Network client validation of network management frames
AssigneeCisco Technology, Inc.
InventorsNancy Cam-Winget, Mark Krischer, Robert B. O'Hara, Jr.
Life of this patent
Estimating the term…
Abstract
Methods and systems for use in a wireless client that includes one or more wireless network interfaces for communicating with at least one access point wherein the method enables the wireless client to validate the authenticity and integrity of received management frames. The method includes receiving a protected wireless network management frame from an access point verifying a message integrity check (MIC) appended to the protected wireless network management frame. One or more security policies are then conditionally applied based on a failure to verify the MIC.
Claims17
In a wireless client that includes one or more wireless network interfaces for communicating with at least one access point, a method comprising:
- associating the wireless client with a wireless access point;
- authenticating the wireless client to an authentication server;
- and
- conditionally applying, at the wireless client, one or more security policies based on one or more anomalies detected by the wireless client during the authenticating to the authentication server, wherein at least one of the one or more applied security policies comprises recording data relating to the one or more anomalies and transmitting the data in a report of the one or more anomalies detected by the wireless client to a network in response to the one or more anomalies.
The method as recited in claim l further comprising:
- generating a session key with the wireless access point;
- and
- conditionally applying, at the wireless client, the one or more security policies based on a failure to generate the session key.
A wireless client comprising:
- a wireless network interface;
- one or more processors;
- a memory;
- a wireless network interface driver application, stored in the memory, including instructions operable to cause the one or more processors and the wireless network interface to:
- associate the wireless client with a wireless access point;
- authenticate the wireless client to an authentication server;
- and
- conditionally apply, at the wireless client, one or more security policies based on one or more anomalies detected by the wireless client during the authenticating to the authentication server, wherein at least one of the one or more applied security policies comprises recording data relating to the one or more anomalies and transmitting the data in a report of the one or more anomalies detected by the wireless client to a network in response to the one or more anomalies.
A computer-readable storage medium encoded with computer executable instructions, the computer executable instructions when executed operable to cause a processor and a wireless network interface to:
- establish a wireless network connection between a wireless client and a wireless access point;
- authenticate the wireless client to an authentication server;
- and
- conditionally apply, at the wireless client, one or more security policies based on one or more anomalies detected by the wireless client during the authenticating to the authentication server, wherein at least one of the one or more applied security policies comprises recording data relating to the one or more anomalies and transmitting the data in a report of the one or more anomalies detected by the wireless client to a network in response to the one or more anomalies.
Dependencies are inferred from the claim text.