Wireless communications access security system and method

An apparatus for wireless communications access security, the apparatus comprising:

• a computer processor of a client device remote from a server computer;
• a function receiver, implemented on said computer processor of the client device, configured to receive at least one reference set of values from the server computer, each one of the received reference sets pertaining to a respective access point and defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication of the client device with the access point;
• a parameter measurer, implemented on said computer processor of the client device, configured to extract at least one value based on measurement of the at least one parameter during the wireless communication of the client device with the access point when active, the active access point being an access point that is administrated by a party other than a user of the client device;
• and
• a threat determiner, implemented on said computer processor of the client device, in communication with said parameter measurer, configured to detect a deviation of at least one of the at least one extracted value from at least one of the at least one expected value defined by the respective one of the received reference sets of values pertaining to the active access point that the client device is in communication with;
• and based on the detected deviation, to carry out at least one step of the group consisting of:
• alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point.

A non-transitory computer readable medium storing computer processor executable instructions for performing steps of wireless communications access security on a client device remote from a server computer, the steps comprising:

• by the client device, receiving at least one reference set of values from the server computer, each one of the received reference sets pertaining to a respective access point and defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication of the client device with the access point;
• by the client device, extracting at least one value based on measurement of the at least one parameter during the wireless communication of the client device with the access point when active, the active access point being an access point that is administrated by a party other than a user of the client device;
• and
• by the client device, detecting a deviation of at least one of the at least one extracted value from at least one of the at least one expected value defined by the respective one of the received reference sets of values pertaining to the active access point that the client device is in communication with;
• and
• by the client device and based on the detected deviation, carrying out at least one step of the group consisting of:
• alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point.

A computer implemented method of wireless communications access security, the method comprising steps a server computer is programmed to perform, the steps comprising:

• from each one of a plurality of client devices remote from the server computer, receiving at least one parameter set, each parameter set pertaining to a respective access point administrated by a party other than a user of the client device, and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the client device and the access point;
• deriving a reference set of values for each respective one of the access points from the received at least one parameter set pertaining to the access point, the reference set defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication with the access point;
• and
• providing at least one of the derived reference sets of values to a client device in remote communication with the server computer, thereby allowing the client device in remote communication with the server computer, to detect a deviation of at least one value extracted by the client device based on measurement of the at least one parameter during the wireless communication of the client device with the access point when the access point is active, from at least one of the at least one expected value defined by the provided reference set of values pertaining to the active access point, and based on the detected deviation, to carry out at least one step of the group consisting of:
• alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point.

An apparatus for wireless communications access security, the apparatus comprising:

• a computer processor of a server computer;
• a parameter receiver, implemented on said computer processor, configured to receive from each one of a plurality of client devices remote from the server computer, at least one parameter set, each parameter set pertaining to a respective access point administrated by a party other than a user of the client device, and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the access point and the client device;
• a function deriver, implemented on said computer processor, in communication with said parameter receiver, configured to derive a reference set of values for each respective one of the access points from the received at least one parameter set pertaining to the access point, the reference set defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication with the access point;
• and
• a function provider, implemented on said computer processor, in communication with said function deriver, configured to provide at least one of the derived reference sets of values to a client device in remote communication with the server computer, thereby allowing the client device in remote communication with the server computer, to detect a deviation of at least one value extracted by the client device based on measurement of the at least one parameter during the wireless communication of the client device with the access point when the access point is active, from at least one of the at least one expected value defined by the provided reference set of values pertaining to the active access point, and based on the detected deviation, to carry out at least one step of the group consisting of:
• alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point.

A non-transitory computer readable medium storing computer processor executable instructions for performing steps of wireless communications access security on a server computer, the steps comprising:

• from each one of a plurality of client devices remote from the server computer, receiving at least one parameter set, each parameter set pertaining to a respective access point administrated by a party other than a user of the client device, and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the client device and the access point;
• deriving a reference set of values for each respective one of the access points from the received at least one parameter set pertaining to the access point, the reference set defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication with the access point;
• and
• providing at least one of the derived reference sets of values to a client device in remote communication with the server computer, thereby allowing the client device in remote communication with the server computer, to detect a deviation of at least one value extracted by the client device based on measurement of the at least one parameter during the wireless communication of the client device with the access point when the access point is active, from at least one of the at least one expected value defined by the provided reference set of values pertaining to the active access point, and based on the detected deviation, to carry out at least one step of the group consisting of:
• alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point.