Wireless network security
View Patent ↗The present invention is secure wireless network. The secure wireless network can include multiple receiver nodes coupled to corresponding high-precision clocks. Each of the receiver nodes can be configured to receive wireless frames transmitted both within and outside a secured geographic area covered by the secure wireless network. A master synchronization high-precision clock can be coupled to the corresponding high-precision clocks. Additionally, a position location system can be coupled to the receiver nodes. Specifically, the position location system can be programmed to compute estimated positions for individual ones of wireless nodes transmitting the wireless frames. Finally, access management logic can be coupled to the position location system. More particularly, the access management logic can be configured to manage access to the wireless network by the individual ones of the wireless nodes based upon the computed estimated positions.
1. A secure wireless network comprising:
a plurality of receiver nodes coupled to corresponding high-precision clocks and configured to receive unsolicited wireless frames transmitted both from within and outside a secured geographic area covered by the secure wireless network;
a master synchronization high-precision clock coupled to said corresponding high-precision clocks;
a position location system coupled to said receiver nodes and programmed to compute estimated positions for individual ones of wireless nodes transmitting said wireless frames; and,
access management logic coupled to said position location system and configured to manage access to the wireless network by said individual ones of said wireless nodes based upon said computed estimated positions.
2. The secure wireless network of claim 1 , wherein said high-precision clocks and said master synchronization high-precision clock comprises nano-second resolution.
3. The secure wireless network of claim 1 , wherein said position location system comprises at least one two-dimensional position location system selected from the group consisting of a hyperbolic position location system and an elliptical position location system.
4. The secure wireless network of claim 1 , wherein said position location system comprises at least one three-dimensional position location system selected from the group consisting of a hyperboloidic position location system and an ellipsoid position location system.
5. The secure wireless network of claim 1 , wherein said access management logic comprises a mapping of said secured geographic area and one of an iconic and a textual indication of said computed estimated positions of said wireless nodes transmitting said wireless frames to said receiver nodes.
6. The secure wireless network of claim 1 , further comprising a receiver node configurator programmed both to compute a range between a corresponding one of said receiver nodes and others of said receiver nodes, and to alert an operator when a receiver node has been moved.
7. A method for securing a wireless network from rogue access by unauthorized wireless nodes attempting to transmit wireless frames onto the wireless network, the method comprising the steps of:
synchronizing individual high-precision clocks in different ones of at least four receiver nodes positioned in a secured area contained within said wireless network;
receiving an unsolicited wireless frame in at least three of said at least four receiver nodes;
responsive to said receipt of said unsolicited wireless frame in each of said receiver nodes, recording a time stamp denoting when said unsolicited wireless frame had been received;
for each pair of receiver nodes which have each received said unsolicited wireless frame, comparing said time stamps between said pairs to compute a set of differential hyperbolas;
identifying an intersection between said differential hyperbolas to establish a two-dimensional position estimate of a wireless node source of said unsolicited wireless frame; and,
managing access to the wireless network by said wireless node source based upon said position estimate.
8. The method of claim 7 , wherein said receiving step comprises the step of receiving an unsolicited wireless frame in at least four of said receiver nodes.
9. The method of claim 8 , wherein said comparing step comprises the step of for each set of three of receiver nodes which have each received said unsolicited wireless frame, comparing said time stamps between said three receiver nodes to compute a set of differential hyperboloids, and wherein said identifying step comprises the step of identifying an intersection between said differential hyperboloids to establish a three-dimensional position estimate of a wireless node source of said unsolicited wireless frame.
10. The method of claim 9 , wherein said managing step comprises the steps of:
displaying a visual three-dimensional mapping of said secured area; and,
noting on said visual three-dimensional mapping said three-dimensional position estimate of said wireless node source of said unsolicited wireless frame.
11. A machine readable storage having stored thereon a computer program for securing a wireless network from rogue access by unauthorized wireless nodes attempting to transmit wireless frames onto the wireless network, the computer program comprising a routine set of instructions which when executed by the machine cause the machine to perform the steps of:
synchronizing individual high-precision clocks in different ones of at least four receiver nodes positioned in a secured area contained within said wireless network;
receiving an unsolicited wireless frame in at least three of said receiver nodes; responsive to said receipt of said unsolicited wireless frame in each of said receiver nodes, recording a time stamp denoting when said unsolicited wireless frame had been received;
for each pair of receiver nodes which have each received said unsolicited wireless frame, comparing said time stamps between said pairs to compute a set of differential hyperbolas;
identifying an intersection between said differential hyperbolas to establish a position estimate of a wireless node source of said unsolicited wireless frame; and,
managing access to the wireless network by said wireless node source based upon said position estimate.
12. The machine readable storage of claim 11 , wherein said receiving step comprises the step of receiving an unsolicited wireless frame in at least four of said receiver nodes.
13. The machine readable storage of claim 12 , wherein said comparing step comprises the step of for each set of three of receiver nodes which have each received said unsolicited wireless frame, comparing said time stamps between said three receiver nodes to compute a set of differential hyperboloids, and wherein said identifying step comprises the step of identifying an intersection between said differential hyperboloids to establish a three-dimensional position estimate of a wireless node source of said unsolicited wireless frame.
14. The machine readable storage of claim 13 , wherein said managing step comprises the steps of:
displaying a visual three-dimensional mapping of said secured area; and,
noting on said visual three-dimensional mapping said three-dimensional position estimate of said wireless node source of said unsolicited wireless frame.