Containing internet of things (iot) analytics poisoning on wireless local access networks (wlans)
AssigneeMeru Networks
InventorsAnil Kaushik, Naga Kishore Reddy Tarimala
Life of this patent
Estimating the term…
Abstract
An analytics containment system store RSSI values of connected stations and corresponding time stamps. If two or more stations have RSSI values within a certain proximity within a certain time period, a first condition for identifying analytics poisoning has been satisfied. Additionally, if RSSI values for the two or more stations changes at similar rate, the stations have satisfied a second optional condition.
Claims10
A computer-implemented method in an analytics server for containing analytics poisoning by identifying emulated stations on a WLAN, the method comprising the steps of:
- receiving analytics data from a plurality of stations along with RSSI (received signal strength indicator) measurements and time stamps for each data receipt;
- identifying RSSI values from at least two stations from the plurality of stations that are within a predetermined RSSI proximity threshold;
- tracking changes in RSSI values to determine whether the two stations have a change in RSSI values within a predetermined RSSI change proximity threshold;
- detecting RSSI changes for the at least two stations remaining within the predetermined RSSI proximity threshold;
- responsive to the RSSI changes detection, identifying analytics data received from the at least two stations;
- and
- perform an action on the identified analytics data.
A non-transitory computer-readable medium, storing instructions that, when executed by a processor, perform a method in an analytics server for containing analytics poisoning by identifying emulated stations on a WLAN, the method comprising the steps of:
- receiving analytics data from a plurality of stations along with RSSI (received signal strength indicator) measurements and time stamps for each data receipt;
- identifying RSSI values from at least two stations from the plurality of stations that are within a predetermined RSSI proximity threshold;
- tracking changes in RSSI values to determine whether the two stations have a change in RSSI values within a predetermined RSSI change proximity threshold;
- detecting RSSI changes for the at least two stations remaining within the predetermined RSSI proximity threshold;
- responsive to the RSSI changes detection, identifying analytics data received from the at least two stations;
- and
- perform an action on the identified analytics data.
An analytics server for containing analytics poisoning by identifying emulated stations on a WLAN, the analytics server comprising:
- a processor;
- a network interface;
- a memory;
- an analytics collection module, coupled in communication with the processor, to receive analytics data from a plurality of stations along with RSSI (received signal strength indicator) measurements and time stamps for each data receipt;
- an RSSI tracking module, coupled in communication with the processor and analytics collection module, the RSSI tracking module to identify RSSI values from at least two stations from the plurality of stations that are within a predetermined RSSI proximity threshold, the RSSI tracking module to track changes in RSSI values to determine whether the two stations have a change in RSSI values within a predetermined RSSI change proximity threshold, the RSSI tracking module to detect RSSI changes for the at least two stations remaining within the predetermined RSSI proximity threshold;
- and
- an analytics containment module, coupled in communication with the processor and the RSSI tracking module to, responsive to the RSSI changes detection, identify analytics data received from the at least two stations, the analytics containment module to perform an action on the identified analytics data.
Dependencies are inferred from the claim text.