IP Library Patent Application 14652768
Patent Application
App. No. 14/652,768

PREVENTING CLIENTS FROM ACCESSING A ROGUE ACCESS POINT

Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US None
App. No.
14/652,768
Abstract

According to an example, a detecting AP may determine whether a rogue AP is in the wireless network. In response to a determination that a rogue AP is in the wireless network, the detecting AP may obtain a wireless channel of the rogue AP and according to the wireless channel of the rogue AP, the detecting AP may transmit on the wireless channel of the rogue AP, a channel switch instruction to a client associated with the rogue AP by simulating an identity of the rogue AP. The channel switch instruction is to instruct the client to switch to a designated new channel.

Claims (35)

1 . A method for preventing clients from accessing a rogue Access Point (AP) in a wireless network, wherein the wireless network comprises a detecting AP, the method comprising:

determining, by the detecting AP, whether a rogue AP is in the wireless network;

in response to a determination that a rogue AP is in the wireless network, obtaining, by the detecting AP, a wireless channel of the rogue AP; and

transmitting, by the detecting AP, on the wireless channel of the rogue AP, a channel switch instruction to a client associated with the rogue AP by simulating an identity of the rogue AP to instruct the client to switch to a designated new channel.

2 . The method of claim 1 , further comprising:

following transmission of the channel switch instruction to the client, broadcasting a beacon packet on the designated new channel by simulating the identity of the rogue AP to instruct the client to associate with the detecting AP.

3 . The method of claim 1 , wherein transmitting the channel switch instruction on the wireless channel of the rogue AP to the client associated with the rogue AP by simulating the identity of the rogue AP comprises:

obtaining, by the detecting AP, basic service set identifier (BSSID) information of the rogue AP and a wireless user list of the rogue AP;

determining, by the detecting AP, the client associated with the rogue AP according to the wireless user list of the rogue AP; and

simulating, by the detecting AP, the identity of the rogue AP according to the BSSID information of the rogue AP and transmitting the channel switch instruction to the determined client associated with the rogue AP.

4 . The method of claim 3 , wherein the BSSID information of the rogue AP comprises a MAC address of the rogue AP and wherein simulating the identity of the rogue AP further comprises simulating the identity of the rogue AP by using the MAC address of the rogue AP as a source MAC address of the channel switch instruction.

5 . The method of claim 1 , wherein transmitting the channel switch instruction further comprises transmitting the channel switch instruction via a channel switch announcement element.

6 . The method of claim 1 , wherein the channel switch instruction comprises an index of the designated new channel and a time for switching to the designated new channel.

7 . A detecting Access Point (AP) to prevent clients from accessing a rogue AP in a wireless network, comprising:

a determining unit to determine whether a rogue AP is in the wireless network;

a recording unit to record a wireless channel of the rogue AP;

a channel switch indicating unit to transmit on the wireless channel of the rogue AP recorded by the recording unit a channel switch instruction to a client associated with the rogue AP by simulating an identity of the rogue AP to instruct the client to switch to a designated new channel; and

a processor to implement the determining unit, the recording unit, and the channel switch indicating unit.

8 . The detecting AP of claim 7 , further comprising:

a packet broadcasting unit to broadcast, on the designated new channel, a beacon packet by simulating the identity of the rogue AP after the detecting AP switches to the designated new channel to instruct the client to associate with the detecting AP.

9 . The detecting AP of claim 7 , wherein the recording unit is to record basic service set identifier (BSSID) information of the rogue AP and a wireless user list of the rogue AP;

the switch indicating unit is further to determine the client associated with the rogue AP according to the wireless user list of the rogue AP, simulate the identity of the rogue AP according to the BSSID information of the rogue AP and transmit the channel switch instruction to the client associated with the rogue AP.

10 . The detecting AP of claim 9 , wherein the BSSID information of the detecting AP comprises a MAC address of the rogue AP and wherein the switch indicating unit is further to use the MAC address of the rogue AP as a source MAC address of the channel switch instruction to simulate the identity of the rogue AP.

11 . The detecting AP of claim 7 , wherein the channel switch indicating unit is to transmit the channel switch instruction via a channel switch announcement element.

12 . The detecting AP of claim 7 , wherein the channel switch instruction comprises an index of the designated new channel and a time for switching to the designated new channel.

13 . A non-transitory computer readable storage medium on which is store machine readable instructions that when executed by a processor, cause the processor to:

determine whether a rogue AP is in the wireless network;

in response to a determination that a rogue AP is in the wireless network, obtain a wireless channel of the rogue AP; and

transmit on the wireless channel of the rogue AP, a channel switch instruction to a client associated with the rogue AP by simulating an identity of the rogue AP to instruct the client to switch to a designated new channel.

14 . The non-transitory computer readable storage medium of claim 13 , wherein the machine readable instructions are further to cause the processor to:

broadcast a beacon packet on the designated new channel by simulating the identity of the rogue AP to instruct the client to associate with the detecting AP.

15 . The non-transitory computer readable storage medium of claim 13 , wherein the machine readable instructions are further to cause the processor to:

obtain basic service set identifier (BSSID) information of the rogue AP and a wireless user list of the rogue AP;

determine the client associated with the rogue AP according to the wireless user list of the rogue AP; and

simulate the identity of the rogue AP according to the BSSID information of the rogue AP and transmit the channel switch instruction to the determined client associated with the rogue AP.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 22, 2016
From: H3C TECHNOLOGIES CO., LTD.; HANGZHOU H3C TECHNOLOGIES CO., LTD.
To: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Reel/Frame 039767/0263 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 6, 2015
From: ZHENG, TAO; ZHANG, HAITAO; XU, GUOXIANG; FU, ZHENYU
To: HANGZHOU H3C TECHNOLOGIES CO., LTD.
Reel/Frame 036002/0567 →