Granted Patent B2

US 7,965,842 · App. 10/184,750 · Granted Jun 21, 2011

Abstract

Claims (10)

1. A system for detecting unauthorized access points on a network, comprising:

a database of authorized access points; and

a server in a wired network configured to receive access point identification information from a wireless device, the serving being further configured to:

(1) query the database to determine whether the access point identification information corresponds to an authorized access point;

(2)(a) if an access point is found to be unauthorized, determine whether the access point is connected to the wired network by querying a MAC-address-to-vendor information table to determine whether the access point supports the Reverse Address Resolution Protocol and, if supported, issuing a Reverse Address Resolution Protocol request, wherein if the access point responds, the server assumes the access point is connected to the wired network; or

(2)(b) if an access point is found to be unauthorized, determine whether the access point is connected to the wired network by querying interface tables of one or more switches on the network, wherein if the address of the access point is present, the server assumes the access point is connected to the wired network;

(3) if the unauthorized access point is found not to be connected to the wired network, update a table comprising information of known access points that are not connected to the wired network; and

(4) if the unauthorized access point is found to be connected, disable communications between the network and the unauthorized access point.

2. The system of claim 1 , wherein the wireless device comprises an access point.

3. The system of claim 1 , wherein the wireless device comprises a mobile wireless unit.

Assignments (29)