intensities of signals generated by said recognized access points;
- and
- a calculating section that calculates positions at which said non-registered access points are installed, on the basis of said intensities and said installed position information.
An access point recognizing method executed by a computer permitted to communicate wirelessly with access points connected to a network, comprising the steps of:
- 8. scanning electromagnetic waves within bands permitted to be used for wireless communication;
- obtaining a list of access points detected by said scan;
- and
- dispatching said list obtained, through said network.
The access point recognizing method according toClaim 8, further comprising the steps of:
- 9. obtaining the intensities of signals generated by said access points;
- and
- dispatching said intensities through said network.
A method of checking an access point connected to a network in order to connect a computer to the network by radio, comprising the steps of:
- 10. obtaining a permission list of access points permitted to access said network;
- obtaining a detection list of access points recognized by said computer;
- and
- comparing said permission list with said detection list to recognize those non-registered access points of said access points included in the detection list which are not included in the permission list.
The access point checking method according toClaim 10, further comprising the steps of:
- 11. registering positions at which said access points included in said permission list are installed;
- obtaining the intensities of signals from said access points detected by scan carried out by the computer;
- and
- calculating positions at which said non-registered access points are installed, on the basis of said intensities.
A program executed by a computer permitted to communicate wirelessly with access points connected to a network, comprising:
- 12. a procedure of scanning electromagnetic waves within bands permitted to be used for wireless communication;
- a procedure of recording a list of access points detected by said scan;
- and
- a procedure of dispatching said list through said network.
The program executed by a computer according toClaim 12, further comprising:
- 13. a procedure of obtaining the intensities of vibration occurring at said access points;
- and
- a procedure of dispatching said intensities through said network.
A program for checking an access point connected to a network in order to connect a computer to the network by radio, comprising:
- 14. a procedure of obtaining a permission list of access points permitted to access said network;
- a procedure of obtaining a detection list of access points recognized by said computer;
- and
- a procedure of comparing said permission list with said detection list to recognize those non-registered access points of said access points included in the detection list which are not included in the permission list.
The program executed by a computer according to Claim 14, further comprising:
- 15. a procedure of registering positions at which said access points included in said permission list are installed;
- a procedure of obtaining the intensities of signals from said access points detected by scan carried out by the computer;
- and
- a procedure of calculating positions at which said non-registered access points are installed, on the basis of said intensities.
A storage medium storing a program executed by a computer permitted to communicate wirelessly with access points connected to a network, the storage medium being wherein the program can be read by the computer, and the program allows said computer to carry out:
- 16. a function of scanning electromagnetic waves within bands permitted to be used for wireless communication;
- a function of recording a list of access points detected by said scan;
- and
- a function of dispatching said list through said network.
A storage medium storing a program for checking an access point connected to a network in order to connect a computer to the network by wireless LAN wherein the program can be read by the computer, and the program allows said computer to carry out:
- 17. a function of obtaining a permission list of access points permitted to access said network;
- a function of obtaining a detection list of access points recognized by said computer;
- and
- a function of comparing said permission list with said detection list to recognize those non-registered access points of said access points included in the detection list which are not included in the permission list.
A wireless LAN device that can be installed into a computer to transmit and receive data to and from a network via a wireless LAN, comprising:
- 18. a scan section that carries out scan to search for an access point;
- an ID recording section that records the ID of said access point detected by said scan section;
- and
- a dispatching section that dispatches to said network said ID recorded in said recording section.
Dependencies are inferred from the claim text.