Network device movement detection
Devices, systems, methods, and processes for detecting anomalous movements within network devices are described herein. Certain movements within networks devices are predictable and negligible. However, other movements may indicate a larger problem with the network, or network devices, especially when the network devices (e.g., access points) are within a stationary deployment. For example, a sudden movement of a network device may indicate that it has fallen, been moved, or is under threat of a physical attack. Many network devices are being deployed with various environmental sensors. These sensors can be utilized to detect movement of the network device. This can be done by evaluating the received signal strength indicator levels as well as the output of the environmental sensor. If an anomalous movement is detected, preventative actions can be taken such as rebooting or limiting access. This can be done on the network device or by a centralized management system.
1 . A device, comprising:
a processor;
at least one network interface controller configured to provide access to a network; and
a memory communicatively coupled to the processor, wherein the memory comprises a movement detection logic that is configured to:
receive at least one wireless signal from a second network device;
measure a received signal strength indicator (RSSI) level based on the at least one wireless signal;
evaluate one or more environmental sensor signals; and
determine an anomalous movement of the device from a static deployment based on comparing the one or more environmental sensor signals against a profile of acceptable movements.
2 . The device of claim 1 , wherein the RSSI level is compared against a first predetermined threshold.
3 . The device of claim 2 , wherein the evaluation of the one or more environmental sensor signals are evaluated in response to the RSSI level exceeding the first predetermined threshold.
4 . The device of claim 1 , wherein the RSSI levels are received from a plurality of external devices.
5 . The device of claim 4 , wherein the plurality of external devices is stationary at a fixed distance from the device.
6 . The device of claim 1 , wherein the one or more environmental sensor signals are evaluated over a period of time.
7 . The device of claim 6 , wherein the evaluation is configured to determine one or more deltas within the one or more environmental sensor signals.
8 . The device of claim 7 , wherein the determined one or more deltas are compared against a second predetermined threshold.
9 . The device of claim 8 , wherein the movement detection logic is further configured to generate a movement anomaly notification in response to at least one of the determined one or more deltas exceeded the second predetermined threshold.
10 . The device of claim 8 , wherein the second predetermined threshold is associated with a profile of acceptable device movements.
11 . The device of claim 8 , wherein the movement detection logic is further configured to execute one or more protective actions in response to at least one of the determined one or more deltas exceeded the second predetermined threshold.
12 . The device of claim 11 , wherein the one or more protective actions are at least one of: rebooting the device, adjusting one or more settings, or ceasing service to one or more clients.
13 . A device, comprising:
a processor;
at least one network interface controller configured to provide access to a network; and
a memory communicatively coupled to the processor, wherein the memory comprises a movement detection logic that is configured to:
receive at least one wireless signal from a second network device;
measure a received signal strength indicator (RSSI) level based on the at least one wireless signal;
measure one or more environmental sensor signals;
transmit the measured environmental sensor signals to an external management device;
receive a movement anomaly notification from the external management device indicating an anomalous movement of the device from a static deployment based on a comparison of the one or more environmental sensor signals against a profile of acceptable movements; and
execute one or more protective actions.
14 . The device of claim 13 , wherein the transmission further comprises the RSSI level associated with the at least one wireless signal.
15 . The device of claim 13 , wherein the RSSI level is compared against a first predetermined threshold.
16 . The device of claim 15 , wherein an evaluation of the one or more environmental sensor signals are evaluated in response to the RSSI level exceeding the first predetermined threshold.
17 . A management device, comprising:
a processor;
at least one network interface controller configured to provide access to a network; and
a memory communicatively coupled to the processor, wherein the memory comprises a movement detection logic that is configured to:
receive one or more environmental sensor signals from a network device;
evaluate the received one or more environmental sensor signals;
detect an anomalous movement of the network device from a static deployment based on comparing the one or more environmental sensor signals against a profile of acceptable movements;
generate a movement anomaly notification; and
transmit the movement anomaly notification to the network device.
18 . The management device of claim 17 , wherein the one or more environmental sensor signals are received and evaluated over a period of time.
19 . The management device of claim 17 , wherein, in response to the detection of an anomalous movement, the movement detection logic is further configured to:
request data from at least one additional network device in proximity to the network device;
receive data from the at least one additional network device;
evaluate if an anomalous movement is detected in one or more of the at least one additional network device; and
detect a multi-device movement anomaly in response to the detection of a similar anomalous movement in the at least one additional network device.
20 . The management device of claim 19 , wherein the movement detection logic is further configured to, in response to a multi-device movement anomaly being detected:
generate a plurality of protective actions; and
transmit the plurality of protective actions to the network devices associated with the multi-device movement anomaly.