# US 2018/0324200 A1 · Method for blocking connection in wireless intrusion prevention system and device therefor > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0324200 A1 - Document ID: US20180324200A1 - Status: Published application - Kind: A1 - Application number: 15/775,185 - Filed: 2016-11-28 - Published: 2018-11-08 - Earliest claimed: 2015-11-27 - Assignees: Samsung Electronics Co., Ltd. - Applicants: Samsung Electronics Co., Ltd. - Inventors: Daesung CHOI; Sungjun PARK; Chulhoon HWANG - Web page: https://patentgrep.com/patent/US20180324200A1 ## CPC - H04W 12/122: Counter-measures against attacks; Protection against rogue devices - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/1491: {using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment} - H04W 12/08: Access security - H04W 12/088: using filters or firewalls - H04W 12/12: Detection or prevention of fraud - H04W 24/08: Testing, {supervising or monitoring} using real traffic - H04W 48/08: Access restriction or access information delivery, e.g. discovery data delivery (signalling during connection H04W76/00) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The present disclosure relates to a method for blocking the connection of an electronic device inside a wireless intrusion prevention system, the method comprising the steps of: successively monitoring wireless frames in a plurality of channels through a first communication module; generating a first blocking message on the basis of at least one wireless frame received as a result of the monitoring and generating a second blocking message on the basis of a first wireless frame, to which a predetermined wireless network technology has been applied, among the at least one wireless frame; and transmitting at least one of the first and second blocking messages through a second communication module. The present disclosure is not limited to the above embodiment, and other embodiments are also possible. ## Claims ### Claim 1 An access blocking method of an electronic device within a wireless intrusion prevention system, comprising: sequentially monitoring wireless frames in a plurality of channels through a first communication module; generating a first blocking message based on at least one wireless frame received as results of the monitoring and generating a second blocking message based on a first wireless frame belonging to the at least one wireless frame and to which a given wireless network technology has been applied; and transmitting at least one of the first and the second blocking messages through a second communication module. ### Claim 2 (depends on 1) The access blocking method of claim 1, wherein the monitoring of the wireless frames comprises dynamically allocating a channel belonging to the plurality of channels and through which the first wireless frame has been transmitted additionally for the monitoring. ### Claim 3 (depends on 1) The access blocking method of claim 1, wherein the generating of the first blocking message comprises: determining whether a policy for the at least one wireless frame has been violated based on policy information and a blocking list; and generating a first blocking message for a wireless frame belonging to wireless frames determined to have violated the policy and excluding the first wireless frame. ### Claim 4 (depends on 1) The access blocking method of claim 1, wherein the generating of the second blocking message comprises: generating a fake beacon message having a characteristic different from a characteristic of a beacon message if the first wireless frame is the beacon message and a policy application related to the given wireless network has been activated; and generating policy violation expectation information for the first wireless frame if the first wireless frame is the beacon message and the policy application related to the given wireless network has not been activated and generating the fake beacon message based on the expectation information when the policy application related to the given wireless network is subsequently activated. ### Claim 5 (depends on 1) The access blocking method of claim 1, wherein the generating of the second blocking message comprises: generating the second blocking message if the first wireless frame is a probe message and a policy application related to the given wireless network has been activated; and generating policy violation expectation information for the first wireless frame if the first wireless frame is the probe message and the policy application related to the given wireless network has not been activated and generating the second blocking message based on the expectation information when the policy application related to the given wireless network is subsequently activated. ### Claim 6 (depends on 1) The access blocking method of claim 1, further comprising receiving policy information and a blocking list related to wireless intrusion prevention from a server. ### Claim 7 (depends on 1) The access blocking method of claim 1, wherein the given wireless network applies a given security technology to the wireless frame or the given wireless network comprises IEEE 802.11w. ### Claim 8 An electronic device within a wireless intrusion prevention system, comprising: a first communication module; a second communication module; and a controller configured to control to: sequentially monitor wireless frames in a plurality of channels through the first communication module and to control to generate a first blocking message based on at least one wireless frame received as results of the monitoring, generate a second blocking message based on a first wireless frame belonging to the at least one wireless frame and to which a given wireless network technology has been applied, and transmit at least one of the first and the second blocking messages through the second communication module. ### Claim 9 (depends on 8) The electronic device of claim 8, wherein the controller is configured to control to dynamically allocate a channel belonging to the plurality of channels and through which the first wireless frame has been transmitted additionally for the monitoring. ### Claim 10 (depends on 8) The electronic device of claim 8, wherein the controller is configured to control to: determine whether a policy for the at least one wireless frame has been violated based on policy information and a blocking list, and generate a first blocking message for a wireless frame belonging to wireless frames determined to have violated the policy and excluding the first wireless frame. ### Claim 11 (depends on 8) The electronic device of claim 8, wherein the controller is configured to control to: generate a fake beacon message having a characteristic different from a characteristic of a beacon message if the first wireless frame is the beacon message and a policy application related to the given wireless network has been activated, and generate policy violation expectation information for the first wireless frame if the first wireless frame is the beacon message and the policy application related to the given wireless network has not been activated and generate the fake beacon message based on the expectation information when the policy application related to the given wireless network is subsequently activated. ### Claim 12 (depends on 8) The electronic device of claim 8, wherein the controller is configured to control to: generate the second blocking message if the first wireless frame is a probe message and a policy application related to the given wireless network has been activated; and generate policy violation expectation information for the first wireless frame if the first wireless frame is the probe message and the policy application related to the given wireless network has not been activated and generate the second blocking message based on the expectation information when the policy application related to the given wireless network is subsequently activated. ### Claim 13 (depends on 8) The electronic device of claim 8, wherein the controller is configured to control to receive policy information and a blocking list related to wireless intrusion prevention from a server. ### Claim 14 (depends on 8) The electronic device of claim 8, wherein the given wireless network has applied a given security technology to the wireless frame. ### Claim 15 (depends on 8) The electronic device of claim 8, wherein the given wireless network comprises IEEE 802.11w.