IP Library Granted Patent US 7,380,268
Granted Patent B2
US 7,380,268 · App. 10/507,546 · Granted May 27, 2008

Methods apparatus and program products for wireless access points

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,380,268
App. No.
10/507,546
Granted
May 27, 2008
Kind
B2
Abstract

Methods, apparatus and program products which monitor wireless access points ( 12, 16 ) through which data can be exchanged with a network ( 10 ), identify an unauthorized access point ( 16 ), and respond to monitored data flow in a variety of manners including determining the location of the identified unauthorized access point, establishing filtering, and controlling accounting for access services.

Claims (40)

1. A method comprising

monitoring access points through which data can be exchanged with a network;

identifying an unauthorized access point;

in response to an unauthorized access point being identified, determining make, model and default configuration password of said identified unauthorized access point by monitoring traffic passing through said identified unauthorized access point;

addressing said identified unauthorized access point using said determined default configuration password; and

after gaining access thereto, reconfiguring said unauthorized access point to add an identity of said identified unauthorized access point to registers of ports for which charges are allocated such that access charges can be accumulated against said identity.

2. The method according to claim 1 , further comprising determining a geographical location of said identified unauthorized access point.

3. The method according to one of claims 1 and 2 , further comprising applying traffic filtering to monitored traffic passing through said identified unauthorized access point.

4. The method according to one of claims 1 through 3 , further comprising accumulating charges for access and usage of network resources identified to said identified unauthorized access point.

5. The method according to one of claims 1 through 4 , wherein said identifying further includes comparing identities of monitored access points with a database of authorized access points.

6. The method according to claim 5 , wherein said monitoring further includes equipping each of a plurality of computer devices to detect access points accessible to said computer devices and to report to a server computer system identities of detected access points.

7. The method according to claim 5 , wherein said monitoring further includes querying network nodes for recent entries into node identifying connectivity tables maintained at said network nodes.

8. The method according to one of claims 6 and 7 , wherein said monitoring is performed intermittently and periodically.

9. The method according to claim 8 , wherein said monitoring is performed at predetermined regular intervals.

10. The method according to claim 8 , wherein said monitoring is performed at random irregular intervals.

11. The method according to claim 2 , wherein said determining geographic location further includes comparing locations of a plurality of computer devices all of which report detection of said identified unauthorized access point.

12. The method according to claim 3 , wherein said applying further includes denying access to said network through said identified unauthorized access point.

13. An apparatus comprising:

a computer system;

a network interface connected to said computer system to provide a communication channel between said computer system and a network;

means for monitoring access points through which data can be exchanged with said network;

means for identifying an unauthorized access point;

means for, in response to an unauthorized access point being identified, determining make, model and default configuration password of said identified unauthorized access point by monitoring traffic passing through said identified unauthorized access point;

means for addressing said identified unauthorized access point using said determined default configuration password; and

means for, after gaining access thereto, reconfiguring said unauthorized access point to add an identity of said identified unauthorized access point to registers of ports for which charges are allocated such that access charges can be accumulated against said identity.

14. The apparatus according to claim 13 , wherein said computer system is a workstation computer system.

15. The apparatus according to claim 13 , wherein said computer system is a server computer system.

16. The apparatus according to one of claims 14 and 15 , further comprising a geographical location determining program effective when executing to derive said physical location of an unauthorized access point.

17. The apparatus according to one of claims 14 through 16 , further comprising a traffic filter controlling program effective when executing to selectively impose a filter on traffic exchanged with said network through an unauthorized node.

18. The apparatus according to one of claims 14 through 17 , further comprising an accounting control program effective when executing to accumulate charges for access and usage of network resources identified to said identified unauthorized access point.

19. A computer storage medium having a computer program product comprising:

computer program code for monitoring access points through which data can be exchanged with a network;

computer program code for identifying an unauthorized access point;

computer program code for, in response to an unauthorized access point being identified, determining make, model and default configuration password of said identified unauthorized access point by monitoring traffic passing through said identified unauthorized access point;

computer program code for addressing said identified unauthorized access point using said determined default configuration password; and

computer program code for, after gaining access thereto, reconfiguring said unauthorized access point to add an identity of said identified unauthorized access point to registers of ports for which charges are allocated such that access charges can be accumulated against said identity.

20. The computer storage medium according to claim 19 , wherein said computer storage medium further includes computer program code for determining a geographical location of said identified unauthorized access point.

21. The computer storage medium according to one of claims 19 and 20 , wherein said computer storage medium further includes computer program code for applying traffic filtering to monitored traffic passing through said identified unauthorized access point.

22. The computer storage medium according to one of claims 19 through 21 , wherein said computer storage medium further includes computer program code for accumulating charges for access and usage of network resources identified to said identified unauthorized access point.

23. The computer storage medium according to one of claims 19 through 22 , wherein said computer storage medium further includes computer program code for comparing identity of monitored access points with a database of authorized access points.

Assignments (4)
NUNC PRO TUNC ASSIGNMENT Recorded Nov 25, 2015
From: LENOVO (SINGAPORE) PTE LTD.
To: LENOVO PC INTERNATIONAL
Reel/Frame 037160/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 4, 2005
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: LENOVO (SINGAPORE) PTE LTD.
Reel/Frame 016891/0507 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 8, 2005
From: CHALLENER, DAVID C.; KUMP, GARRY M.; NOEL, FRANCIS E. JR.; SAFFORD, DAVID R.; SCHALES, DOUGLAS L.; VAN DOORN, LEENDERT P.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 015855/0970 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 8, 2005
From: CHALLENER, DAVID C.; KUMP, GARRY M.; NOEL, FRANCIS E. JR.; SAFFORD, DAVID R.; SCHALES, DOUGLAS L.; DOOM, LEENDERT P. VAN
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 016341/0052 →