Access point port security system
Access point network equipment has communication ports that allow communications with other network components and a cloud based AP device management system having an Auto Configuration Service (ACS). Communications cables coupled to ports can be easily removed and replaced with unauthorized devices that have access to the network creating a security breach. When an authorized cable or plug is removed from a port, a link down event can be detected by tamper detection software running on the access point network equipment and the link down event information can be transmitted to the cloud/Map service. When a link down events is detected, the cloud/ACS transmits instructions to the access point network equipment to perform various possible security actions to protect the network.
1 . A network security system comprising:
a network access point (AP) equipment having an AP processor, a plurality of registered jack (RJ) communication connector ports, and electrical contacts in each of the plurality of RJ communication connector ports;
a first RJ connector plug in a first port of the plurality of RJ communication connector ports, the first RJ connector plug having a plurality of conductive connectors in contact with the electrical contacts in the first port wherein a first pair of the plurality of conductive connectors in the first RJ connector plug are electrically coupled to each other to form a closed circuit; and
a communications cable connector plug in a second port of the plurality of RJ communication connector ports, the communications cable connector plug having a plurality of conductive connectors for transmitting signals to and from the network access point equipment;
a server computer in communication with the network access point equipment, the server computer having a server memory;
wherein the AP processor is configured to detect a tamper condition at the first port corresponding to a change in an electrical condition associated with the closed circuit formed by the electrically coupled first pair of conductive connectors when the first RJ connector plug is removed from the first port, and to detect a link down event at the second port when the communications cable connector plug is removed from the second port, and to transmit tamper detection data corresponding to the detected tamper condition or the detected link down event to the server computer.
2 . The network security system of claim 1 , further comprising:
a locking cover secured around the first RJ connector plug to prevent removal of the first RJ connector plug from the network access point equipment.
3 . The network security system of claim 1 , wherein a second pair of the plurality of conductive connectors are electrically coupled in the first RJ connector plug and the server memory stores the normal electrical signals that includes the second pair of the plurality of conductive connectors that are electrically coupled to each other and not electrically coupled to the first pair of the plurality of conductive connectors, and the server processor compares an electrical signal from the electrical contacts in the second pair of the plurality of conductive connectors to the normal electrical signals stored in the server memory to identify the link down event.
4 . The network security system of claim 3 , wherein a third pair of the plurality of conductive connectors are electrically coupled in the first RJ connector plug and the server memory stores the normal electrical signals that includes the third pair of the plurality of conductive connectors that are electrically coupled to each other and not electrically coupled to the first pair or the second pair of the plurality of conductive connectors, and the server processor compares an electrical signal from the electrical contacts in the third pair of the plurality of conductive connectors to the normal electrical signals stored in the server memory to identify the link down event.
5 . The network security system of claim 1 , further comprising:
a communications cable connector plug in a second of the plurality of RJ communication connector ports, the communications cable connector plug having a second plurality of conductive connectors in contact with the electrical contacts in the second of the plurality of RJ communication connector ports;
wherein the AP processor is coupled to the electrical contacts in the plurality of RJ communication connector ports and the server processor is configured to receive a link down event signal from the AP processor when the communications cable connector plug is removed from the second of the plurality of RJ communication connector ports.
6 . The network security system of claim 5 , wherein the server memory stores normal electrical signals from the communications cable connector plug and the server processor compares a current electrical signal from the communications cable connector plug to the normal electrical signals to identify the link down event.
7 . The network security system of claim 1 , wherein the network access point equipment has a transmitter for transmitting link down event information about the link down event to the server.
8 . The network security system of claim 7 , wherein tamper detection software running on the server processor transmits instructions to the AP processor to disable the first port when the link down event is detected by the tamper detection software running on the network access point equipment.
9 . The network security system of claim 7 , further comprising:
a fuse electrically coupled to a power supply of the AP equipment;
wherein the tamper software running on the server processor instructs the AP processor to increase electrical power applied to destroy the fuse when the link down event is detected by the tamper detection software running on the network access point equipment.
10 . The network security system of claim 7 , further comprising:
a thin trace electrically coupled to a power supply of the AP equipment;
wherein the tamper software running on the server processor instructs the AP processor to increase electrical power applied to destroy the thin trace when the link down event is detected by the tamper detection software running on the network access point equipment.
11 . A network security system comprising:
a network access point (AP) equipment having an AP processor, a plurality of registered jack (RJ) communication connector ports, electrical contacts in the plurality of RJ communication connector ports, and tamper detection software running on the AP processor;
a first RJ connector plug in a first port of the plurality of RJ communication connector ports of the network access point equipment, the first RJ connector plug having a plurality of conductive connectors in contact with the electrical contacts in the first port and a first pair of the plurality of conductive connectors in the first RJ connector plug permanently electrically coupled to each other to form a closed circuit;
a communications cable connector plug in a second port of the plurality of RJ communication connector ports, the communications cable connector plug having a plurality of conductive connectors for transmitting signals to and from the network access point equipment; and
a server computer in communication with the network access point equipment, the server computer having a server memory;
wherein the tamper detection software running on the AP processor is configured to detect a tamper condition at the first port corresponding to a change in an electrical condition associated with the closed circuit formed by the electrically coupled first pair of conductive connectors when the first RJ connector plug is removed from the first port, and to detect a link down event at the second port when the communications cable connector plug is removed from the second port, and the tamper detection software is configured to transmit tamper detection data corresponding to the detected tamper condition or the detected link down event to the server computer.
12 . The network security system of claim 11 , further comprising:
a locking cover secured around the communications cable connector plug to prevent removal of the communications cable connector plug from the second port in the network access point equipment.
13 . The network security system of claim 11 , wherein a second pair of the plurality of conductive connectors are electrically coupled in the first RJ connector plug and the server memory stores the normal electrical signals that include the second pair of the plurality of conductive connectors that are electrically coupled and the server processor compares electrical signals from the electrical contacts in the second pair of the plurality of conductive connectors to the normal electrical signals stored in the server memory to identify the link down event.
14 . The network security system of claim 11 , wherein the server computer has a transmitter for transmitting link down event information about the link down event detected by the tamper software from the network access point equipment to an administrator computing device.
15 . The network security system of claim 11 , wherein the tamper detection software running on the AP processor of the network access point equipment disables the first port in response to instructions from the server computer when the link down event is detected by the tamper detection software running on the network access point equipment.
16 . The network security system of claim 11 , wherein the network access point equipment has a fuse electrically coupled to the power supply and the tamper detection software running on the AP processor of the network access point equipment increases electrical power applied to the fuse to destroy the fuse in response to instructions from the server computer when the link down event is detected by the tamper detection software running on the network access point equipment.
17 . The network security system of claim 11 , wherein the network access point equipment has a thin trace electrically coupled to the power supply and the tamper detection software running on the AP processor increases electrical power applied to the thin trace to destroy the thin trace in response to instructions from the server computer when the link down event is detected by the tamper detection software running on the network access point equipment.