Granted Patent B2

US 8,782,745 · App. 11/467,495 · Granted Jul 15, 2014

Abstract

Claims (34)

1. In a public wireless network where users connect to the network through a wireless access point, a system for detecting unauthorized access points, comprising:

a monitoring device connected to the network that simulates a user and requests connection to the network through an available access point; and

an authentication server that authenticates users and maintains a configuration file with an identifier associated with each authorized access point for the network;

wherein the monitoring device requests an identifier from the available access point, the requested identifier identifying the available access point, and wherein the authentication server compares the requested identifier with each identifier in the configuration file, in order to determine whether the available access point is an authorized access point.

2. The system of claim 1 , wherein a physical location is determined for any available access point that does not have an associated identifier in the configuration file.

3. The system of claim 2 , wherein triangulation methods are used to determine the location of the unauthorized access point.

4. The system of claim 3 , wherein there is further maintained in the configuration file an identifier for any access point that is determined to be an access point of a legitimate, nearby network.

5. The system of claim 1 , wherein the monitoring device is a programmed element of an authorized access point.

6. The system of claim 1 , wherein the monitoring device is a device separate from any authorized access point.

7. The system of claim 1 , wherein the network has multiple authorized access points.

8. The system of claim 1 , wherein the network is a WiFi network.

9. The system of claim 1 , wherein the network connects a user to the internet.

10. The system of claim 1 , wherein an alert is provided by the authentication server when the available access point is not an authorized access point.

11. A method for detecting unauthorized access points in a public wireless network serving wireless users within a predetermined geographical area, comprising:

storing an identifier associated with one or more authorized access points for the network;

providing a monitoring client that simulates a user for detecting available wireless access points within the area;

requesting, with the monitoring client, an identifier from an available access point, wherein the identifier identifies the available access point;

determining an identity of the available access point, based at least in part on the identifier;

comparing, with an authentication server, the identity of the available access point with the stored identifier associated with the authorized access point; and

authenticating users, with the authentication server.

12. The method of claim 11 , further comprising:

determining the physical location of any available access points that do not have a stored associated identifier.

13. The method of claim 11 , wherein the monitoring client is a device separate from any authorized access point.

14. The method of claim 11 , wherein the network has multiple authorized access points.

15. The method of claim 11 , wherein the network is a WiFi network.

16. The method of claim 15 , wherein the network connects a user to the internet.

17. The method of claim 11 , further comprising:

providing an alert from the authentication server when an available access point is not an authorized access point.

18. The system of claim 1 wherein,

the identifier comprises one of a MAC address and a SSID; and

the authentication server is adapted to detect a rogue access point when more than one available access point is using the same MAC address or SSID.

19. The method of claim 11 wherein,

the stored identifier and the identifier comprise one of a MAC address and a SSID; and further comprising,

detecting a rogue when more than one available access point is using the same MAC address or SSID.

Assignments (7)