IP Library Granted Patent US 7,885,602
Granted Patent B1
US 7,885,602 · App. 11/544,454 · Granted Feb 8, 2011

Wireless ad hoc network security

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,885,602
App. No.
11/544,454
Granted
Feb 8, 2011
Kind
B1
Abstract

Providing network security includes detecting network traffic associated with an ad hoc network that includes a first station and a second station, and preventing data sent by the first station from reaching the second station.

Claims (19)

1. A method of providing network security, comprising: detecting network traffic associated with an ad hoc network, the ad hoc network including a first station and a second station; and preventing data sent by the first station from reaching the second station, wherein preventing the first station from sending data to the second station includes sending decoy information to the first station and fragmenting the ad hoc network such that the first station and the second station are configured to be on separate networks, wherein the decoy information at least in part aims to induce the first station to send data to an unanticipated destination.

2. A method as recited in claim 1 , wherein the decoy information includes a beacon.

3. A method as recited in claim 1 , wherein the decoy information includes a beacon having a Basic Service Set Identifier (BSSID) that is different from the BSSID of the ad hoc network.

4. A method as recited in claim 1 , wherein detecting network traffic includes detecting a beacon sent by the first or the second station.

5. A method as recited in claim 1 , wherein:

detecting network traffic includes detecting a plurality of beacons sent by a plurality of stations associated with the ad hoc network, wherein the plurality of beacons include a plurality of timestamps assigned by the plurality of stations sending the plurality of beacons; and

sending the decoy information includes sending a decoy beacon that includes a decoy timestamp that is ahead of the plurality of timestamps.

6. A method as recited in claim 1 , further comprising preventing the second station from sending data to the first station.

7. A method as recited in claim 1 , further comprising continuing to monitor network traffic.

8. A method as recited in claim 1 , further comprising:

continuing to monitor network traffic;

detecting any ad hoc network related packet; and

in the event that an ad hoc network related packet is detected, determining if the packet includes an expected BSSID.

9. A method as recited in claim 1 , wherein the decoy information includes Transmission Control Protocol (TCP) information.

10. A method as recited in claim 1 , wherein the decoy information includes information associated with a probe response packet.

11. A method as recited in claim 1 , wherein the decoy information includes channel information.

12. A non-transitory computer readable medium comprises a computer program product for providing network security, the computer program product being embodied in the non-transitory computer readable medium and comprising computer instructions for: detecting network traffic associated with an ad hoc network, the ad hoc network including a first station and a second station; and preventing data sent by the first station from reaching the second station, wherein preventing the first station from sending data to the second station includes sending decoy information to the first station and fragmenting the ad hoc network such that the first station and the second station are configured to be on separate networks, wherein the decoy information at least in part aims to induce the first station to send data to an unanticipated destination.

13. A non-transitory computer readable medium as recited in claim 12 , wherein the decoy information includes a beacon.

14. A network security system, including: a processor configured to detect network traffic associated with an ad hoc network, the ad hoc network including a first station and a second station, wherein preventing the first station from sending data to the second station includes sending decoy information to the first station and fragmenting the ad hoc network such that the first station and the second station are configured to be on separate networks, and to prevent data sent by the first station from reaching the second station; and a memory coupled with the processor, configured to provide the processor with instructions, wherein the decoy information at least in part aims to induce the first station to send data to an unanticipated destination.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 11, 2018
From: ARUBA NETWORKS, INC.
To: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Reel/Frame 045921/0055 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 10, 2015
From: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
To: ARUBA NETWORKS, INC.
Reel/Frame 036379/0274 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 3, 2015
From: ARUBA NETWORKS, INC.
To: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
Reel/Frame 035814/0518 →