Authentication failure in a wireless local area network
View Patent ↗In the event of an authentication process failure, a mobile station bans a connection profile storing the credentials provided by the mobile station when initiating the failed authentication process, thus affecting how subsequent scans—other than discovery scans—and connection attempts are handled. In the event of an authentication process failure, a mobile station bans or suppresses an access point with which the mobile station initiated the failed authentication process. The mobile station refrains from transmitting any communications addressed to the unique identifier of any banned access point. The mobile station may ignore any communications received from a banned access point. Suppressed access points are occasionally not made available to the mobile station for selection as a target for a connection attempt.
1. A method comprising:
a mobile station attempting to perform an authentication process with an access point;
the mobile station determining that the authentication process has failed and consequently banning the access point;
if, while the access point is banned, any scanning for wireless local area networks is performed by the mobile station thus resulting in the receipt by the mobile station of management frames from access points, the mobile station removing from the management frames any management frames received from the access point so that the access point is not eligible for selection by the mobile station as a target of a connection attempt; and
responsive to detecting at the mobile station that a connection profile that includes a network name has been edited, the mobile station un-banning all banned access points advertising the network name.
2. The method as claimed in claim 1 , further comprising:
the mobile station screening outgoing communications to block transmission of any communications addressed to the unique identifier.
3. The method as claimed in claim 1 , further comprising:
the mobile station screening outgoing communications to block addressing of any communications to the unique identifier.
4. The method as claimed in claim 1 , further comprising:
the mobile station ignoring any communications received from the access point while the access point is banned.
5. A method comprising:
a mobile station attempting to perform an authentication process with an access point that is identifiable by a unique identifier;
the mobile station determining that the authentication process has failed and consequently suppressing the access point;
while the access point is suppressed, if a number of subsequent failed attempts to perform an authentication process with the access point exceeds a threshold, the mobile station un-suppressing the access point and banning the access point and refraining from transmitting any communications addressed to the unique identifier while the access point is banned;
if, while the access point is suppressed, any scanning for wireless local area networks is performed by the mobile station thus resulting in the receipt by the mobile station of management frames from access points, the mobile station removing on some occasions from the management frames any management frames received from the access point so that the access point is not eligible for selection by the mobile station as a target of a connection attempt; and
on other occasions that the access point is suppressed, the mobile station permitting transmission of communications addressed to the unique identifier.
6. The method as claimed in claim 5 , further comprising:
the mobile station ignoring any communications received from the access point while the access point is banned.
7. The method as claimed in claim 5 , further comprising:
while the access point is suppressed, if a subsequent attempt to perform an authentication process with the access point succeeds, the mobile station un-suppressing the access point and permitting transmission of communications addressed to the unique identifier.
8. A mobile station comprising:
a processor;
a wireless local area network communication interface coupled to the processor;
a memory coupled to the processor, wherein the memory stores a driver for the wireless local area network communication interface,
wherein the driver, when executed by the processor, is arranged:
to determine whether an attempt by the mobile station to perform an authentication process with an access point has failed, wherein the access point is uniquely identifiable by a unique identifier,
to ban the access point as a consequence of having determined that the attempt has failed,
to detect that a connection profile that includes a network name has been edited and consequently to un-ban all banned access points advertising the network name, and
if, while the access point is banned, any scanning for wireless local area networks is performed by the mobile station thus resulting in the receipt by the mobile station of management frames from access points, to remove from the management frames any management frames received from the access point so that the access point is not eligible for selection by the mobile station as a target of a connection attempt.
9. A mobile station comprising:
a processor;
a wireless local area network communication interface coupled to the processor;
a memory coupled to the processor, wherein the memory stores a driver for the wireless local area network communication interface,
wherein the driver, when executed by the processor, is arranged:
to determine whether an attempt by the mobile station to perform an authentication process with an access point has failed, wherein the access point is uniquely identifiable by a unique identifier,
to suppress the access point as a consequence of having determined that the attempt has failed,
while the access point is suppressed, if a number of subsequent failed attempts to perform an authentication process with the access point exceeds a threshold, to un-suppress the access point and to ban the access point and to refrain from transmitting any communications addressed to the unique identifier while the access point is banned, and
if, while the access point is suppressed, any scanning for wireless local area networks is performed by the mobile station thus resulting in the receipt by the mobile station of management frames from access points, to remove on some occasions from the management frames any management frames received from the access point so that the access point is not eligible for selection by the mobile station as a target of a connection attempt, and
on other occasions that the access is suppressed, to permit transmission of communications addressed to the unique identifier.